ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:07:05 executing program 1: creat(0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:07:05 executing program 4: fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='stat\x00') ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000000c0)={0x80000000, 0x40, 0x6, 0x1, 0x8, 0x3}) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}) fcntl$notify(r1, 0x402, 0x2571fc6deb7a34c0) getdents(r1, &(0x7f00000001c0)=""/4096, 0x1000) close_range(r1, r1, 0x0) getdents(r1, &(0x7f0000000040)=""/2, 0x2) [ 934.983305] No source specified [ 934.988006] No source specified 23:07:05 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000480)={'tunl0\x00', r1, 0x7800, 0x1, 0x1000, 0x40, {{0xd, 0x4, 0x3, 0x32, 0x34, 0x66, 0x0, 0x3, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x17, 0xd9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x14}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @generic={0x86, 0x3, "88"}, @generic={0x94, 0x4, "2ca0"}, @noop]}}}}}) sendmmsg$inet(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="ab275f3e6785", 0x6}, {&(0x7f00000000c0)="2a34794ae63b4e352425992d25ba7ab3f7088dc80059025135fd454c511405ed6d21cd8c2eaccb07f97af40e5dc70aecc0bfe2", 0x33}], 0x2, &(0x7f0000000240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x90}}, {{&(0x7f0000000180)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000300)="c7f1a7b62971856d0078c89bfe4eb6eec4294073cc9ea2c3c64d0dedf2927cd73e40214121b0f64dd56af52c84c20eb7035415fa40881f9e47f98e57940847f8d592d271c4dac71159e80d77ebb2961852c5e0586aec59eda9ae922ecf0e87c88040b3f2ef5a", 0x66}, {&(0x7f0000000380)="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", 0xfe}], 0x2, &(0x7f0000000ac0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0xe2, [@local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}, @generic={0x4f, 0x4, "ca77"}, @rr={0x7, 0xf, 0xe7, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @rr={0x7, 0x3, 0xca}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1f21}}, @ip_retopts={{0x78, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x4e, 0x0, 0xa, [0x8, 0x3, 0xcc000000, 0x1, 0x200, 0x6, 0x1f]}, @rr={0x7, 0x13, 0x4a, [@local, @empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x1b, 0xee, [@multicast1, @multicast2, @empty, @loopback, @remote, @remote]}, @timestamp_addr={0x44, 0xc, 0x18, 0x1, 0x7, [{@loopback, 0x9a3}]}, @generic={0x86, 0xc, "f20d332dc362a48734b7"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x138}}, {{&(0x7f00000005c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000600)="d400652e5ef411cab96f0242f6a501bcfaaf407f58bd6680d0324fe3b344d6f80cc7facf6d522618ca6a5c394f5f5cc312725c99cb0c1717914512e3945bbb43f4b8b677f898528d74c7dc0f2c4020706726227e1bc8e5e6efb38d1dd689", 0x5e}, {&(0x7f0000000680)="cd42b52f3110538a2e32a937913092b578555ce26a4352b6e0679bdd570d7b89dce78b166a7172ee0c25d254fed41ab4e46ba7532e0154fe904d50f9aa12d9c2", 0x40}, {&(0x7f00000006c0)="85734a0bfa1a953e2141e9a24e8acc0b23ec52f0a904236b346aa8fb0cc0c92022efafdff97429f2462e2efe7d3fdeee705e10a505d6f5208677d9b4c315a7fe6d353d9253f916935adfbedc4138f853b44bcce5c9ae4864b79a94c6232f9cecdbf4ff5b9d6bcea954e3a5037e6c3ede3e216c568f027f31b34460e12655150567d17076eb6c2bbb9be41784e479aff19d2a464978774a93d0c15a911582b2ed83bdf94af3f6a537965e4a8d6e07ea", 0xaf}, {&(0x7f0000000780)="55c05cf1f2b2538a4a1171ec769619d30c16063fc1c5add989ca8accbd470f782c76598864e5a8fb072d888752babdcf8a03f798fbfabb22fe10443cab3e6ad73f968b37eb5805d3d37e65f5bf114b196dbe9546fce05cea28d2647428c2c49875599f5b5898171f", 0x68}], 0x4, &(0x7f0000000840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x15}, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x38}}], 0x3, 0x815) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x8, 0x80, 0x31, 0x4}, {0x1, 0x7, 0x3, 0x800}, {0x2f7b, 0x5, 0x2, 0x5}, {0xa69, 0x2, 0x1, 0x1}, {0x5, 0x6, 0x1c, 0xda}]}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={r1, 0x1, 0x6, @random="000300"}, 0x10) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000940)=0xffffffffffffffff) 23:07:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) (fail_nth: 97) 23:07:05 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 935.146337] FAULT_INJECTION: forcing a failure. [ 935.146337] name failslab, interval 1, probability 0, space 0, times 0 [ 935.147333] CPU: 1 UID: 0 PID: 8527 Comm: syz-executor.2 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 935.147350] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 935.147358] Call Trace: [ 935.147363] [ 935.147368] dump_stack_lvl+0xfa/0x120 [ 935.147398] should_fail_ex+0x4d7/0x5e0 [ 935.147414] ? __d_alloc+0x31/0xa10 [ 935.147427] should_failslab+0xc2/0x120 [ 935.147442] kmem_cache_alloc_lru_noprof+0x84/0x690 [ 935.147461] ? perf_trace_lock+0xb5/0x5d0 [ 935.147485] ? __d_alloc+0x31/0xa10 [ 935.147495] __d_alloc+0x31/0xa10 [ 935.147510] d_alloc_parallel+0x112/0x13c0 [ 935.147531] ? __d_lookup+0x255/0x490 [ 935.147546] ? lock_release+0xc8/0x290 [ 935.147566] ? lock_is_held_type+0x9e/0x120 [ 935.147589] ? __pfx_d_alloc_parallel+0x10/0x10 [ 935.147606] ? __d_lookup+0x25f/0x490 [ 935.147621] ? lockdep_init_map_type+0x4b/0x240 [ 935.147639] ? lockdep_init_map_type+0x4b/0x240 [ 935.147661] proc_fill_cache+0x2ea/0x470 [ 935.147678] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 935.147692] ? __pfx_proc_fill_cache+0x10/0x10 [ 935.147707] ? __pfx_vsnprintf+0x10/0x10 [ 935.147732] ? snprintf+0xbe/0x100 [ 935.147755] ? fget_task_next+0x2d1/0x590 [ 935.147779] proc_readfd_common+0x1f1/0x5f0 [ 935.147791] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 935.147805] ? __pfx_proc_readfd_common+0x10/0x10 [ 935.147818] ? down_read_killable+0x1d4/0x4f0 [ 935.147833] ? __pfx_down_read_killable+0x10/0x10 [ 935.147844] ? avc_policy_seqno+0x9/0x20 [ 935.147866] iterate_dir+0x1e8/0x5f0 [ 935.147884] __x64_sys_getdents+0x13d/0x2c0 [ 935.147901] ? __pfx___x64_sys_getdents+0x10/0x10 [ 935.147917] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 935.147939] ? __pfx_filldir+0x10/0x10 [ 935.147963] do_syscall_64+0xbf/0x430 [ 935.147981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.147994] RIP: 0033:0x7fdede60db19 [ 935.148004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 935.148016] RSP: 002b:00007fdedbb83188 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 935.148028] RAX: ffffffffffffffda RBX: 00007fdede720f60 RCX: 00007fdede60db19 [ 935.148036] RDX: 0000000000001000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 935.148044] RBP: 00007fdedbb831d0 R08: 0000000000000000 R09: 0000000000000000 [ 935.148052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 935.148059] R13: 00007ffccaccba8f R14: 00007fdedbb83300 R15: 0000000000022000 [ 935.148077] 23:07:15 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x0, 0xfffffffffffffffb, 0x4a, 0x7, @scatter={0x3, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/28, 0x1c}, {&(0x7f0000000080)=""/8, 0x8}, {&(0x7f0000000140)=""/88, 0x58}]}, &(0x7f0000000240)="0da94718abb6f3fed1c71e8fe6559fdf177d7f06b2c5f5b4155153f1e0105c360eed991ca56c18e896d57d1d15d2aaae88032af8fb6540c345f9aba6818c6bdd8490f3e45d0df656f94d", &(0x7f00000001c0)=""/53, 0x4, 0x30, 0x0, &(0x7f00000002c0)}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r3, 0x1, 0x6, @multicast}, 0x10) 23:07:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) pread64(r0, &(0x7f0000000040)=""/81, 0x51, 0x1) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:07:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:07:15 executing program 1: creat(0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:07:15 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:07:15 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:07:15 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:07:15 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) (fail_nth: 98) 23:07:15 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:07:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r0, &(0x7f00000011c0)=""/4080, 0xff0) [ 945.435937] No source specified [ 945.443643] No source specified [ 945.472290] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 945.481561] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:07:15 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:07:15 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) (fail_nth: 99) [ 945.520648] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 945.525644] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:07:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:07:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RRENAME(r2, &(0x7f0000000080)={0x7, 0x15, 0x2}, 0x7) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x1) 23:07:16 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:07:16 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:07:16 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000001700)={r6, 0x1, 0x6, @multicast}, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r1, &(0x7f0000001740)=[{{&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)=""/139, 0x8b}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000000340)=""/99, 0x63}, {&(0x7f00000003c0)=""/73, 0x49}, {&(0x7f0000000480)=""/249, 0xf9}, {&(0x7f0000000580)=""/3, 0x3}, {&(0x7f00000005c0)=""/20, 0x14}, {&(0x7f0000000600)=""/21, 0x15}], 0x8, &(0x7f00000006c0)=""/31, 0x1f}, 0x6}, {{&(0x7f0000000700)=@alg, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/21, 0x15}, {&(0x7f00000007c0)=""/37, 0x25}, {&(0x7f0000000800)=""/132, 0x84}, {&(0x7f00000008c0)=""/235, 0xeb}], 0x4, &(0x7f0000000a00)=""/175, 0xaf}, 0x9}, {{&(0x7f0000000ac0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b40)=""/45, 0x2d}, {&(0x7f0000000b80)=""/84, 0x54}], 0x2, &(0x7f0000000c40)=""/26, 0x1a}, 0x101}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000c80)=""/98, 0x62}, {&(0x7f0000000d00)=""/93, 0x5d}, {&(0x7f0000000d80)=""/167, 0xa7}, {&(0x7f0000000e40)=""/61, 0x3d}, {&(0x7f0000000e80)=""/2, 0x2}, {&(0x7f0000000ec0)=""/243, 0xf3}, {&(0x7f0000000fc0)=""/179, 0xb3}, {&(0x7f0000001080)=""/114, 0x72}, {&(0x7f0000001100)=""/147, 0x93}], 0x9, &(0x7f0000001280)=""/243, 0xf3}, 0xff}, {{&(0x7f0000001380)=@generic, 0x80, &(0x7f0000001500)=[{&(0x7f0000001400)=""/109, 0x6d}, {&(0x7f0000001480)=""/86, 0x56}], 0x2, &(0x7f0000001540)=""/177, 0xb1}, 0x3f11}], 0x5, 0x40000020, &(0x7f0000001640)) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @broadcast}, 0xfe56) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @broadcast}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000001600)=0xc) ioctl$int_out(r8, 0x2, &(0x7f0000000040)) [ 945.718041] No source specified 23:07:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000, 0x14c) [ 945.727396] No source specified 23:07:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) (fail_nth: 100) [ 945.769580] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 945.852463] FAULT_INJECTION: forcing a failure. [ 945.852463] name failslab, interval 1, probability 0, space 0, times 0 [ 945.854402] CPU: 1 UID: 0 PID: 8579 Comm: syz-executor.2 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 945.854433] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 945.854446] Call Trace: [ 945.854453] [ 945.854462] dump_stack_lvl+0xfa/0x120 [ 945.854506] should_fail_ex+0x4d7/0x5e0 [ 945.854532] ? __d_alloc+0x31/0xa10 [ 945.854554] should_failslab+0xc2/0x120 [ 945.854578] kmem_cache_alloc_lru_noprof+0x84/0x690 [ 945.854610] ? perf_trace_lock+0xb5/0x5d0 [ 945.854651] ? __d_alloc+0x31/0xa10 [ 945.854670] __d_alloc+0x31/0xa10 [ 945.854698] d_alloc_parallel+0x112/0x13c0 [ 945.854735] ? __d_lookup+0x255/0x490 [ 945.854763] ? lock_release+0xc8/0x290 [ 945.854791] ? lock_is_held_type+0x9e/0x120 [ 945.854825] ? __pfx_d_alloc_parallel+0x10/0x10 [ 945.854856] ? __d_lookup+0x25f/0x490 [ 945.854883] ? lockdep_init_map_type+0x4b/0x240 [ 945.854917] ? lockdep_init_map_type+0x4b/0x240 [ 945.854957] proc_fill_cache+0x2ea/0x470 [ 945.854994] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 945.855020] ? __pfx_proc_fill_cache+0x10/0x10 [ 945.855047] ? __pfx_vsnprintf+0x10/0x10 [ 945.855092] ? snprintf+0xbe/0x100 [ 945.855132] ? fget_task_next+0x2d1/0x590 [ 945.855176] proc_readfd_common+0x1f1/0x5f0 [ 945.855198] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 945.855225] ? __pfx_proc_readfd_common+0x10/0x10 [ 945.855248] ? down_read_killable+0x1d4/0x4f0 [ 945.855273] ? __pfx_down_read_killable+0x10/0x10 [ 945.855294] ? avc_policy_seqno+0x9/0x20 [ 945.855333] iterate_dir+0x1e8/0x5f0 [ 945.855367] __x64_sys_getdents+0x13d/0x2c0 [ 945.855398] ? __pfx___x64_sys_getdents+0x10/0x10 [ 945.855427] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 945.855465] ? __pfx_filldir+0x10/0x10 [ 945.855508] do_syscall_64+0xbf/0x430 [ 945.855532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.855554] RIP: 0033:0x7fdede60db19 [ 945.855572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 945.855593] RSP: 002b:00007fdedbb83188 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 945.855615] RAX: ffffffffffffffda RBX: 00007fdede720f60 RCX: 00007fdede60db19 [ 945.855630] RDX: 0000000000001000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 945.855643] RBP: 00007fdedbb831d0 R08: 0000000000000000 R09: 0000000000000000 [ 945.855657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 945.855670] R13: 00007ffccaccba8f R14: 00007fdedbb83300 R15: 0000000000022000 [ 945.855703] [ 946.592304] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 946.603497] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 946.634466] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 957.283536] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 957.284589] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:07:27 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:07:27 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) setsockopt$sock_void(r4, 0x1, 0x0, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r3, 0x1, 0x6, @multicast}, 0x10) 23:07:27 executing program 4: r0 = getpid() pidfd_open(r0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/dev\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x38, r5, 0x1, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0xa}]}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x70, r5, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xdd, 0x2}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1, 0x1, 0x0, 0x0, {0x6, 0x1, 0x0, 0x32, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x5}}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}], @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x48080) fcntl$notify(r1, 0x402, 0x2571fc6deb7a34c0) syz_open_dev$vcsn(&(0x7f0000000000), 0x28, 0x10081) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x200001, 0x8) getdents(r6, &(0x7f0000000080)=""/4071, 0xfe7) 23:07:27 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:07:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:07:27 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 23:07:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:07:27 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 957.311507] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 957.326301] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 957.359745] No source specified 23:07:27 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 957.374668] No source specified [ 957.380344] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 957.405882] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 23:07:27 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) close_range(r3, r4, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10) 23:07:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x18) 23:07:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:07:27 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:07:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffc00}}, './file0\x00'}) fcntl$notify(r1, 0x402, 0x2571fc6deb7a34ff) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:07:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1002) [ 957.588726] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 957.602354] No source specified [ 957.604222] No source specified [ 957.609371] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:07:28 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 957.616377] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 957.620823] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:07:28 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:07:28 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:07:37 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'sit0\x00', r2, 0x29, 0x1, 0x3, 0x400, 0x19, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x8000, 0x200, 0x84}}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r3, 0x1, 0x6, @multicast}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 23:07:37 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:07:37 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:07:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1003) 23:07:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000100)={0x5, 0x48f8000000000000}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000280)={&(0x7f00000002c0)=""/182, 0xb6, 0xb, 0x5}) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000140)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2b4640, 0x0) pidfd_getfd(r0, r0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r2, 0x4b4b, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000011c0), 0x2200, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r4, 0x4b4b, 0x0) ioctl$KDDISABIO(r4, 0x4b37) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x3000}, {r0, 0xc1}, {0xffffffffffffffff, 0x1000}], 0x3, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000000c0)={[0x1]}, 0x8) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f0000002200)=""/4096, 0x1000) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r3, 0xf505, 0x0) 23:07:37 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 23:07:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x5000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:07:37 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 967.103948] No source specified [ 967.106358] No source specified 23:07:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x6000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:07:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x100a) [ 967.167589] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 967.171677] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 967.186730] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 967.191259] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 967.226459] No source specified [ 967.239027] No source specified 23:07:37 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000140)={0x11, 0xf5, 0x0, 0x1, 0x9}, 0x14) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="ff7f0000070000002e2f3000"]) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1}, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r3, 0x1, 0x6, @multicast}, 0x10) 23:07:37 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) [ 967.341825] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 967.343193] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 967.351860] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 967.356813] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:07:47 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 23:07:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) getdents(r1, &(0x7f0000002200)=""/4094, 0xffe) 23:07:47 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:07:47 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:07:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000031c0)={0xf, 0x0, {0x4, @usage=0x9134, 0x0, 0x1f, 0x0, 0x6, 0x8, 0x6, 0x22, @struct={0x3, 0x8000}, 0x4, 0x0, [0x6, 0xe2ac, 0x8, 0x1ff, 0x640a, 0x8001]}, {0x1, @usage=0x3fffffff8000, 0x0, 0x6461, 0x0, 0x8001, 0x6d, 0x4, 0x70, @struct={0x7f, 0x80000000}, 0x401, 0x3f, [0x10000, 0x5, 0x101, 0x7ff, 0x8000, 0x488b]}, {0x7, @struct={0x5, 0xfb4}, 0x0, 0xfff, 0x0, 0x7f, 0x1, 0x28d, 0x0, @struct={0x2, 0x8fba}, 0x3, 0xffffffff, [0x7, 0x5, 0x7948, 0x10000, 0x100]}, {0x80000000, 0xffff, 0x401}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000035c0)={r1, 0x401, 0x2}) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f00000021c0)={{r0}, "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"}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) fcntl$notify(r3, 0x402, 0x22) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='children\x00') sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x38}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000c4}, 0x4000000) fstatfs(r0, &(0x7f00000011c0)=""/4096) 23:07:47 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0xe08a, 0x40000, 0x2}) setsockopt$inet6_int(r4, 0x29, 0xce, &(0x7f0000000140)=0x7ff, 0x4) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1}, 0x4) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @multicast}, 0x10) 23:07:47 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 23:07:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x7000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:07:47 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) [ 976.856816] No source specified [ 976.864779] No source specified 23:07:47 executing program 4: r0 = getpid() pidfd_open(r0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0x6e, &(0x7f0000000140)=[{&(0x7f0000000000)=""/28, 0x1c}, {&(0x7f00000011c0)=""/244, 0xf4}, {&(0x7f00000012c0)=""/253, 0xfd}], 0x3, &(0x7f00000013c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x2000) r1 = syz_open_procfs(r0, &(0x7f0000000080)='oom_adj\x00') fcntl$notify(r1, 0x402, 0x2571fc6deb7a34c0) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getdents(r1, &(0x7f00000001c0)=""/4096, 0x1000) [ 976.918724] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 976.949077] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:07:47 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 23:07:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:07:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) close_range(r0, 0xffffffffffffffff, 0x2) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000040)={{0x4, 0x8}, 0x100, './file0\x00'}) [ 977.038321] No source specified [ 977.041128] No source specified 23:07:47 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:07:47 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 23:07:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x9000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 977.095843] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 23:07:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) sendfile(r0, r0, &(0x7f0000000040)=0x6, 0x8001) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x400000, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000000c0)=0x7f, 0x1) creat(&(0x7f0000000100)='./file0\x00', 0x0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) [ 977.110474] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:07:47 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 977.137856] No source specified [ 977.140573] No source specified 23:07:55 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:07:55 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) 23:07:55 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:07:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f00000011c0)={0x56a, 0x1ff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r2, 0x4b4b, 0x0) close_range(r0, r2, 0x2) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:07:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:07:55 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 23:07:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:07:55 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x8) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) [ 985.556398] No source specified [ 985.559377] No source specified 23:07:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xb000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 985.646461] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 985.665638] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 985.681109] No source specified [ 985.688569] No source specified [ 985.690290] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 985.698150] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:07:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:07:56 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xa0103) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 23:07:56 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 23:07:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) getdents(r1, &(0x7f00000001c0)=""/4094, 0xffe) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x7, 0x101, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}}, 0x20001894) r3 = syz_open_dev$vcsu(&(0x7f00000011c0), 0x6, 0x80000) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x2c, 0x3, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40044}, 0x400c5) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000040)={0x1, 0xc5e9037d63d83426, 0x1}) [ 985.822787] No source specified 23:07:56 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 23:07:56 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, &(0x7f0000000040)="010c090b92a98f50720bd5407dda402811332fe2bb2505f5eadeed2aa35e2ab9990c3c931d083a160e732d3f030cd203691cb7a0f7ae8464ad50655c81d9cf8eb0c701f809d9babfafcc98575ade32b6cf541a4d94985f5d992b6ef9c7827a0eb3e61f085109a3fccbae7c9b04fdeba2dd13d355bc7cc2f50cef94126fffb7da81d72c97ede32c6a897a66a58ee1d2221c1edfe16a1a47132daa947e4e5fbeddecff49e31b9e", 0xa6, 0x1, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netpci0\x00'}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @remote}, 0x10) [ 985.835551] No source specified [ 985.978161] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 986.133614] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 986.148360] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 986.151496] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:08:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:08:06 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:08:06 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{r1, r2/1000+60000}, {0x0, 0x2710}}, 0x100) 23:08:06 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xa0103) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 23:08:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c5) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x38, r4, 0x1, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0xa}]}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 23:08:06 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:08:06 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 23:08:06 executing program 5: sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x24000014) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x8, 0x8000, 0x34, @dev={0xfe, 0x80, '\x00', 0x42}, @rand_addr=' \x01\x00', 0x8, 0x7, 0x7, 0x7f}}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000001700)={r4, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000700)={0x0, @tipc=@name={0x1e, 0x2, 0x1, {{0x2, 0x4}, 0x2}}, @xdp={0x2c, 0x0, 0x0, 0xd}, @hci={0x1f, 0x0, 0x3}, 0x8001, 0x0, 0x0, 0x0, 0x6, &(0x7f00000006c0)='gretap0\x00', 0xfffffffffffffef0, 0x44c9, 0xfffa}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x5f, 0xfd2f, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x11}, 0x40, 0x700, 0xffff, 0x6}}) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000001700)={r9, 0x1, 0x6, @multicast}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000840)={0x1d0, 0x0, 0x0, 0x7f, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r4}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20000080}, 0x880) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r11, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r11, 0x1, 0x6, @multicast}, 0x10) [ 995.694329] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 995.695703] No source specified [ 995.699770] No source specified [ 995.716374] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 995.722647] audit: type=1400 audit(1762816086.179:135): avc: denied { watch_reads } for pid=8800 comm="syz-executor.2" path="/proc/8800/fd" dev="proc" ino=26118 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 995.729079] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 23:08:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x20100000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 995.759401] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 995.823937] No source specified [ 995.831848] No source specified 23:08:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) r1 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x7fffffff, 0x9, &(0x7f0000001580)=[{&(0x7f00000000c0)="2bc7a3048d5fdfd0cfd478a0a4dedab2c986e9d9cd5bdc0181f4ba0509ce0b58eb98ca08639fe46a9c07842763cb32f69312fd9e2e09e53f836ee4e783d5c97a9025896b1cbe5ac2845c41ff672f5f", 0x4f, 0x8}, {&(0x7f00000011c0)="7f6cf9cf8fc6e11dd58f1adda37e6f9fc2fa425e8ddd2cbc1cfc891dc5b089374db79a29913dc7a3add7066bd60daa73248cfcf3c55e249226cb3f027d7049ef4adf4c829799100381dcf1bc773cac0bd47c87414e3ebe6790392b4fe3d5b216d66e6362ee8e5fa8857ad0fe8710901d48fba2cd36ff22c7826e32f2cdea2700ed19f1fb120fff0b95dd2b1e1e26", 0x8e, 0x2}, {&(0x7f0000001280)="028b007a9471866d26ad345159e0e94bdfa402cae683ce2087253efae7caa2cbf599da74993e050edfe082e7939c84a86f2a8bd5d7bcf54f0da64031d442e81456f7703ee10206a2b180ad06d6653f6c8caf74647dc3e71b498c92f8b9e0a117d59d4b91232aa8eefef260b082a5252d6b3465e3351d06f6bc87a70b51753cca1f3b8696b23f36bb23c4b67dc447eac76b89272bce4c4ccfe3b21085c0cc48f0090838d77ad452ee3c790377155687", 0xaf, 0x8000}, {&(0x7f0000000140)="8753224c7cc837dd60130fe4e6dce18ed698ad69af7368b9437034621267f6d478292d7e7593f95b95b56377221da7", 0x2f, 0x1}, {&(0x7f0000001340)="e1ded9b31c73205352adc9518775c0e3692c2cf38404a554e213efa1fd1b2c0c38e571d29ea3c0e186548a8073f684809ac77306da4c96930ba4284a40b7b185963abc76e924185ef51b7f75b56645ab984592216fffdfd0bad3bcbea5a105e5c4f507b0bea0ef51d7fc1fb2f8fa5cbea4fde783da27f61b2a42580cfa89", 0x7e, 0x7fffffff}, {&(0x7f00000013c0)="ebcdac7c5dd13180571dc5d14a0f17acbb06dfc31764a98c453042d4ed46de824a0a3f1ec3a9201acbcb112b37bc1ebfe149eafeed9750082fb02f74dfd1b368a05dbd0afad3c6fb719886ff54d7c925a1e97bd616d38e454c58febe7ee99fffc48060fe755ba8ab0d0045e6ff8c31ec302da75eb076e5189e25362239623a7d8ef4b427ec41341673433f026bdae8b223d1c3f6b99c67c2437b033c307461f661cc1ec0fa757aa36d5a76a3d863d8cf0fc55c06a156e15ae66e29271c", 0xbd, 0x5}, {&(0x7f0000000180)="46923b597ebc965c83f958570b2bdf437f62ce5840bda8449eb64d2afdefe0ad80fdec994e94c681082a521275bffea9540452db46", 0x35, 0x7}, {&(0x7f0000001480)="b1679607e154d5eedef8a78a4fd8c2faad8dfe4565ce04ff8cf05c20e6d4a20a1386034938ec745a863a442c27e088ecbbc0cbc97f85593758c19f9c", 0x3c, 0x1}, {&(0x7f00000014c0)="e55130aa4685cdbf70f5dd108e5caf6bab566b209e04bb65370ce72b97a6037e2124048116773945149bdf367fa324b4f31fef95d56cce0e2b5a7d3900105a6e3537b1618f2e3e5b11dd0ecf7c302e2b63568b9d0a68b600ee8bca945359171905192ff920dc174c155b3dd7f0a2b76d6324ed0b279ee6d73b7540c6e43e85341fcc75534104df8a94ae72c4119338dd", 0x90, 0x80000000}], 0x20000, &(0x7f0000001680)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@mode={'mode', 0x3d, 0x6}}, {@size={'size', 0x3d, [0x25, 0x70, 0x5a, 0x25, 0x34]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x78, 0x31, 0x31, 0x32, 0x1]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x78, 0x34, 0x78, 0x6b]}}, {@huge_always}, {@nr_blocks={'nr_blocks', 0x3d, [0x32]}}, {@gid={'gid', 0x3d, 0xee01}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@nr_inodes={'nr_inodes', 0x3d, [0x2d, 0x30, 0x67, 0x78, 0x30, 0x6b, 0x2d, 0x2d, 0x37, 0x70]}}], [{@dont_appraise}, {@uid_lt}, {@obj_role={'obj_role', 0x3d, 'fd\x00'}}, {@subj_role={'subj_role', 0x3d, 'fd\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}) close_range(r1, r0, 0x2) 23:08:06 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @remote}, 0x10) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x10010, 0xffffffffffffffff, 0x8000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4000, @fd=r0, 0x0, 0xc686, 0x6, 0x4, 0x0, {0x3, r4}}, 0x1) 23:08:06 executing program 4: r0 = getpid() r1 = getpid() r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) r3 = gettid() fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x1, r3}) pidfd_open(r1, 0x0) pidfd_open(r1, 0x0) r4 = syz_open_procfs(r0, &(0x7f0000000040)='net/psched\x00') fcntl$notify(r4, 0x402, 0x2571fc6deb7a34c0) getdents(r4, &(0x7f00000001c0)=""/4096, 0x1000) 23:08:06 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 23:08:06 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xa0103) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) [ 995.906423] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 23:08:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x43160000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 995.919582] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 995.930612] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 995.943178] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:08:06 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) [ 995.995204] No source specified [ 996.000842] No source specified 23:08:15 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:08:15 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000200)={0xfffffffd, 0x2, 0x0, &(0x7f0000000140)}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x29, r2}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0xa) 23:08:15 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:08:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8cffffff, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:08:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') close_range(r0, r0, 0x2) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x301082, 0x0) fcntl$notify(r1, 0x402, 0x505098b490817881) fcntl$notify(r0, 0x402, 0x10) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:08:15 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{&(0x7f00000011c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001240)=""/87, 0x57}, {&(0x7f00000012c0)=""/59, 0x3b}, {&(0x7f0000001300)=""/23, 0x17}], 0x3, &(0x7f0000001380)=""/92, 0x5c}, 0x5}, {{&(0x7f0000001400)=@hci, 0x80, &(0x7f0000001580)=[{&(0x7f0000001480)=""/194, 0xc2}], 0x1, &(0x7f00000015c0)=""/54, 0x36}, 0x3f}], 0x2, 0x10101, &(0x7f0000001680)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {r2, 0xffffffffffffffff}}, './file0\x00'}) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimensat(r3, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{0x0, 0x2710}, {r4, r5/1000+10000}}, 0x100) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000016c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400}}, './file0\x00'}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000001700), &(0x7f0000001740)=0xc) 23:08:15 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 23:08:15 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa0103) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) [ 1005.552876] No source specified [ 1005.554021] No source specified 23:08:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xc0ed0000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1005.621936] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1005.635658] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1005.657859] No source specified [ 1005.665656] No source specified [ 1005.673128] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1005.674337] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1005.681242] serio: Serial port ptm0 23:08:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) close_range(r0, r0, 0x0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:08:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xf6ffffff, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:08:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000004740)=[{{&(0x7f0000000040)={0xa, 0x4a21, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="240000000000000029000020320000ef0000000000000000000000ffff00000000", @ANYRES32=0x0, @ANYRES16], 0x28}}], 0x2, 0x0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:08:16 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0xffffff55, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x89}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) 23:08:16 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa0103) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 23:08:16 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 23:08:16 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1005.862776] No source specified [ 1005.866058] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1005.878452] No source specified [ 1005.881167] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1005.887773] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1005.898647] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1005.964638] serio: Serial port ptm0 23:08:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xf9fdffff, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:08:25 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 23:08:25 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:08:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) clock_adjtime(0x0, &(0x7f0000000340)={0x51d0}) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:08:25 executing program 4: ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) read(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r1, 0x402, 0x2571fc6deb7a34c0) getdents(r1, &(0x7f00000001c0)=""/4096, 0x1000) 23:08:25 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa0103) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 23:08:25 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:08:25 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) accept4$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14, 0x80800) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x22048001) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)=ANY=[@ANYBLOB="010020c56993287b310000015258287e0e5144", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req={0x100, 0x1f, 0x20, 0xfffffffc}, 0x10) [ 1014.941313] serio: Serial port ptm0 [ 1014.990625] No source specified [ 1015.005080] No source specified 23:08:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x40, 0x1c}, 0x18) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) fchmod(r1, 0x4) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:08:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) fcntl$notify(r1, 0x402, 0x15) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:08:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xffffe000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:08:25 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:08:25 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) [ 1015.232899] No source specified [ 1015.240758] No source specified 23:08:25 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip6_tables_names\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) close_range(r0, r0, 0x0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1040) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000021c0)=ANY=[@ANYBLOB="4f64f4510daf053d473c89b303860e79b6685138ca1bec90d1f4d8b56580b585e554a154fb9c1dca2aafe119eea54d3b5a98fdcb2c43d0d2f7bc482ee364796c951f575de954f26e96f297292c7c4887a8e9e6fc397cae468d65e7a2d8874f53b1d4cc418d96e547584b764851a7db444d0f4917503d661f96f3699ff8140dfd0ac4d278ed76c2b01ef20d1a766d82dbd2ec0e57e3223ba52209abf4f02e49810aa4", @ANYRES32, @ANYBLOB="7ef1b48f2e21c83000080000c36d00bd7885307ee7ea086bd3e280cb80ab3e4aa5f0e7327fc23a5e00000000"]) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) r2 = openat$incfs(r0, &(0x7f0000000000)='.log\x00', 0x2000, 0x10) r3 = dup2(r1, r2) flock(r3, 0xc) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000022c0)={0x94, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x52, 0xa8, @random="78cff57832b2d9091095c588b5f46fc11d94e9443dd5f78282bffdabcfd82c112695bc1d976bc1ddb901960e31c75487ee5926202b7742b51b2e6543cd4791de3aecf115ebd3c7bd151dd7808e3b"}, @handle=@pci={{0x8}, {0x11}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r0, 0x400, 0x8, 0x6}) getdents64(r4, &(0x7f00000000c0), 0x0) getdents64(r0, &(0x7f00000011c0)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000002380)={{0x1, 0x1, 0x18, r0, {0xfff, 0x10000}}, './file0\x00'}) ioctl$TCSETSW(r5, 0x5403, &(0x7f00000023c0)={0x10000, 0x6, 0x1, 0x5, 0x5, "aa3320b6f7605bc85c782b00621a89736c9329"}) 23:08:25 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:08:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xfffffdf9, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:08:37 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:08:37 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$dupfd(r1, 0x0, r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) 23:08:37 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:08:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) fcntl$notify(r1, 0x402, 0x2571fc6deb7a34de) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r2, 0x4b4b, 0x0) r3 = accept$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, 0x3) poll(&(0x7f0000000180)=[{r4, 0x11}, {r1, 0x3611}, {r3, 0xa}, {r0, 0x2108}, {r4, 0x200}, {r0}], 0x6, 0x1) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 23:08:37 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:08:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r0, 0x4}) syz_io_uring_setup(0x5a9a, &(0x7f00000000c0)={0x0, 0x3602, 0x2, 0x2, 0xb4, 0x0, r1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000011c0)=@IORING_OP_NOP={0x0, 0x1}, 0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r3, 0x4b4b, 0x0) fcntl$setownex(r3, 0xf, &(0x7f0000001200)={0x2, 0xffffffffffffffff}) 23:08:37 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) [ 1027.121746] No source specified [ 1027.130278] No source specified 23:08:37 executing program 4: symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x8) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:08:37 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:08:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xffffff8c, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:08:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000000a0601010000000000000000000000000500010007000000100007800c00018000000000000000050900020073797a310000000008000940000100000900020073797a3000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x48894) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) [ 1027.372810] No source specified [ 1027.383086] No source specified 23:08:37 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:08:37 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:08:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xfffffff6, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:08:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r1 = fork() r2 = syz_open_procfs(r1, &(0x7f0000000040)='statm\x00') syz_open_procfs(r1, &(0x7f0000000080)='fdinfo/4\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000013c0)={0x58, 0x0, &(0x7f0000001240)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x70, 0x18, &(0x7f00000011c0)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/96, 0x60, 0x0, 0x1d}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/50, 0x32, 0x1, 0x3f}, @fda={0x66646185, 0x5, 0x2, 0x40}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x40}, @dead_binder_done], 0xd4, 0x0, &(0x7f00000012c0)="d00d7408188ed07b8e5a3c49dfeaa075bbf99e8681a725ae79a1a5699ff6ff044377c201515d776e61381e56eacc9672ee3230ec4533fb4d8423eb87159cb20e856d388ea2f2069ce3c1a9b6fdf2ccf37f177c65e6ec6c7c2201ee1e946fed7f4fb3365fb1152b6f871edf3ea22fc6fe64b6114e1f5f4a3a8f7bd081b4b1ad653be3ee795561be2caeff0a3656f278c1bed00996dfca9a949a1299054065fae15b783c1df326ae622ce532bdbaa8146df1bbbb1cb6a53223f58e9c4fd566f8c3c5ea0083a454d50ceb6f2eb2ed94f3611f8cb080"}) ptrace(0x4207, r1) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) getdents64(r2, &(0x7f0000001400)=""/86, 0x56) 23:08:37 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) [ 1027.626648] No source specified [ 1027.635032] No source specified 23:08:38 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @multicast}, 0x10) 23:08:38 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) [ 1027.785520] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1027.790293] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1027.805863] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1027.829803] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:08:49 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:08:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="e9d5a7efb04ec33a6172c61d0d30a0d30bb78f35518a642a75720f6d9f7d73dda17abc9a5d49b21f8fb859b867ce7284b39e1fc2a3eab14f21d5", 0x3a}], 0x1, 0x1, 0xc1c1, 0x0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:08:49 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:08:49 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 23:08:49 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:08:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(0xffffffffffffff9c, &(0x7f0000001040)=""/4086, 0xff6) 23:08:49 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x8, 0x7, 0x1, 0x800}, {0x3, 0xaf, 0x0, 0x3}, {0x40, 0xb, 0x20, 0x1}]}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) 23:08:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xedc000000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1038.819375] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1038.827536] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1038.837940] No source specified [ 1038.852477] No source specified [ 1038.855869] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1038.859399] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:08:49 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 23:08:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8000000000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:08:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = fcntl$getown(r0, 0x9) r2 = getpgrp(0x0) r3 = getpid() pidfd_open(r3, 0x0) clone3(&(0x7f0000001280)={0x100000600, 0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x24}, &(0x7f00000000c0)=""/101, 0x65, &(0x7f00000011c0)=""/175, &(0x7f0000000140)=[r1, r2, r3, 0xffffffffffffffff], 0x4, {r0}}, 0x58) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:08:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x4400, 0x0) getdents64(r2, &(0x7f00000000c0)=""/207, 0xcf) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r3, 0x4b4b, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f00000011c0)={{r3}, 0x0, 0xe, @unused=[0x7fff, 0x8001, 0x5, 0x79], @devid}) 23:08:49 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) [ 1039.050343] No source specified [ 1039.054373] No source specified 23:08:49 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:08:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xe0ffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1039.160086] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1039.199023] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1039.225641] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1039.236460] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1039.262751] No source specified [ 1039.269867] No source specified 23:09:00 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 23:09:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x100000000000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:09:00 executing program 2: r0 = getpid() pidfd_open(r0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)='clear_refs\x00') r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x2, 0x28000) pidfd_open(0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:pam_var_run_t:s0\x00', 0x23, 0x2) fcntl$notify(r1, 0x402, 0x2571fc6deb7a34c0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) getdents(r3, &(0x7f00000011c0)=""/4083, 0xff3) 23:09:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x4) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x84000) r3 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0xec, 0x5, &(0x7f0000002480)=[{&(0x7f00000011c0)="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", 0x1000, 0x5}, {&(0x7f00000021c0)="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", 0xfc, 0x3}, {&(0x7f00000022c0)="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", 0xff, 0x1}, {&(0x7f00000023c0)="ab3fc13046eb2eb0b24ca43f00c4b38b924d8531931af24c2c30cbb94de30d0f88611ca49e3a47957dd523a6aaec3d115e9268769525b2bc0a63e4df15041da7f42c7cb2bbc7cffcb37976039964df45293f7ff0b1445d0706b6cc833d6ca1572ab3decfe781e1", 0x67, 0x8}, {&(0x7f0000002440)="933607d77baee25b24de65a62e946a852853bc875816", 0x16, 0x80000001}], 0x80000, &(0x7f0000002500)={[{@oldalloc}, {@nodelalloc}, {@debug}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0xfffffffffffffffd}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@usrjquota}, {@bsdgroups}, {@resuid={'resuid', 0x3d, 0xee01}}], [{@smackfstransmute}]}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x814, &(0x7f00000025c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c375d9a96733d", @ANYRESHEX=r3, @ANYBLOB=',version=9p2000.u,mmap,uname=,access=any,msize=0x0000000000000003,cache=fscache,access=client,smackfsdef=},mask=MAY_EXEC,euid=', @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:09:00 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:09:00 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 23:09:00 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newae={0x68, 0x1e, 0x200, 0x70bd29, 0x25dfdbfd, {{@in=@rand_addr=0x64010100, 0x4d3, 0x2, 0x6c}, @in=@private=0xa010101, 0x0, 0x3506}, [@encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e21, 0x4e20, @in6=@mcast1}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) 23:09:00 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) [ 1049.776951] No source specified [ 1049.786393] No source specified [ 1049.805752] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1049.813700] loop4: detected capacity change from 0 to 264192 [ 1049.826433] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:09:00 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) [ 1049.839687] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1049.848772] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1049.890513] 9p: Bad value for 'uname' 23:09:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x200000000000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:09:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8000) getdents(r1, &(0x7f0000000080)=""/118, 0x76) getdents(r1, &(0x7f00000011c0)=""/4109, 0x100d) [ 1049.957867] No source specified [ 1049.962499] No source specified [ 1049.964580] 9p: Bad value for 'uname' [ 1049.967561] loop4: detected capacity change from 0 to 264192 23:09:00 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x4) 23:09:00 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1050.091267] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1050.097437] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1050.102886] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1050.104236] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:09:10 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = dup3(r0, r0, 0x0) fcntl$notify(r1, 0x402, 0x2571fc6deb7a34d5) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:09:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x300000000000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:09:10 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:09:10 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x9, 0x200000) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000000c0)={0x101, 0x20, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r1, 0x402, 0x2571fc6deb7a34c0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000001500)={&(0x7f0000000180), 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x64, r3, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x200}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x71}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40044}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/softlockup_count', 0x0, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f00000011c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mknodat$null(r0, &(0x7f0000000140)='./file0\x00', 0x1000, 0x103) ioctl$TIOCSLCKTRMIOS(r2, 0x4b4b, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) getdents(r1, &(0x7f00000001c0)=""/4096, 0x1000) 23:09:10 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:09:10 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x50203, 0x33) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x3) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r3, 0x1, 0x6, @multicast}, 0x10) 23:09:10 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:09:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{&(0x7f00000011c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001240)=""/87, 0x57}, {&(0x7f00000012c0)=""/59, 0x3b}, {&(0x7f0000001300)=""/23, 0x17}], 0x3, &(0x7f0000001380)=""/92, 0x5c}, 0x5}, {{&(0x7f0000001400)=@hci, 0x80, &(0x7f0000001580)=[{&(0x7f0000001480)=""/194, 0xc2}], 0x1, &(0x7f00000015c0)=""/54, 0x36}, 0x3f}], 0x2, 0x10101, &(0x7f0000001680)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {r2, 0xffffffffffffffff}}, './file0\x00'}) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimensat(r3, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{0x0, 0x2710}, {r4, r5/1000+10000}}, 0x100) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000016c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400}}, './file0\x00'}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000001700), &(0x7f0000001740)=0xc) [ 1060.496059] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1060.499473] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:09:10 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1060.508874] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1060.512750] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1060.535753] No source specified [ 1060.538381] No source specified 23:09:11 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'macvtap0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @random="2af381228835"}, 0x10) 23:09:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400000000000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:09:11 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:09:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r1 = syz_open_dev$rtc(&(0x7f0000000040), 0x10000000005, 0x2a0783) pread64(r1, &(0x7f0000000080)=""/160, 0xa0, 0x81) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) [ 1060.672684] No source specified [ 1060.677546] No source specified 23:09:11 executing program 6: ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:09:11 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x29, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) 23:09:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x500000000000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:09:11 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:09:11 executing program 2: r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x6) pidfd_open(r0, 0x0) r1 = gettid() getpgrp(r1) r2 = syz_open_procfs(r0, &(0x7f0000000040)='net/mcfilter6\x00') fcntl$notify(r2, 0x402, 0x2571fc6deb7a34c0) getdents(r2, &(0x7f00000011c0)=""/4096, 0x1000) 23:09:11 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) [ 1060.807774] No source specified [ 1060.820194] No source specified 23:09:11 executing program 6: ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) [ 1060.842823] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 1060.851896] mac80211_hwsim hwsim9 wlan1: left promiscuous mode 23:09:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x600000000000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:09:11 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1060.934662] No source specified 23:09:11 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x100, 0x70bd29, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4044040}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fcntl$notify(r1, 0x402, 0x2571fc6deb7a34c0) getdents(r1, &(0x7f00000001c0)=""/4096, 0x1000) [ 1060.950635] No source specified 23:09:21 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:09:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = socket(0x25, 0x80000, 0x80000001) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x400, 0x113, 0x8}, 0x18) getdents(r2, &(0x7f00000011c0)=""/4109, 0x100d) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000200)={{0x5, 0x23ec}, 0x100, './file0\x00'}) r4 = accept4$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14, 0x1800) fsetxattr$security_capability(r4, &(0x7f00000003c0), &(0x7f0000000400)=@v3={0x3000000, [{0x2, 0x10}, {0xffffffff, 0x2}], 0xee01}, 0x18, 0x3) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f00000000c0)={{0x5, 0x2}, 0x100, './file0\x00'}) 23:09:21 executing program 6: ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:09:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x700000000000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:09:21 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:09:21 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6tnl0\x00', r2, 0x4, 0xff, 0x55, 0xa41a, 0x44, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8, 0x41, 0xdfe, 0x1}}) 23:09:21 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:09:21 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) getdents(r1, &(0x7f00000011c0)=""/4095, 0xfff) [ 1071.196770] FAULT_INJECTION: forcing a failure. [ 1071.196770] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.198553] CPU: 0 UID: 0 PID: 9163 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1071.198584] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1071.198597] Call Trace: [ 1071.198605] [ 1071.198613] dump_stack_lvl+0xfa/0x120 [ 1071.198657] should_fail_ex+0x4d7/0x5e0 [ 1071.198685] should_failslab+0xc2/0x120 [ 1071.198710] __kmalloc_cache_noprof+0x81/0x6b0 [ 1071.198739] ? __might_fault+0xe0/0x190 [ 1071.198770] ? alloc_pipe_info+0x10d/0x5a0 [ 1071.198792] ? find_held_lock+0x2b/0x80 [ 1071.198823] ? alloc_pipe_info+0x10d/0x5a0 [ 1071.198845] alloc_pipe_info+0x10d/0x5a0 [ 1071.198871] splice_direct_to_actor+0x78c/0x9d0 [ 1071.198905] ? __pfx_direct_splice_actor+0x10/0x10 [ 1071.198937] ? lock_acquire+0x132/0x2f0 [ 1071.198979] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1071.199013] ? lock_acquire+0x15e/0x2f0 [ 1071.199049] do_splice_direct+0x179/0x250 [ 1071.199080] ? __pfx_do_splice_direct+0x10/0x10 [ 1071.199111] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1071.199145] ? security_file_permission+0x22/0x90 [ 1071.199178] do_sendfile+0xa8e/0xdc0 [ 1071.199219] ? __pfx_do_sendfile+0x10/0x10 [ 1071.199253] ? __fget_files+0x20d/0x3b0 [ 1071.199297] __x64_sys_sendfile64+0x1d3/0x210 [ 1071.199324] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1071.199351] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1071.199391] do_syscall_64+0xbf/0x430 [ 1071.199416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.199438] RIP: 0033:0x7fb59c6b8b19 [ 1071.199456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1071.199477] RSP: 002b:00007fb599c2e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1071.199499] RAX: ffffffffffffffda RBX: 00007fb59c7cbf60 RCX: 00007fb59c6b8b19 [ 1071.199514] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1071.199526] RBP: 00007fb599c2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1071.199539] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 1071.199568] R13: 00007fff3932da4f R14: 00007fb599c2e300 R15: 0000000000022000 [ 1071.199600] [ 1071.207509] No source specified [ 1071.239492] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1071.241788] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1071.269275] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1071.281628] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1071.284738] No source specified 23:09:21 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:09:21 executing program 6: r0 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:09:21 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:09:31 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) 23:09:31 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:09:31 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:09:31 executing program 6: r0 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:09:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2f) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:09:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x800000000000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:09:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000040) fcntl$notify(r1, 0x402, 0x2571fc6d6b7a34ec) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:09:31 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:09:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="010161ab4af400"/16, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) getdents64(r1, &(0x7f0000000080)=""/151, 0x97) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) [ 1081.242830] No source specified [ 1081.249751] No source specified [ 1081.255265] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1081.263541] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1081.282060] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1081.294295] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:09:31 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:09:31 executing program 6: r0 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:09:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) fcntl$notify(r1, 0x402, 0x2571fc6deb7a34d6) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000040)) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept4$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c, 0x800) r3 = syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x80000000, 0x6, &(0x7f00000016c0)=[{&(0x7f00000011c0)="c33b3da6b5d315b1bb8b4682524ea170bf6873c84c5cddd5c9f4474955fdf06c05a624e5c97e9c614dd156e4083066ace800919f0e1bf3fb3dfced17367a05cbb5af94045f3fec244c6cfd5b27992321f346dd4f2ee1e099dbc95bd9a8a0519301c2131f8aa5815eb57a1cbc2577a87609f385e95748edd6602fbd06b0b33ebc757a0df76b8133890db01c", 0x8b, 0x81}, {&(0x7f0000001280)="dcfdfe5a33d45466f70ef26a354059ea3f2189091efeaf2e62d942736e0e9364418403a86322fb437c079bea71dbbd7c53baf1e18061e60c1ff00c3e009acca4006857c0", 0x44, 0x5}, {&(0x7f0000001300)="b2608203240528ff99553b6f63d88a0155acf64019be64d84341dae49865b06f358ca3b778878065d0f3aaa1b2226fe5267c982aa77a236686bf5b4c28c4688ba08f547122a5579558689cb3491841a4bf75ea4afac8684b35cce9d87d1cd1efb72aa958609a7e13a85914cac4b0232bc2dc8de1ad13704bba0ee7caa5f4a936a16e93eb619cb95ac9c4ba8b91a76e5678bcdeb51a263688ee4f790b008073a80b34f6819927d57ff45a7500066bae35d0351447430e4144e2f276b7ce916c7a1e02501fc91544c96f5d5d69e596f73128b5bd068a917a83e7b0b2650400762f1a8af24d799c5962", 0xe8, 0x1}, {&(0x7f0000001400)="a7c72f2ad2e889f8b1dd0f89148fde1bf5f9bea6feaf12f88ee2ea9d5d3097f4f89e3ba4d6763f669c3969ad06a65188cf89ce33a8f676280bfedefc8a2a9bb2be672d31e6807d353e171efdebde8ccb63a924d2ef47848fabe22fa9425eb36d6706e7596530a334bd9dbb29de5826f44f715ffa075f11f1137115cf4df5cca29c6312e45b00f8b5946b172e840b2a01afeefd1933968129210646", 0x9b, 0x200}, {&(0x7f00000014c0)="5c37be7a8e23bd0c03e18f98da5b1ee1c37e99c297d5bfa55d1431e61f910cc69690b51bd1bcf1488c37807179eb80ca18a782fb66914ef0d1de68b58d6e64df9f4dabf6dda539b9361286e78a32ebc9dc903013d93961cc6f8a7ba9ed380d0fdca5c18a30c337f9650b9d9e571d413d223e69bd82bf8e2b23fd16be6983e12debdbad1153c1b73e04543f895e2ddf958f1598c970bb3718db688093fc3d986198ea7a79d16f21d93f0731379c3043ebad393a6e17bf79050a0bce98096344f176efafdb50dcbdea881e449b20c789eb7d6b58a3cd13d92b8db6e2274afc689f14", 0xe1, 0x8}, {&(0x7f00000015c0)="67b3a53cd82807c95ce3815d858715b9e1a77a10282b8628c1adbae7b0e162927d2e847f36a94b7a04018f54d2f6c071551c2234574f4669db8ce6e4f863bf98237ae6209d493a6426300ec8c32ad0bb0d3d5aac33567861782c17cdb574781896c6879f56fc014f413c0706bfa15fc44bdd80dc604710a0e403c6b80128b36dcdeffd24b4212f8fa8037b417e8a393800d1b9d36f8d318881307fae9f753645f9b56a91dc6cd300f7011f7681b01f21249a4b70b214ebe52020901cb0206e9c1ddcdeafae862fe6da3544dd810ece7cc4a0a2d8fecb5a16d33632ec4c26498d95e826c491c80a43a089e83ebe3a7a1a1a1f133c3a5c6c5f61", 0xf9, 0x1}], 0x2008000, &(0x7f0000001780)={[{@unhide}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@check_strict}, {@overriderock}, {@sbsector={'sbsector', 0x3d, 0x9}}, {@nocompress}], [{@context={'context', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'v'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}]}) sendfile(r2, r3, &(0x7f0000000180)=0xc5c, 0x7) 23:09:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x900000000000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:09:31 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) r1 = accept4$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r2, 0x402, 0x2571fc6deb7a34c0) getdents(r2, &(0x7f00000001c0)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x401}}, './file0\x00'}) getdents(r3, &(0x7f00000011c0)=""/131, 0x83) 23:09:31 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = accept$inet6(r1, &(0x7f0000000dc0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000e00)=0x1c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000003440)={0x0, @rand_addr, @dev}, &(0x7f0000003480)=0xc) sendmmsg$inet6(r3, &(0x7f0000003800)=[{{&(0x7f0000000e40)={0xa, 0x4e23, 0x5, @private1, 0x9}, 0x1c, &(0x7f0000001080)=[{&(0x7f0000000e80)="fd857d4c0de379ca5d08966956e65b38e0db962e18ab6e7d245772b5d5ef70ea2e80f37876da8cdff945d23e70638d0c6e5db1a1a6898085f2895f83569b2dca2860ad57af1440f04d8ec2399947768f18410cf6dad02c7f12b84003c74c4fd6a19769580b5eb38ff5a28e4f811fe0e64b9f4fde504eb1cc3efb7f9ad2de2cd395f528019ed24d90aa127d3fe00c2659955af8714aed57f0b062fcc7af51069851ee057913ab906a26edfcc7d72f883d1787fcd76c16", 0xb6}, {&(0x7f0000000f40)="1abd836713d9c949389a4b365ec67a20b43e06dd2de3288b2a5ec52c908044b669e8c341966fd8c4a707c598e1d34e33dbb388473d45f3a2221ec4db38cf6a6fe1ec12141f83c3e1904babe8bacea5ac9d07e309317042e69bb71da98cccdfe4a7a5c22b4c06f81109417e3c5e56d38806a1eebf7f4f0fd22e170266ac46b7d37b685a7485a6d41dddf72d11ae13c94064f1cc5d23a6f7cc0ad053463aaf8a766e43511aed904f213e04279967be74dec588e286a6e3ca3dc787bd1a4e9de95feec5a0f94bd6311a47b7c61588a71f7403314ffce37d755ba5a708cf3dbc2ffa10a136", 0xe3}, {&(0x7f0000001040)="36b0f4bab92cd6df17a4d311b81b1774dd84e09aaf5aa7537d853a2ee13806210791081a038a150c3efb90c9", 0x2c}], 0x3, &(0x7f00000010c0)=[@dstopts={{0x58, 0x29, 0x37, {0x84, 0x7, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0xfa, 0xffff, [0x8001, 0x0, 0xfffffffffffffff9, 0x5, 0x0, 0x80000001]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00', r2}}}, @hopopts_2292={{0xe0, 0x29, 0x36, {0x2f, 0x18, '\x00', [@pad1, @calipso={0x7, 0x18, {0x2, 0x4, 0x1f, 0x8, [0x99, 0x7f]}}, @generic={0x98, 0x87, "f9e33fb4aee4f75e56f3511400b962e4bfb426daa37c4956dd36c0040d920dd899387526712ab86c1cd307e5e2cb507b5ed1f791124b303ffd98a62e972e322c36048658458ecbe85d4f950d99a8d48787eb2aada6d509fc571c0f2d0abebd493a7eb10d4478bceb95895955f2cfe5d7d9046aee1574ee39a50d0e36481f1489af0018ed6ca6e1"}, @enc_lim={0x4, 0x1, 0x9}, @ra, @calipso={0x7, 0x10, {0x0, 0x2, 0x8, 0x4, [0x1]}}, @pad1]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x84, 0x6, 0x2, 0x1, 0x0, [@remote, @remote, @dev={0xfe, 0x80, '\x00', 0x37}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x4, 0xa, '\x00', [@jumbo={0xc2, 0x4, 0x890}, @calipso={0x7, 0x10, {0x1, 0x2, 0x2d, 0x81, [0x31]}}, @calipso={0x7, 0x28, {0x2, 0x8, 0x81, 0x101, [0x4, 0xeb, 0x9, 0x6]}}, @pad1, @calipso={0x7, 0x10, {0x0, 0x2, 0x8, 0xda, [0x1]}}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x67, 0x0, '\x00', [@pad1, @ra={0x5, 0x2, 0x9}]}}}], 0x250}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001340)="6233a6aade5d0212978ca1bbaa5a762286f9fa0c625f4dfd9aa1e4ab91217ab1a65c4391cc9aa479010e64280f012f827ce484fc48cd34b858c85e80e8352bdd", 0x40}, {&(0x7f0000001380)="f4aaf79637e5b582fbd74907b35da7fdf2f95c564e6aca277e3f354732f4f6909ee98828c9cbc3e7ff9f7052366ced9fe1c9de499d495c136dd1b0ad3e1219427d1a7dedbb7c8e12ed257efe789885fc644b08", 0x53}, {&(0x7f0000001400)="9f3443d5561c444aa9514a7e9a27bc20b27bd538a409ee8e8dc5b97b887293837ff0eb287d87acc16214629db169e9a831b47a0eb136dd718ed05f452735210909ad2953b6b78fb54161e4418c05234d1faf9353c79b511706988515752948cebd534e5f96ac1747cdb4131de784abebe5b4f97d8e4fcd99b9c4733f43af77999070e170593f6e81dcec4b206218b0e259550b85359dc30883920395d92cb2519b46d94e802ce8ef99b7", 0xaa}, {&(0x7f00000014c0)}, {&(0x7f0000001500)}, {&(0x7f0000001540)="11fa805c1df945f9224126c8631bb909541cd8d39cbbf6930092042ad6f2b5512ce60b502f4c139fccf347e6130642990de4e90e210277f837bcae2f7423607e5be7259b77b82650b4639c01452b8e2ada9224e05f", 0x55}, {&(0x7f00000015c0)="46964196544561f53062a40a05aad5aa7838c4b468a125b5777b563d6098768c5e45c0168bd9dcc41385f5f294972a14ca1eff16c48f352a", 0x38}, {&(0x7f0000001600)="b94fc0cc997edf08f0c234e7ac7fd83e06d462b1e4fd920c518bdbaafb6241952da71b684b4e77519c6c29d847719e", 0x2f}], 0x8, &(0x7f0000001740)=[@hoplimit={{0x14}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @hopopts_2292={{0x20, 0x29, 0x36, {0xbb, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x29}, @enc_lim={0x4, 0x1, 0x8e}]}}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x3a, 0x14, 0x1, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @empty, @empty, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x2d}, @private0, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty]}}}, @tclass={{0x14, 0x29, 0x43, 0x5}}], 0x120}}, {{&(0x7f00000016c0)={0xa, 0x4e23, 0xfffffff9, @local, 0x10000}, 0x1c, &(0x7f0000001ac0)=[{&(0x7f0000001880)="d2a348b387c52148cbacd1474a9a82b6c8276674e24582875df6d0959ce4ac607cc4a12b779498019549bf33a10290784fa1c526cab1c32a007a3f6aa8e209739f47ae75c0c4080bd7144491b7d97ba5d67d5aa9e7f6c83e4b2417a29a09b28ff678bd039c1c89af25ac307f244f2c0407b0e3a06b2f24ba6dd4e4d3c00ad41b5c1401c4f94b5754d00fadb636de291224b1aa21e29e8f44cc2d8e4ce06793f7ad5efd8e9a944db173ac2f3b49044df9a6659d410f978cd9c38d020bccc75c21d5a3e11bf49d4367d2ac32c9edfa00ec79681149ab42d59c5436e368079ced4ec5e647bda339c03bb9e2e7bb0bff73f821c6227b106aa0", 0xf7}, {&(0x7f0000001980)="74b96622bde43c517dd2c62556ffab32e1eb5ff0a7bc9128b44334e3e21b8dc5cf136e13fe9e70d17c824db5e13d7ef0f66399c7ba9e15cef08736c8c4e5143515b27a871696bae8aea910d9d3c5a1f9b2fb18d7572cd41da2969a5c3cc03228c8a82eb91fa7340158eccdc756cc15846bade3305ef8", 0x76}, {&(0x7f0000001a00)="1fa7a7223384d0256944d9b8cd2abd285ef7a890bc30f9322993d796aef8202887baebe0ee7ee4d9ccb64ca2b8474f9928509bed501166ac6e54d129c8df5aded5cda069b06258a9c1479a8f28a4a2c7ded73d3fa7420fdc795d683385fa1d1580b0e659ef77d778264ace6b3688e913d267613fa3e57ae129f2f59c22f79cca4d55134b89286725c9bbe5f545429a3a68f0e394a923d61af247cba51366c19903cd5f43ef138d9a", 0xa8}], 0x3, &(0x7f0000001b00)=[@pktinfo={{0x24, 0x29, 0x32, {@private2, r2}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4cbaecf8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x100}}, @hoplimit={{0x14, 0x29, 0x34, 0x3ff}}, @hopopts_2292={{0xa0, 0x29, 0x36, {0x88, 0x10, '\x00', [@hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x50, {0x3, 0x12, 0x18, 0x0, [0x5, 0x0, 0x800, 0x5, 0x4a, 0x0, 0x6, 0x8, 0x64]}}, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x7}, @padn, @enc_lim={0x4, 0x1, 0xac}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x3b, 0x8, 0x2, 0x7f, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}]}}}], 0x168}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000001c80)="26e39d8431848f9afce10ecb083a2afe258eae0573e190e8330af571f7a60bd173c7c29085ed4981f52a65e2a3c4be3557a36ecd08de9caadfdb4a007cbc583626e2e6b9a3ed7ab647dc8ea110c6169b4556872bff522f7e6196316c54b4c8dca21a239054792eeabd91d88183e73a5aed92ee446731b43c5ed75201", 0x7c}, {&(0x7f0000001d00)="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", 0x1000}, {&(0x7f0000002d00)="c00cb025f08bda8a45e00425d694edaae947a5f16bd1ed33c07f6cdbdf63af5178b9e66b89a9323a8c9308d6da78f3a654b47e0f9703721e22f795507f8e7aac9a8db202e2f1a1c1dbb6581bc6c2a04522ae02b5f328c41691cda07a4e6c73ad551b82bb391be5e2e87e792f97164335e66bd30bbd689db94bb723dcb9d31b82b0d09bdbbce092885c74b414f69435bc4d7f48173d809364c47896a8f79e8400dda4fd92cabddda0efacf360d4", 0xad}], 0x3, &(0x7f0000002e00)=[@dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @dstopts={{0x38, 0x29, 0x37, {0x3c, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x1f}, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x3}]}}}], 0x50}}, {{&(0x7f0000002e80)={0xa, 0x4e20, 0x8, @remote, 0x3}, 0x1c, &(0x7f00000033c0)=[{&(0x7f0000002ec0)="e7c9d564653278a69bdaaf6c55910c044e1f7ef8b2c51156052ff2740a25487c6b1e0e807160b8f5e9a08effa85675036dc9a2e6a25e2aa121e1aea2882dcd76c3a19424e547a2432ebf60041adffb8a75e4efc4826704d2801b8647d6119641d058439e918fb55309f1ab829eea99670b8dc8b0", 0x74}, {&(0x7f0000002f40)="99d82e7fb4e435a3a58f66401cb01c4aeb30e9febd44255f6bdfc6f457fcbd97fabf7cce29200e9b77720444a9357985274df8472af95f22a5181771e5abfcdd88f57a22630203794f0f862fa8440e4dd3fc0efd5ef3c9669f866d20331ac43c9c25d9cb574a1fb2c8143206ad22bd78f2214748671c2dc6cc59f4e6f4f022912c632119975fce368704add4b1d360750f21b22f948adaba4475af0f36d91585bcbb80465f5be9b40dfe72bac5a8d8f211e6ead55cd80e20cc9e54124e7ec3756cc9bf597b14bb7a7b3703130cc7a18594a4de4bc70435ff6d370a3e3c11", 0xde}, {&(0x7f0000003040)="278430e46c447fe62b7856e144ca9b2b43687d92b44b97135a5d14ae18049a06f834e402305ff6498cfb18a33b0ddce2bfafc36c5fcd7d4897fb382d50709cb7c60f4dad0fbcdf45d7696f279189519fd09af5c1d074c319860908b7c758701a77cd87c1d793ecd4a7fb0912a786b235a4bc3dc3a925b17b0502aef3bed5dbed4d4a7a710c48e4e95bc08906160342b6cbbcf00f8c308a85d4d29ba4666d749bcfda1b63eacdfd62a815d4797d4d9746415ab64e54ac4d7f9f412e681697d90bb81950b395677fb7d73f6cecd7c9c2791d8f6693525024a436659edcb2c629d73ba3c5c77e2853bb", 0xe8}, {&(0x7f0000003140)="454aad5888a65c2d774084e7f6f70d70aa3d577afbabd6edd18779a9e7360c6ea46e8a9892c2d7f185767849cd06aa7109a75520a15b36dc88b8fdc8033268de860ed1f983a686348c58a56263132fe2bb0165affdc36d524b992d4341e92b1f1d75f2b4ca762714678d0a475529c62df18e955bd2ba57e2ccd366b69372caa899467dab7a0c22", 0x87}, {&(0x7f0000003200)="70fbf76170acd10d851f8b64237121f94ccb41e2451f5f1008c00cd74b08be966bb4c4af501785c3adfd02329ae6101d27a8fd8a197bd01dec94c293160514c20c72167a19fb7f765ad68dc163beb852cdfc5c05cee97276646bd519b578447cfc070624f87287b01365e753e8e7b0b3051939d73d12c09a2ab94a1f840ae1f445f4adb05af57868dcdabca9c0f48c45770ceca3ccbf430bb2679cadda6b77ab41bd1e96454348baf44653", 0xab}, {&(0x7f00000032c0)="4c6e2b864740c06f19e19967078b3192b597d8ca665745b75c4a833ec243ff024847d2209a67263baa5c86fa53dc0f355680999a7b4c", 0x36}, {&(0x7f0000003300)="0f6cdbdb4fa70b80ac0cf072ce80a871bc29c19f3a38e996186b7a11f18778c09ee183a4aff0247f85a2ba88f37a13e7", 0x30}, {&(0x7f0000003340)="df3b288fd0ef7695623c1a7370cfacbf871b24f9187b76b08b2d1f77a80f144cce9c285cb685e0402f0792d043288e070b8f1ad7dca8afe11a11832ca20629907a49fe2767de0449015fb4c1a8475251b8209426848c61e663c6adfe898af3c930a443f773e03e8a", 0x68}], 0x8, &(0x7f00000034c0)=[@rthdrdstopts={{0x60, 0x29, 0x37, {0x2f, 0x8, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x0, 0xa, 0xb, 0x1f, [0x1000, 0x893e, 0x1f, 0x800, 0x0]}}, @pad1, @jumbo={0xc2, 0x4, 0x5}]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x0, 0x10, 0x1, 0x3, 0x0, [@private1, @dev={0xfe, 0x80, '\x00', 0x40}, @dev={0xfe, 0x80, '\x00', 0x7}, @ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @local}, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}]}}}, @dontfrag={{0x14}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x80000000}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r4}}}, @rthdr={{0x28, 0x29, 0x39, {0x6c, 0x2, 0x0, 0x7, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x39}, @pad1]}}}, @dstopts={{0x158, 0x29, 0x37, {0x6, 0x27, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ra={0x5, 0x2, 0x7fff}, @jumbo={0xc2, 0x4, 0x200}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x4, 0x7f, "14d2b0085e29042853bdef412595b3de33c13688f6fccb8a54159a883b14068743ff65c2d15a9f2a4eaa01200822b6bd044acd9c8de47fd418611536f0fc791844ab3a47b9d7d52d420afde6311d8dd189e32e7664c14cca28508eb5cda7fac09f374d99559027b632ed56d29844985c56f3dee45eb5a414fdbcb9da1b6ce4"}, @generic={0x20, 0x94, "418cfd8d481616cb0387cb02fb11a7e98c9cad803d1ab78c586ae92ee5564d68cd587a5e46c5f2312c570acf5aa8292d2cc45045826df4f380929b47e1c43b82e3f4c297ad04a8f68c46553e60c6debab0399313359a5afbcdcd2fff0b21400f150c9b974d663a7170caf84478b704535ec525072b9abd9ea533248f05f01d2d8a0f974a0c8145bbefe37f70907a4efe40cf34a0"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xf4}}], 0x308}}], 0x5, 0x4811) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) 23:09:31 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:09:31 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 3) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:09:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x4, 0xc2080) ioctl$int_in(r1, 0x5452, &(0x7f00000011c0)=0xfffffffffffffffc) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r3, 0x4b4b, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000001200)) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x3ae3b4a5c963aeff, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c}, 0x4) [ 1081.510901] No source specified [ 1081.529761] No source specified [ 1081.543598] FAULT_INJECTION: forcing a failure. [ 1081.543598] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.544571] CPU: 0 UID: 0 PID: 9230 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1081.544589] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1081.544597] Call Trace: [ 1081.544602] [ 1081.544607] dump_stack_lvl+0xfa/0x120 [ 1081.544635] should_fail_ex+0x4d7/0x5e0 [ 1081.544651] should_failslab+0xc2/0x120 [ 1081.544667] __kmalloc_noprof+0xcd/0x680 [ 1081.544684] ? alloc_pipe_info+0x1e8/0x5a0 [ 1081.544702] alloc_pipe_info+0x1e8/0x5a0 [ 1081.544717] splice_direct_to_actor+0x78c/0x9d0 [ 1081.544737] ? __pfx_direct_splice_actor+0x10/0x10 [ 1081.544755] ? lock_acquire+0x132/0x2f0 [ 1081.544776] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1081.544796] ? lock_acquire+0x15e/0x2f0 [ 1081.544816] do_splice_direct+0x179/0x250 [ 1081.544834] ? __pfx_do_splice_direct+0x10/0x10 [ 1081.544852] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1081.544871] ? security_file_permission+0x22/0x90 [ 1081.544893] do_sendfile+0xa8e/0xdc0 [ 1081.544919] ? __pfx_do_sendfile+0x10/0x10 [ 1081.544938] ? __fget_files+0x20d/0x3b0 [ 1081.544969] __x64_sys_sendfile64+0x1d3/0x210 [ 1081.544985] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1081.545000] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1081.545023] do_syscall_64+0xbf/0x430 [ 1081.545038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.545052] RIP: 0033:0x7fb59c6b8b19 [ 1081.545062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1081.545075] RSP: 002b:00007fb599c2e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1081.545088] RAX: ffffffffffffffda RBX: 00007fb59c7cbf60 RCX: 00007fb59c6b8b19 [ 1081.545097] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1081.545104] RBP: 00007fb599c2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1081.545112] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 1081.545119] R13: 00007fff3932da4f R14: 00007fb599c2e300 R15: 0000000000022000 [ 1081.545137] [ 1081.591089] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1081.603488] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1081.622454] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1081.625925] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:09:40 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:09:40 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:09:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:09:40 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0x5, 0x2, 0x1}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000080)={@empty, @rand_addr, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000140)={r4, 0x1, 0x6, @local}, 0x10) 23:09:40 executing program 4: ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0xba1, 0x8, 0x96, 0x4, 0x5, "8590b361845dd59c1f5da866d3ca6b40854249"}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = accept$packet(r0, 0x0, &(0x7f0000000080)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r2, 0x4b4b, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r3, 0x4b4b, 0x0) fcntl$notify(r1, 0x402, 0x2571fc6d6b7a34e8) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:09:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x80000014) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) lseek(r0, 0x9, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000040)=0x3) 23:09:40 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:09:40 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:09:40 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='schedstat\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) getdents(r1, &(0x7f0000000040)=""/176, 0xb0) getdents64(r0, &(0x7f0000000000)=""/21, 0x15) [ 1090.437399] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1090.442436] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1090.455792] No source specified [ 1090.458872] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1090.462755] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1090.463794] No source specified 23:09:40 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:09:40 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:09:41 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={@remote, @dev={0xfe, 0x80, '\x00', 0x12}, @private2, 0x7, 0x6, 0x3c, 0x100, 0x2, 0x40, r2}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @remote}, 0x10) bind$packet(r0, &(0x7f0000000000)={0x11, 0x111, r2, 0x1, 0xc0, 0x6, @remote}, 0x14) 23:09:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xb00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:09:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg1\x00'}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000011c0)={0x19c, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_NODE_ID={0x69, 0x3, "00b2c39a29a5e9057877f314348031ce9468e82e62d4c222aee738df16896eb4cef65663cd8f98e6209cabcb8f71ba09826087ba6dab3ea366a642d5e2f0647ac727a02279acd56c4357f4c8eb5fac5eded2b53871c873e208561f2c5d9b843e54c08e6d46"}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc264}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7ff, @private1, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9e6, @dev={0xfe, 0x80, '\x00', 0x2a}}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x64}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe788}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x14085}, 0xc090) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) [ 1090.779717] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1090.785636] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1090.788596] No source specified [ 1090.802150] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1090.816223] No source specified [ 1090.820483] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:09:50 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 5) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:09:50 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:09:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x2, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x20}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6004}]}, 0x48}, 0x1, 0x0, 0x0, 0xea3c9da90ed71469}, 0x800) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:09:50 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:09:50 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:09:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1000000000000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:09:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x24) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/psched\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r3}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r3, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000240)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000000005232c5631a1d434f42f8ca5776bd6687aacaf5d7eb633396643b56b9bf4c6651c3acf092efcc9e6878d11a5d78", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="ac1414aa000000000000000000000000000004d46c00000000000000000000000000000000000000dd0e0000000000004d0000000000000000010000000000000200000000000000060000000000000005000000000000001f00000000000000000005000000000000005f9300000000000008000000000000002000000007000000500f000028bd700007350000020002d64700"/168], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ll={0x11, 0xf5, r3, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r5}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x9c, 0x5, 0x0, {0x0, r5}}, 0x3000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r5}}, 0x83d) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7, 0x8}}, './file0\x00'}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0xfffffda4, 0x4, 0x1, {0x0, 0x0, r7}}, 0x81) fcntl$notify(r2, 0x402, 0x0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:09:50 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) r4 = accept$packet(r3, 0x0, &(0x7f0000000040)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r5, 0x4b4b, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000240)={"1c78cb3efca12e21a805c718aa610ebc", 0x0, 0x0, {0x2, 0x7}, {0x2, 0x4}, 0x101, [0x3f, 0xffffffff, 0x4d3, 0x6b0, 0xf9e, 0x9090, 0x100000000, 0xfffffffffffffff7, 0x1, 0x2, 0x6, 0x5e, 0x9, 0xdc50, 0x5, 0x29ec]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000340)={{r5}, r6, 0x8, @unused=[0x339, 0x6dd, 0x7cecaea4, 0x76], @name="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"}) [ 1100.560669] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 23:09:50 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1100.599235] No source specified [ 1100.604943] No source specified [ 1100.608440] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1100.608614] FAULT_INJECTION: forcing a failure. [ 1100.608614] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.611076] CPU: 0 UID: 0 PID: 9316 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1100.611111] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1100.611128] Call Trace: [ 1100.611137] [ 1100.611147] dump_stack_lvl+0xfa/0x120 [ 1100.611200] should_fail_ex+0x4d7/0x5e0 [ 1100.611231] should_failslab+0xc2/0x120 [ 1100.611260] __kmalloc_noprof+0xcd/0x680 [ 1100.611291] ? __pfx_perf_trace_lock+0x10/0x10 [ 1100.611333] ? copy_splice_read+0x15b/0xc00 [ 1100.611374] copy_splice_read+0x15b/0xc00 [ 1100.611409] ? __memcg_slab_post_alloc_hook+0x4a2/0x9e0 [ 1100.611456] ? __pfx_copy_splice_read+0x10/0x10 [ 1100.611489] ? __memcg_slab_post_alloc_hook+0x4ac/0x9e0 [ 1100.611533] ? look_up_lock_class+0x56/0x150 [ 1100.611575] ? register_lock_class+0x41/0x560 [ 1100.611613] ? lockdep_init_map_type+0x4b/0x240 [ 1100.611653] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1100.611696] ? __pfx_copy_splice_read+0x10/0x10 [ 1100.611733] do_splice_read+0x1f8/0x2a0 [ 1100.611770] splice_direct_to_actor+0x2a8/0x9d0 [ 1100.611808] ? __pfx_direct_splice_actor+0x10/0x10 [ 1100.611867] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1100.611908] ? lock_acquire+0x15e/0x2f0 [ 1100.611952] do_splice_direct+0x179/0x250 [ 1100.611995] ? __pfx_do_splice_direct+0x10/0x10 [ 1100.612036] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1100.612075] ? security_file_permission+0x22/0x90 [ 1100.612113] do_sendfile+0xa8e/0xdc0 [ 1100.612160] ? __pfx_do_sendfile+0x10/0x10 [ 1100.612199] ? __fget_files+0x20d/0x3b0 [ 1100.612251] __x64_sys_sendfile64+0x1d3/0x210 [ 1100.612283] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1100.612314] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1100.612361] do_syscall_64+0xbf/0x430 [ 1100.612389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.612415] RIP: 0033:0x7fb59c6b8b19 [ 1100.612434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1100.612460] RSP: 002b:00007fb599c2e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1100.612485] RAX: ffffffffffffffda RBX: 00007fb59c7cbf60 RCX: 00007fb59c6b8b19 [ 1100.612502] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1100.612518] RBP: 00007fb599c2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1100.612533] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 1100.612549] R13: 00007fff3932da4f R14: 00007fb599c2e300 R15: 0000000000022000 [ 1100.612585] 23:09:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r1 = inotify_init() ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0xffffffffffffff81) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="2cd5da7968aa00ee539992ab1d4329c765b447ccba906cb4faf6079652d9d8a173d6581aecab475718c3025991c6ebfdae767b71169ad8009705ff4dab3b544f61e5de1dfaf96c1aa98518ea60d48cff783f15f272435a05862ca79a9497da4bbfd9171ff03c911665cefca1c5d6a296c12060896843ef057da32b55f2c37dfc50f145c1ef410c478d3974d8ee6c94026c49507edc7a55990d6dfeb8df6f71550d0f848f8a77db3c4c6feedb2364edfec83daa57592d806e8c0a7f7ce065afda0cff68ef606a0652fca5985c1215394a74c551020229dc407ce69b235af7823e23bd87a225fa79d00250eb587c76c36533bd874cdeda72d2f81cd2603b", 0xfd}], 0x1) 23:09:51 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1100.680937] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 23:09:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="01004be8dcb60000000037ed0e4d06000200a6757f5c0167f2f890e746de39a663bc4a", @ANYRES32=r0, @ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00./file0\x00']) lseek(r1, 0x7ff, 0x2) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:09:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000000000000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1100.710577] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1100.770949] No source specified [ 1100.777958] No source specified 23:09:51 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r3, 0x1, 0x6, @multicast}, 0x10) [ 1100.869803] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1100.879870] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1100.887521] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1100.892138] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:10:00 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 23:10:00 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:10:00 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000000)) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) 23:10:00 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:10:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2010000000000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:10:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r0, &(0x7f00000011c0)=""/4090, 0xffa) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) getdents(r1, &(0x7f0000000040)=""/139, 0x8b) 23:10:00 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 6) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:10:00 executing program 2: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='fd\x00') fcntl$notify(r2, 0x402, 0x2571fc6deb7a34c0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000001400)={0x0, 0x4, 0x80, 0x2}) dup2(r1, r3) getdents(r2, &(0x7f00000001c0)=""/4096, 0x1000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001640)={0xffffffffffffffff}) r6 = dup(r5) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r7 = openat(r3, &(0x7f0000001300)='./file1\x00', 0x800, 0x100) getdents64(r7, &(0x7f0000001800)=""/237, 0xed) recvmsg$unix(r2, &(0x7f0000001480)={&(0x7f0000000080), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000100)=""/70, 0x46}, {&(0x7f0000001700)=""/241, 0xf1}, {&(0x7f00000011c0)=""/104, 0x68}, {&(0x7f0000001340)=""/160, 0xa0}], 0x4, &(0x7f0000001900)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000042c000000cf6cbff56d328507b5dabe675ec9c912800b7649f54512a665278359257158504fe45f54f864da4f1eb509140d2177a0927da12d483d5ee0ede149f78e16f73b30605fdd420831775a8644e94b00"/99, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x90}, 0x2020) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000014c0), 0x10000, 0x0) r11 = fsopen(&(0x7f0000001500)='qnx4\x00', 0x1) ptrace(0x4207, r8) ppoll(&(0x7f0000001540)=[{r6, 0x4000}, {r2, 0x4}, {0xffffffffffffffff, 0xa030}, {r2, 0x976}, {r9, 0x1ca}, {r2, 0x500}, {r2, 0x1}, {0xffffffffffffffff, 0x1000}, {r10, 0x200}, {r11, 0x22da}], 0xa, &(0x7f0000001240)={0x77359400}, &(0x7f0000001600)={[0xfff]}, 0x8) [ 1109.901814] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1109.907249] No source specified [ 1109.914395] serio: Serial port ptm0 [ 1109.915260] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1109.918193] No source specified [ 1109.937657] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1109.976128] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:10:00 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:10:00 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:10:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4316000000000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:10:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) r2 = dup2(r0, r1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r3, 0x4b4b, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r2, 0x80}, {r3, 0x89}, {r0, 0x80}, {r0, 0x400}], 0x4, &(0x7f0000000100)={r4, r5+10000000}, &(0x7f0000000140)={[0x6]}, 0x8) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:10:00 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:10:00 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:10:00 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup(r1) r2 = accept4$packet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r3, 0x1, 0x6, @multicast}, 0x10) 23:10:00 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 7) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1110.191549] No source specified [ 1110.198641] No source specified [ 1110.201622] FAULT_INJECTION: forcing a failure. [ 1110.201622] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1110.202583] CPU: 1 UID: 0 PID: 9383 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1110.202602] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1110.202610] Call Trace: [ 1110.202616] [ 1110.202621] dump_stack_lvl+0xfa/0x120 [ 1110.202650] should_fail_ex+0x4d7/0x5e0 [ 1110.202667] should_fail_alloc_page+0xe0/0x110 [ 1110.202684] prepare_alloc_pages+0x1eb/0x550 [ 1110.202706] ? __pfx_perf_trace_lock+0x10/0x10 [ 1110.202729] alloc_pages_bulk_noprof+0x148/0xc30 [ 1110.202746] ? find_held_lock+0x2b/0x80 [ 1110.202763] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1110.202782] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1110.202802] ? trace_kmalloc+0x1f/0xb0 [ 1110.202813] ? __kmalloc_noprof+0x274/0x680 [ 1110.202828] ? __pfx_perf_trace_lock+0x10/0x10 [ 1110.202847] ? copy_splice_read+0x15b/0xc00 [ 1110.202868] copy_splice_read+0x192/0xc00 [ 1110.202889] ? __pfx_copy_splice_read+0x10/0x10 [ 1110.202905] ? __memcg_slab_post_alloc_hook+0x4ac/0x9e0 [ 1110.202928] ? look_up_lock_class+0x56/0x150 [ 1110.202948] ? register_lock_class+0x41/0x560 [ 1110.202972] ? lockdep_init_map_type+0x4b/0x240 [ 1110.202991] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1110.203013] ? __pfx_copy_splice_read+0x10/0x10 [ 1110.203031] do_splice_read+0x1f8/0x2a0 [ 1110.203050] splice_direct_to_actor+0x2a8/0x9d0 [ 1110.203068] ? __pfx_direct_splice_actor+0x10/0x10 [ 1110.203090] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1110.203109] ? lock_acquire+0x15e/0x2f0 [ 1110.203130] do_splice_direct+0x179/0x250 [ 1110.203147] ? __pfx_do_splice_direct+0x10/0x10 [ 1110.203165] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1110.203184] ? security_file_permission+0x22/0x90 [ 1110.203204] do_sendfile+0xa8e/0xdc0 [ 1110.203227] ? __pfx_do_sendfile+0x10/0x10 [ 1110.203246] ? __fget_files+0x20d/0x3b0 [ 1110.203272] __x64_sys_sendfile64+0x1d3/0x210 [ 1110.203287] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1110.203302] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1110.203325] do_syscall_64+0xbf/0x430 [ 1110.203340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.203353] RIP: 0033:0x7fb59c6b8b19 [ 1110.203363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1110.203376] RSP: 002b:00007fb599c2e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1110.203389] RAX: ffffffffffffffda RBX: 00007fb59c7cbf60 RCX: 00007fb59c6b8b19 [ 1110.203398] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1110.203405] RBP: 00007fb599c2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1110.203413] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 1110.203421] R13: 00007fff3932da4f R14: 00007fb599c2e300 R15: 0000000000022000 [ 1110.203438] 23:10:11 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 23:10:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) 23:10:11 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:10:11 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:10:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8cffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:10:11 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000001700)={r5, 0x1, 0x6, @multicast}, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002d80)={{{@in=@broadcast, @in6=@private2}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000002e80)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002ec0)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000004800)=0xfffffe73) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000001700)={r9, 0x1, 0x6, @multicast}, 0x10) [ 1121.120760] No source specified [ 1121.123005] No source specified sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005f80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x7fff, @mcast2, 0xffff7fff}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000140)="3622fea19597499f9ddfdc9f48505070b1a419cc20e88f125dfb1a5f1d3e528b178484d13c2418b9e5c2cffcaa6d3b76b58aa169b90c80b7bd38165d4aa4da2860392c8d6457550adb009e9d1947b1f1198da4c2a602849498917700b71493d5ea572cc8fc8ca90ffaa0d3ca76f79073364ff43f8097b7b971b541516f558a5a2b22bc709d8e3fa8a38a22af63d588d44f30da6ed5fc2b", 0x97}], 0x1, &(0x7f00000000c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0xff}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}], 0x30}}, {{&(0x7f0000000240)={0xa, 0x4e21, 0x726, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100}, 0x1c, &(0x7f0000001680)=[{&(0x7f0000000280)="e2d94abe9b6f818be594efc9e13fedaf0ec2139c2644728adb0e412f9155628b4d479629549260f3fedc212f41c47d4e1e1dded336396af53f6e77b1b02a2237b8389d54a2303d0f2c134d7df053713446400b5d280524992e9e14afe542df9f22144ee7a9396e11d9bbf2d837ce", 0x6e}, {&(0x7f0000000300)="8a22dc2e1ecd77c1f17d30a2e82cb444feb260dcec95cb401935c30ec73cd76ee444d0b82c04e9c938678724a9dd4fd155366870116c0815ae72fa26b4201b8880fb0fd82d1027debac291e6263a0b3489bf8a95e393cc97365f4805d46ad5995b149eb8f3596be2acf20308e43e65292513aa817a8e30de1e3283ad2661", 0x7e}, {&(0x7f0000000380)="a679c497744c4394bac94132612dcf1763a80f37ba7f1a805a29b6c2efd1eb2000a834b6b4d95e16f031bbb21a3f2ebbdbad29b8490c11daba78cbac88ca0fec8d13f2f886c3639058336c5521b29e6144da3fa78a469ec17500aeefd2367752dce63cdce9600dfd6097c9637a49ad338909f816369c1cc56f0c7399863c84bc3cfc8c0992db7a7faaf155009f3ca2f1951553e43ce9bebfd9e81a48c78e00222f48ebbf433462763c3465a45f86760bc3216f007d54597bdc805345916c612f5050c88e4fbe932d33f6cc63d939d46e43ca0b829a4c9d934463fa9f32bbc3f1c2d6e7e0876ef4f76f8bd66a2bc0df745bb33bd23a0a5c", 0xf7}, {&(0x7f0000000480)="c6afe7c2f9c1b68aab388f2206c8755e4ba9b20afe139879443b8f04bf79e3af08c2ca18e741cda5fa7f8d44da45a3169953512e798fab2257978c3dadad46ca9f90af4678369f1344c78de032400a741b363ce7ddb87b8b43d0f3c8813678a14a39c850ebf3c218bced2bbebb20c71238c75eb510c2117756be68cef4fcc642d7b712890bc0d0af4e6ba112aa5ef50062d525d3841a", 0x96}, {&(0x7f0000000540)="ecfd90b89caeecb6d24fbd5981c5cb4fbed97c5835708a133d8080c69d77d17929ce7048b0f32c87d7d8a6c68269ec27949aacf36e2ac1c333e5b481b017f989379f297986056ac5273b58c3f64a71e9d9fa5c3d1ac4e74c265477ba75529ec27dabc7872abb7e53124199a4244413e040bb0442c4845f40a3ffb8172f2a279b1840a4d078c29c136cc43b8af92270", 0x8f}, {&(0x7f0000000600)="6dbe810ac9d543cdffa2a6cb63888e4b247a398da9ea0428ea898e2d6315b0036eea9fb14fafdef6d86b8be1208ed3f76bfe65c3b79b7c2555df83323f22b81d375c3cffbad4ab6698674f9cd250766d453f15497dd5279849d6106a452d0b97c6e4", 0x62}, {&(0x7f0000000680)="f4f2f74144e66df9679777b2ec65d7c1adea9f34c0122ed88915af602011d01b41d785ed1f9e5b0473d905783ecd361f79e573f8d2a384b3ae628adb6da948bd90022085d94f8b61025e30b772637a9e5a4a706970beada3031c121aa824785a6b6563de4a580c9e5625c2b81b1703df3013b55499e9be3e5d06b20e3ec45e2022b298b8a46845b4145d95157f1f44d8a4d11061e86780f3b5ebd7d4d1036f8fffeda599a9cdc42ef341a1ff0103e5056907fe91f1647cb24310fc401ceac5641316c4085fe442683650bb606b243678ff96a0ef9922168c581df5fd3474c30f604d87236877fd767bb1bddcb140eb087c9ec44dd935f59751ddba488ae22ce3d0265612d88133c2ddba4844742bafcd12a4387077e3fab2c0f578aaf2f6d9f2f7e9d17ded3b9d72a87ddd319799b21a540a2871e1e2b717f29e97c09805e06ee6d79a84bae41bdb7216317ed734eb2074a28b2c46a9ffd9cca470db156863dc737f1ef484564f3c8f01accbb757102e2dba22bd5f0f245b5d30a21aee8ca1161db0937bf210bb37672b76fabe31f0e6f7fb595f3a0d556d48ae0a8883aae0080b89859211ff61092a5414515bd76e35b63a456890f43fad07ee9dde1ac6ea312cbd7fb80644033f2fefd7846ad768197655af692ca3f822a9f155fd24ef84761bfe4fb71fc449b2a599c2c676f710d77b2489121d8ae8a4cbdd1f7c5ebc0ac04b4a9e67f4a4987e259c013582188b16e8f911dfa106e54873e12833e4267b5eab087ca4fb59048986b861770fb6ae746f1c3eb0011f7bc02bc6b53a6e965386c6bba290c17eb4078d60e4d6d5e282b5957f217094252a48e609dd156305b6e0126ce4d013b4a3667144565c40ed2910c713b4de06b22ed9523f62cddc87725205b3a8425cba14973462a8e0e824ab1bfc91a9661f76c46a99f107e4a407ef81e9188133aec66f58cb79657cebfe483b527bf2f650bea364263d6fbd75d332d99a1a198fc19c9296d3c9a7b8f61da61a45e11219a2c4826146e2fd1548c9f78bcb0f0d54d171580c803e06d41d69c728482c5f371fa0b7fe9d7c6e94cae68610c521be33e0e1b8dce56cdc207f43c273c84adb90cc7057dc8e22dc1d20477c9f2cac0170c4e36e1b992e4193571b9e7af54cf816c612e55ca67cb695ecd3c60ec2f740a628fe96f672e8a2667a599ecf258b087bc5b61505e448a86eb901c653dbec92f9f2c7e707032f4e524113d3c9844bdc5cb30e66645ceaee495319e021fa9890a119a424d7572f71f9668ea2c75d2e248a2413d10636cc2241e6c89392f29715634b3a513681ca70df188f2863247444c7ddada03cfc3b547be44fdbbcbb7170764c9ffb3365d208261586016094bcd8789fe5f7efc675e496459834c3cbd95d04295efbea8dbddcbc4739b0ef87256e486227dfa1ba8ac68a7ffd72d2b2cebe713780aae153b2cdc96c381b3c4b0b8a4e27208ebfca824bf6e76a75ef314703e1d4cfb087cb66a647f58960f3f4dc162d14bc06170cee2c6682db92ba79440418db10c48af669422c8dfdab41334c0a5d3110a262d391640122841aea19c3f2fc205e353ba2e67e2a874518ae4cedcb34ffd7105be92b623378bc727fd201efd8b5b797ec1cbe62fdff018e4f3d384991c19564509d0c6adf8fba146882ffbee508d81b5f671aa3f824687d29121408aa89758338405ee0d4e5cf6f3ad00844587b80141281529894690e5fa2d06f4f76297a794d72c7a0e4ad88d907133cff3432b37d2c526f56cdbaf0b33154743f7c7beec895dc94a181c336ba990808581d0ed17faa1a2007b289c739c54ea4c40e30dae5d01ec270439d9e12b557649b4beabab76189723b42148d85bad04360a5a55730f669c97bef11ec152c020230e79f6dc9875613c349cf4904dae6d97b23b8920e620764fd0d12130d7063f17fea3ee9ec88ceb0b2e444e5f8e234f454bf6d773bc35d7f049e7203e4455b4e5d90186ef2aa892abfba4e173767cbca18b6ea9b143d68d2534ed1c51051477ddf7190578bd6384072e5392e8a39f48b7b839c1ede00a710895dfaeabc5915a40dfa71717d86678fb122e7b898f486ac64f866e2e471fc6f9cecae492f5a3b6111691b4e51d07de4c107734f4f363537c6234804bab4f975b13d954e83a6c86ad88ab6cc2449604d73ba10eb9ade0e4dcf35cbae0e7be66f9ceb016584f436be1b10ae2b0d4ba226e885c99efea7722fdd3a31e2aa7dd76e0880da495050932e488a04a141bdb34685c228c2dc9c51714a920f7e0e84121c9e4347411cb6a9a44bb2a462736214d42e69462e50597bed3fa60bcda9b70a1aa7994fb9d42a2a37d6288f1dfe062904c6f927d3f6d921717b724d1e86ff99b6904296e0d1b1abd0e3f3c7af260aa6abffe04b7c07439d51db108233b95f689d41956a5319a4fde7879be2d15a81e6253b10a213990846e1d80dd282cc66b2cac22adf59386af5768519b0fdce012f5f6d9ced3d996c9385f3d2fe7f9eefdce7c450c187b8d235f31dcffc636321ce9d6dd5a5127795bad01461003a0565a84121588980266ae752a54bb5e0c08fce7e0306f9610854638535448b27798013430b960da2a612e4716310edaf0efced2e3bc3718d7aa5c5d3abc378cc371e5254c749f9e35ce4a4aa8f58648e2929a419cf280a80066a5b6db37c8c8a3292248517cb0759e3a7be16392a61c22e3329465dbb26d474a56e8bdd7c80bf1368d0a5f3d8e63c00f9db52591bdf16a6dc135dff608c9abbb78b27f49b85d6112d6fa4b912f459ec6b351c3c19fa6ebb880f1b82867b62364d9951a6f5131d95b700ebc3ae148758f557a471f07cc42c55917284114117c104350d2c6fb4c43b37d483ad3f62fd8ee0ea72f783298a56d62f4ecdfd7f4bc1ad5db177b9eedb630b3157fa68c0626c8c3ac7cb86d27dc06cf4596309112174ad174b4a0b2d9a51bdff6a6ab24f28bb43b575ee5092ddf7f664d44a7ee65dd9db49ab95ab14a76308719e6bd011f433420f9e5e62909d16976bc50fd73593c26a3173df5a0772090f984105d08d8f753c28767e61a79ad5d5b90c0ae16a060055d69b516b0c0b4006a132c63704772507d3b616e21ec27dc7ae55681c9ac3d8526b25e4689aed9ab8f9b1a047a2a951645cd7d998fef93825019d0dff4044b2685875c347e7a425c6a3b7b4d13f4f8d61856f7a35121224bebbc6e4eb820a607a66d216be0f03c4c60c22b41bf212c86cd41801f41edbcfe1e3d364f9bb6a412c32c68379b7e2e9bf7470e4375198efbf94e54c5a8a485c4a306d689d7b596ab36d13d59d099fe37236b78342624a8c69239c65fa08fc9c811d6d0758efe9954ec9a847ecd030ccd3de29250b069e2f0ecf677a920f78c932a5df7311e38889ed1324005e9c9503bed88d1e98575cfda9bcd7be953bc802d78e9c47ff3295e3d9c25dba0988211ae818c4a218831018e4c73aab3e1a1b082d35ddf537c57e1cebda7e7a8fae55e0cf1b759e6100f6a87dfcfa7d48f6c3173fd2c9d9abc8a813acd20f536623318b5caa1969155923eb717f929f240915d74f0d0073dba5b3f4fbec63ebfaf5267af464af9fcb2882043bccc0eef5d4b6e0d7230c8241b5aec95493c8b486ca2f083f859de55852a8d577486edf7ee8736bf9daf6f65f9a88e688113ada60771fff5c35f41b7c24d34ec157df04526236f574e4bbc8c459234ec177500c1abf43337004caac69567ec980c1c02c71772607fb22ab27a457c84b8cc04620696d7284fa8aa04734735015c4b5deaad3db5c02f8183c9630bacc0915f507e2ec308d860142f94e9728eed9994eb0ae4de780177fbc624388755ceb62905ce6c0e67e237acca0ae062bf9c12b8938e10b2dc4ec4c952b4dd4f5c260daf1dc5585bb00d2af81d79a673a3de53c225071fa00f8064469b5fad31c5a79c20cd0fdac2f491c7981d3387752cbbbc8b202450abd73ed284acccb398e01d56f60b02888e36f6fda88c35324ea0712262b6d61b38002550adc939d269c05102eec0bb5c6230e390eb08fc736af27e96cf88c70ec729cdebb231ae09d87844db5946e9d145626fc019699d6bad7229023da78442af58f25174369c368d398aafb46453ae35360e67b6c07e2783d4787df710ca0abb1cabdb468f23dc28dde0382d78b7cb372bfcf39af9c7ef97b46352db15a02eae8cc0ea36e49513e80bd3ca242959d7e7eb354f6a8e16e4a27a56bbbc90beef539afb0c95940b1928fb5e7d44f89977da03083c5d9b4c3a530f36c1db1af71904dbdd8614cc8d7ccfc1e16a79add5afa1c1be11f080cce7ee3353e40fdb80e18c738775156770bfdf66eb695472c92f45f9d42099ee92ecb30367ed269def91f4cfaae41a3626e1bcdfeb3e5357ed484e40b5e002345a9f64988768fc08c30bedcfa5e470e246a6deaa323d6d0e4866512ec91426ac2e508208bbf1a75836372ca36fd1f0d19db8c68a17724ec8eff0e5afdceabb429c11610a90ff36926c42256be5ac17163677d0024d0981a4b6d18cbb126f2a9836e6196dca05b61dcdedee96734b4f57861d81dca08ac7dbd75c22e1b3d136e1bb3a8bd4a3efe636f0614a585af76a2cf86c61273322b01ea745c68bda93a69a07425e2a47a9cb3fa5c72daa3289c016fe57e7139086124939ba11dd3be1a5a9b60ffbad5b86458482b427a349a9d824c9544dbcf97cf9de479f497ebb243f2057e36f7b79a40ce2837bfb94cead834ecbd238e90116faebe63b51f1eaa2f193dc9a858b23ad635a679d47deb4fc8b61e19c550c24b835fbe386008f974df1a479bbc39a56bd5d916ee44d80015dc0f36fb7409f5fb20cb9e0b47e1391186e3603dc6937bc7a2914e427f10b008ab3e524f5e1c20d7fbff1fede73190cd0b50399916a4ea90c9258a38dfb5aa6d490c8920f6e5e39135cafff03404e568cb4dcb3338fbadede225c2e86a515333817c32838640674584439d525a758b011b7e8547c40e9a53a438a29525262572112da6630203e62752282fadce32a9dcd738806860c5a767b9bc277e846e2c762d64acdae0bdf778fafaf6c6a9f5ce2a427ff196bce9478a61da8bdab2a348b40b83a4970decde8ceac965a5d8ef3d12c48df891ed16faaec21f204fb172f880f7f8f009c6c76f5ad4b490a095f05e0b58d4849dfcfa8f03483b6ed700987f4aca572544922bef3bb3026b0a4de21b09b4c53d022bab87c764fec4bd5842907bb4e8517c0bc44760fc2165d2268a6fb12bf1e84899e692b098872fddcae18fd7dc2fbaa684b9c7c061adabf04bcc47edd80cf2924081a5fd07b82e72ba6b020575e429589cd973d1d97124d1436820fee8aa3d4893304f5bafab07c0a919d04c737ee50248e8df336ef0a5bb61d74d181b959c08f9dea442892e070e9736665dd2509a59852acd53e57731e9ac9fab3fe4491754972afbf5db69010a6b2fa445cc1105b8a8301b738c4b4ee8426f4d821eacf7c979b2667b3fe426d8807c18d91333737603271e5bd356bbc16d843112da9258efc49b7fd3b31ddfd21bc98afc8da569c878cb925ea02cb5636eeb4ac33dd0d55c3c4ac5300adb392ac49accf43da0826190bcbcf77623627add77ecc094f2b2fad5beff1e96a39a3a5012da37674a0aad985c32160f56c08fe6c3556ef223cb77df2a259d99779cf0c94be123fc0e08679b367cc5c8a5c47553f47d88e8d622efec17a1156227b3a3e2f470cb3d3afa9c64b4074b5ace98eef13ae6db9cac18fba73379a858", 0x1000}, {&(0x7f0000001740)="710b449725a5b592eedd70d90c881e3b137d9e31ab9e83d2553318af79a7609b3b00d32cbb16cc9e94ff70803978bc5b80f730c0c35159c9c64284bfac2fe1740f68e25fafc50ff9cd60d9b9a36f92f50a2959f012949cd33baa8ed818fad43f3099fb5f77866d39acbb147acea9e389c8e9f4cd7b7f3b26b1c056f3382c066706b6a05646", 0x85}], 0x8, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0x1100}}, {{&(0x7f0000002900)={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000002d00)=[{&(0x7f0000002940)="738fd45fd2a5d19ee0e33b354063f181f7bc094955a286438425fddeea09efe2ce79160702e2a52c042b5931843fc80efb8f1b20bf8afc780ffbacc2acb5afd4b4b9d55f6d2f02936a2137695c15fea70ff37cefdc5829a5f03ae8d17f18d8c556057a827716584e8609970acad83028c7fca7b04919891db77352875755f2bb7de961eff4486815e428f46ffdc418bbe37443ee0fcc463b38cd458f5e468d57203f89b6492047efcd97a9716f743b4ae76592214377cd49d36c6f1087051ba609ae2b45f41bbe13e82adf08a592771471f7bb4a6be2bfa7ba3b0e804cfb08b2384a63ff150df7840f96d273664cbde8436accfcdf35", 0xf6}, {&(0x7f0000002a40)="180b2abb08381e23ef7f3e3b46359480ba05c0f9d3459e0dfa7d438fded5b46000d3e64d3bf89ab9eaecbc5365fb19598036f9e46abd5b06c212787bf84c648c529ffc59ff70c70f404885365a4045d42f2ef066761d63674da125a8594d30c7d3fb622e93a0188117812015ee68291d18953a985693af487f2f69a71e1b4fa5c8270fe8f4db9691ffe143bb8ba86d4a5bec123d3fa97b1c7f2a5716695b0cd0464d2cdda72610796ae5841ad1d8ced68d75f641f53df4deac981d59ef4f08f3cfc0f6d469f1b63584c7585edd1ad96630cb30f05dc0fa87631feb6c", 0xdc}, {&(0x7f0000002b40)="d3eea741a3eed1883b8244654c3d7ca57102f285aa097d043360c60067d065799bbfcf65151ad3cb5319dee4df888a0227c66303eff8af9b570d399294a675186f749ff9bd4b92414d02b40d31aa88b46f83b5d3939d0477f4f766d87415f9597282e06be6c4bb735e44a9ce4aaab0bc733a338f7f61953d2187f0f37e19d63b3a8307c8d4e36d91f23cac73ca7af82d1403093bc51f1598d48b60d7c39c31ec4f1af77f43883862", 0xa8}, {&(0x7f0000002c00)="324b4d4b1f7afef9ab4fb003d726ac20a0ceb703b769f61e98c7ed145d35f1de978618fcc62d07afa942dc4f3604f559c1dc4376c808bf5ff50e19bb93f9592f1034b13dd5118ada8bcf0592b9b2dc341071e8fad24db9b72286e2193de4e8531334d5551cd1c85da406bcaab4fd7e7053319278b473b79151cc38609d43bd161020aebf3310", 0x86}, {&(0x7f0000002cc0)="da5065ba31e63b225cacd25d6e97d7eb090a9eb84a82532ead52ba5e424f7c458c345f0439084c20eff15242ef7e0302ce9b4f3dc157f67ce66b9a09f044f5", 0x3f}], 0x5, &(0x7f0000006140)=[@pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r5}}}, @rthdr={{0x48, 0x29, 0x39, {0x16, 0x6, 0x0, 0x0, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x10001}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r5}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdrdstopts={{0xa8, 0x29, 0x37, {0x1, 0x11, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2}, @generic={0x40, 0x78, "c7a71908701f95840f8ffa59637e3427f1e5c06348cae045f4aad2bc740d41727c50d14b93c542a2a139cc8501748edd2654612f36e0d4efb908f9c729dab89d3e88ff91c07861d074c131116d9ae4cf04196b642d92fe68fbb50bfa4571cfc71054f59dbe260930db60c72e22b978fc76b284a9a1d4519f"}, @ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0x200}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x43}}}}], 0x1b0}}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000003000)="f863f1512cdb3105aea82f3d5d6a7fb871f2854c78015a87a5a41b9b07452e8d679087cca6de2c363f4c29a61ae82c368685b0964169e2", 0x37}, {&(0x7f0000003040)="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", 0xff}, {&(0x7f0000003140)="8c70b1bf31e9f28e0f527a222dc300f236d1f4188c29292f4936ece84e8f496ae6ce44708fc00d20915c8f43c010e07cd8aa033032a0f9663a6c47d5fadf9b294a7013368c1d9cb296fc0332e86e81c1ba53bad1bcce1c796d3ac683dc8d7f02cc112542711a98499d3edb737ddc791c01f0c5ee922fdcd97bc4004186dfb36580ae646b40e05753e24639ae62cbeb2a7aa2fac48238c219a6a6f0cb6835d33db1c25ab296b67ed72c39e97a0528d8c6496c239f39b7ca8371bbf8ea55942f", 0xbf}, {&(0x7f0000003200)="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", 0x1000}, {&(0x7f0000004200)="acda2be5a8518526d144506ee81ad08613e4385b55f325155e5801b911833653808a6d0f69ad35bd9a1e", 0x2a}], 0x5, &(0x7f00000042c0)=[@dstopts_2292={{0x110, 0x29, 0x4, {0x6, 0x1f, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x27, 0x400, [0x40]}}, @generic={0x40, 0xe4, "cda2a029448f8ae91de1fd6c67457ed155920f8115332c68410ca90ebda13599d98f8f40fc1e25f5c56ce6f103f866f60ff9245fec9c00d8fa9d1bda92a3b094f185b30eceb88faad4128f25527a80f2cc6294689e0cda08083b97488a777de33b280a747295351bae62734711c301e2730a04583474f77ed1a45e39671078617eb4225cb7942d1c188c64047120cdb422109a5716c25462cd885baef7ffe0f3cc074ca58ff0691be2b109c2dff3ef99f06af388b1601e0364263ecca416aece8cfd78a213482c4f413908049ca4a04cfdb924c2eacc8c7d53f8f7f96f5ac2b7245cad08"}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x19, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r2}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0xca, 0x12, 0x1, 0x7f, 0x0, [@dev={0xfe, 0x80, '\x00', 0x39}, @dev={0xfe, 0x80, '\x00', 0x10}, @private0, @ipv4={'\x00', '\xff\xff', @local}, @dev={0xfe, 0x80, '\x00', 0x11}, @private0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @rthdrdstopts={{0x68, 0x29, 0x37, {0x73, 0x9, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x25}}, @jumbo={0xc2, 0x4, 0x2}, @ra={0x5, 0x2, 0xdb}, @enc_lim={0x4, 0x1, 0x80}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0x278}}, {{&(0x7f0000004540)={0xa, 0x4e21, 0x8, @mcast1, 0x4}, 0x1c, &(0x7f00000046c0)=[{&(0x7f0000004580)="c868b0f260c3dc002f815cd6ddbec2ad036308b4ca2315016d5ce1a555e5bd49ae270793eda824c3a7c7fff6a464518813628230d9e1e88f1de2e4055d4d4070", 0x40}, {&(0x7f00000045c0)="7377a42a9c069f39eca98a502b756e2aad380190900eec250cf431", 0x1b}, {&(0x7f0000004600)="ba36a82f194deaaca4e83e506b9d89bcc13c12330b829af614be184d5c9a7e9089a817d9ebe60ff025d72a416afb8cba0a33d78dea89f13eeff6e433d50653aa78b4e8c43f75de5f0d8e49e51768b3795823e846545c05d16163bd0657244fffd4f2923a7e8c72bc493186bb51ebb60a4d", 0x71}, {&(0x7f0000004680)="318e2a96a0d35b525eeec78e5843", 0xe}], 0x4, &(0x7f0000004840)=[@rthdr={{0x38, 0x29, 0x39, {0x0, 0x4, 0x1, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x41}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @rthdr={{0x48, 0x29, 0x39, {0x11, 0x6, 0x2, 0x0, 0x0, [@private2, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r6}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r9}}}, @hopopts={{0x48, 0x29, 0x36, {0x2b, 0x5, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @private1}, @enc_lim]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @flowinfo={{0x14, 0x29, 0xb, 0x8000}}, @dontfrag={{0x14, 0x29, 0x3e, 0x100}}, @rthdr={{0x78, 0x29, 0x39, {0x29, 0xc, 0x1, 0x3, 0x0, [@local, @local, @local, @mcast2, @mcast1, @empty]}}}], 0x1d8}}, {{&(0x7f0000004a40)={0xa, 0x4e23, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfff}, 0x1c, &(0x7f0000004d00)=[{&(0x7f0000004a80)="696aeee89ea3a835645afa024f0fb52f08a5ab4b1f1b84b2015270fc254985ca0ae5cfcc5859604362e5c47414e784f97bc57855f69a5565c5f77ebcdb4b00f1be5baec19f48ea203e754411bc63f2edd2", 0x51}, {&(0x7f0000004b00)="9292f4f2c032831630e9a4c60a648460aab8a400ce841124b417e7b6db4f468594f21c072cb70a08caff065b9b84f8ef301ef7d499d5d384320f7669529e331694bd18", 0x43}, {&(0x7f0000004b80)="13de864e5f667339ca71bf6c4d85696c5c7550f2bf14dacdd3f5c21038ddaaf29408025476f745dea8a0c41959d4f15cb401c436e2e36c23336787c09249c58dfe5b4d70158001eb3e3e61520a45da35f0f90a7e6d6e68563384f7e0dc080ddd0fcbfc1ea0067a97b93920e0f99a8590e7b0f9c6412670e7f848bb8b40e7d20beae8af44c165858d866730dc2bf84c56dc66582dc309f3abba886bd4b4e2fb5b4228bf8b90a50157b504814e02dc976ac07ab9ec45cf717cf9e3bdca30c9eaeeb655c1af9fd8da93b647e2ccffe04a15696bd87482afebd4fd711b645a3a5aea526df9", 0xe3}, {&(0x7f0000004c80)="bca899b1e7501fa7724016ece87e9470f4e16e19936289d770913d926d75c6fe3bd0ef777b1fefe3718b670c6e12ecea993262b9c54cb9d5823633ee378a5c9fddf81b7d2eb7fec9c0134ea6b6", 0x4d}], 0x4, &(0x7f0000004d40)=ANY=[@ANYBLOB="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"], 0x1168}}, {{&(0x7f0000005ec0)={0xa, 0x4e22, 0x359f, @mcast2, 0x7}, 0x1c, &(0x7f0000005f40)=[{&(0x7f0000005f00)="036552bdde247857e8be86914de7ccfc138eaa047aedca0715195e3567509a861553a2e9", 0x24}], 0x1}}], 0x7, 0x4040000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) 23:10:11 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 8) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:10:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000040)={0x101, 0x101, 0x1ce1c891c41e8fe, 0x1ff, 0x0, [0x6, 0x1e2452f7, 0xe3, 0x8]}) 23:10:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xf6ffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:10:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) getdents(r2, &(0x7f00000001c0)=""/4082, 0xff2) [ 1121.184954] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 23:10:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) r2 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x3ff, 0x8, &(0x7f00000014c0)=[{&(0x7f00000000c0)="098a6dc2b81ac1a571cf0f7a85dc6395b8761d2656441e0f0c8402151097fa2e181377ee2ad5a6d55188", 0x2a, 0x875b}, {&(0x7f0000000100)="55815a76a3d827176473124d5f104f6a43341ec761231da4b2f0f70f205103d79de3dfefd287d3d9e87c67bcbb4f80e2fc0a64058934a5a3e9fd2a7f2c230fdba6028788d8210b43403443d0a654f03ed0c67bb463b1ff512e5f65ec10f02ba9d73bfe3086cfeb2c71c414afbd17ff46960d8a10feddadc005e885a6fa8b1085c80cedc69acfb33b8f504dc7dda78eea2861a71cb2ff251c1839e25777eb2df87fde", 0xa2, 0x3}, {&(0x7f00000011c0)="d8b410c72a3104adc1bb1fcf19e1a9780bdb7ad122b06a5760f2d861ace6e78ebd72d1bc311528be2e3a20f896e87e6c4995a9a55cc8ad57b02814a4a158a0fd6ea17955f96e12c64d71bdc2623fd5a1b707f55679f01b61b3c9f79b84d21ca7702fb7aeaa62f2523657618dd75f21d4860e79f671953d25649fbde30238ab32b5c2577484be4d1be5f2280f40e1952450bbf2179a7a85", 0x97, 0x3}, {&(0x7f0000001280)="8c", 0x1, 0x7ff}, {&(0x7f00000012c0)="22df7cff", 0x4}, {&(0x7f0000001300)="01e8aa02c2630f42e898efc3eb9e8034b4816a72581a019482de27721b1029", 0x1f, 0x4}, {&(0x7f0000001340)="4411ec0b3bb11dd2834929224e0958bef3127bb27216c413b78f5ed941ad31a72dc1c6b809f721715a4d945d004cf5b83f58e6dffc2be6362c5645f2c6184c1a2c9cf96c53c923e1bd5f8d160d052e1f08469b3c6feb871db99e4b3f8c3f68806e66c4030dbfd958ad5b4ac96cb0386632c5943377c3bb7bd6635e0a4d9891a6948b1d2397362f04ea5556b8dbf2ca22a5bd25dd65b6fafd4c90435915560665f4ead8763dfe9098e6b829b0", 0xac, 0x2}, {&(0x7f0000001400)="150fc86e38759bdb026c2af1762a255079905268cf6a05c4502bb0803a2faf54646b75fff040293853a65f998355268f841b82162910108a441cc9ca24862de69a89e6d20cef830b51654a612ba2d56e6b5b8e2ed660a9235d66657fabe0eab5d50865304af59325d025d59231dffe56bce6b6e76b67a8ce2ea0bc6195592d12f4176fe3316286f6", 0x88, 0xcf09}], 0x41, &(0x7f0000001580)={[{@huge_always}, {@huge_advise}, {@gid={'gid', 0x3d, 0xee00}}, {@nr_inodes={'nr_inodes', 0x3d, [0x7a, 0x70, 0x67]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x3b37aa3d29a484d5, 0x6b, 0x31, 0x74, 0x39, 0x70]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x37, 0x37, 0x25]}}, {@uid={'uid', 0x3d, 0xee01}}], [{@hash}]}) fcntl$notify(r2, 0x402, 0x2571fc6deb7a3498) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) [ 1121.209783] serio: Serial port ptm0 [ 1121.212525] FAULT_INJECTION: forcing a failure. [ 1121.212525] name failslab, interval 1, probability 0, space 0, times 0 [ 1121.213674] CPU: 0 UID: 0 PID: 9414 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1121.213691] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1121.213700] Call Trace: [ 1121.213705] [ 1121.213710] dump_stack_lvl+0xfa/0x120 [ 1121.213744] should_fail_ex+0x4d7/0x5e0 [ 1121.213760] should_failslab+0xc2/0x120 [ 1121.213774] __kmalloc_noprof+0xcd/0x680 [ 1121.213791] ? iter_file_splice_write+0x1cd/0x11f0 [ 1121.213814] iter_file_splice_write+0x1cd/0x11f0 [ 1121.213833] ? kfree+0x284/0x550 [ 1121.213846] ? read_iter_zero+0x120/0x310 [ 1121.213864] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1121.213882] ? __lock_acquire+0xc65/0x1b70 [ 1121.213913] ? lock_is_held_type+0x9e/0x120 [ 1121.213935] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1121.213954] direct_splice_actor+0x192/0x7b0 [ 1121.213977] splice_direct_to_actor+0x347/0x9d0 [ 1121.213994] ? __pfx_direct_splice_actor+0x10/0x10 [ 1121.214015] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1121.214033] ? lock_acquire+0x15e/0x2f0 [ 1121.214052] do_splice_direct+0x179/0x250 [ 1121.214069] ? __pfx_do_splice_direct+0x10/0x10 [ 1121.214085] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1121.214104] ? security_file_permission+0x22/0x90 [ 1121.214122] do_sendfile+0xa8e/0xdc0 [ 1121.214146] ? __pfx_do_sendfile+0x10/0x10 [ 1121.214164] ? __fget_files+0x20d/0x3b0 [ 1121.214188] __x64_sys_sendfile64+0x1d3/0x210 [ 1121.214203] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1121.214218] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1121.214239] do_syscall_64+0xbf/0x430 [ 1121.214253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.214267] RIP: 0033:0x7fb59c6b8b19 [ 1121.214276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1121.214288] RSP: 002b:00007fb599c2e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1121.214300] RAX: ffffffffffffffda RBX: 00007fb59c7cbf60 RCX: 00007fb59c6b8b19 [ 1121.214308] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1121.214315] RBP: 00007fb599c2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1121.214323] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 1121.214331] R13: 00007fff3932da4f R14: 00007fb599c2e300 R15: 0000000000022000 [ 1121.214348] [ 1121.262698] No source specified [ 1121.270550] No source specified [ 1121.291885] loop4: detected capacity change from 0 to 207 [ 1121.307610] tmpfs: Unsupported parameter 'huge' [ 1121.330498] loop4: detected capacity change from 0 to 207 23:10:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xf9fdffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:10:11 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) [ 1121.404880] No source specified 23:10:11 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1121.411048] No source specified 23:10:11 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r1, 0x402, 0x2571fc6deb7a34c0) getdents(r1, &(0x7f00000001c0)=""/4096, 0x1000) accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10) 23:10:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000040)) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) [ 1121.441936] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1121.450740] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1121.519862] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:10:22 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 23:10:22 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:10:22 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 9) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:10:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xffffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:10:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x21}}}}}, 0x20}}, 0xc1) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) r2 = openat2(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000011c0)={0x141603, 0x0, 0x19}, 0x18) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x3) 23:10:22 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:10:22 executing program 4: io_setup(0x9, &(0x7f0000000040)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x1080, r1, &(0x7f0000000080)="4e6c57c16d122ba9d401750b6e6d897c737bc1ae9dc5668d35ca9817aed71f5369", 0x21, 0xfffffffefffffffd, 0x0, 0x1}]) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r2, 0x402, 0x2571fc6deb7a34c0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000180)={0x3, &(0x7f00000000c0)=[{}, {}, {}]}) io_submit(r0, 0x0, &(0x7f0000001200)) r3 = getpgid(0xffffffffffffffff) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001400)}}, {{&(0x7f0000001440), 0x6e, &(0x7f0000001740)=[{&(0x7f00000014c0)=""/54, 0x36}, {&(0x7f0000001500)=""/25, 0x19}, {&(0x7f0000001540)=""/171, 0xab}, {&(0x7f0000001600)=""/243, 0xf3}, {&(0x7f0000001700)=""/5, 0x5}], 0x5, &(0x7f0000001d40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000200000000000000001000000010000001e4f206adf29c037084f8a01008d973b4df031ba4e485995bd10b5cab32082f75ec745fd89a032d58ba469d772f0dfa9dc1d2b0fe5cd765584f161a02a08ffd9b885de6e6a42f6c15fe48108ad45c3c58d76d2fcfaf4e5d5c0a8f697e8a5c3b1936dbf20d0050d3e76d739ed4bc3d58c0497e66cd897e7273b61ba38afd300"/161, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x60}}, {{&(0x7f0000001840), 0x6e, &(0x7f0000001a80)=[{&(0x7f00000018c0)=""/42, 0x2a}, {&(0x7f0000001900)=""/205, 0xcd}, {&(0x7f0000001a00)=""/115, 0x73}], 0x3, &(0x7f0000001ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}], 0x3, 0x104, &(0x7f0000001c00)={0x77359400}) fcntl$getownex(r2, 0x10, &(0x7f0000001c40)={0x0, 0x0}) r6 = getpgid(0xffffffffffffffff) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r7, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) clone3(&(0x7f0000001cc0)={0x80, &(0x7f0000001200), &(0x7f0000001240), &(0x7f0000001280), {0xa}, &(0x7f00000012c0)=""/103, 0x67, &(0x7f0000001340)=""/174, &(0x7f0000001c80)=[0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, r4, 0x0, r5, r6], 0xa, {r7}}, 0x58) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000011c0)={0x0, 0x1, 0x1, 0xfffffffffffff801}) getdents(r2, &(0x7f00000001c0)=""/4096, 0x1000) 23:10:22 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) io_setup(0x2, &(0x7f0000000000)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_submit(r3, 0x3, &(0x7f0000001400)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x4, r4, &(0x7f0000000080)="3e181d0d27d95bd9cee8045ecb90b391b4f535cba072501246392bf8b9ebd2e389c27b110425defc00efad4b3a667814555b447fc029fe84fcae64bfb264e93e844f0a3460243f64656cb7e29b758be672545d8f20c3fe5909828214233ded7113ab", 0x62, 0x6d9, 0x0, 0x0, r5}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x4, r6, &(0x7f00000001c0)="f9abbc0007033d252f512cd2a93e81f998041f6ea1b573499e63ac20d9d179c2df", 0x21, 0x8, 0x0, 0x2, r7}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x8, 0x2, r1, &(0x7f00000003c0)="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", 0x1000, 0x0, 0x0, 0x2}]) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) [ 1132.345169] serio: Serial port ptm0 [ 1132.391523] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1132.398928] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1132.420931] No source specified [ 1132.428316] No source specified [ 1132.429041] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1132.435667] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:10:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:10:22 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x4) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000040)=0x30, 0x2) 23:10:23 executing program 2: lseek(0xffffffffffffffff, 0x9, 0x4) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000011c0), 0x300, 0x0) write$evdev(r0, &(0x7f0000001200)=[{{0x0, 0x2710}, 0x2, 0x8, 0x7}, {{0x0, 0xea60}, 0x1f, 0x7ff, 0xede}, {{0x0, 0x2710}, 0x0, 0x4}, {{0x0, 0x2710}, 0x12, 0x1, 0x401}, {{0x77359400}, 0x5, 0x3f, 0x200}, {{0x0, 0xea60}, 0x3, 0x3, 0x10000}, {{}, 0x17}, {{0x77359400}, 0x1, 0xd, 0x7}], 0xc0) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000080)={0xff, 0x80000025d3}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000380)) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="2321202e2f664f6c6530b5dba8e837989d53f0bf4a4a202076657468315f746f5f623069646765002076657468314f746f5f6272696467"], 0x37) syncfs(r1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000590000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000051d000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00009bf000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000000c0)="8223accb2e7f70550c6372da4a088b7cd2edbfff4b67059266aac25c9cae96ec1c827d977fd79c7581d3f7e1c3a677354315433e932a2075aee1ba8c92c434411f2afefa1f24c857d25531851955d0c4200c516b3894d23bd25dec09474e4624f06adbf11d728e4fe50ffde3d6f5224f421d", 0x72}, 0x68) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'veth1_to_bridge\x00', 0x4}, 0x18) getdents(0xffffffffffffffff, &(0x7f00000001c0)=""/4096, 0x1000) 23:10:23 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:10:23 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 10) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:10:23 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xa0103) [ 1132.635507] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1132.641344] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1132.648265] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1132.652230] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1132.665448] FAULT_INJECTION: forcing a failure. [ 1132.665448] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.666650] CPU: 1 UID: 0 PID: 9491 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1132.666667] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1132.666675] Call Trace: [ 1132.666680] [ 1132.666685] dump_stack_lvl+0xfa/0x120 [ 1132.666712] should_fail_ex+0x4d7/0x5e0 [ 1132.666728] ? jbd2__journal_start+0x193/0x6b0 [ 1132.666749] should_failslab+0xc2/0x120 [ 1132.666764] kmem_cache_alloc_noprof+0x80/0x690 [ 1132.666787] ? jbd2__journal_start+0x193/0x6b0 [ 1132.666806] jbd2__journal_start+0x193/0x6b0 [ 1132.666828] __ext4_journal_start_sb+0x325/0x5d0 [ 1132.666844] ? ext4_dirty_inode+0xa5/0x130 [ 1132.666864] ext4_dirty_inode+0xa5/0x130 [ 1132.666881] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1132.666896] __mark_inode_dirty+0x1b7/0x1470 [ 1132.666915] generic_update_time+0xcb/0xf0 [ 1132.666921] No source specified [ 1132.666931] file_modified+0x1f0/0x230 [ 1132.666947] ext4_file_write_iter+0xca6/0x19f0 [ 1132.666974] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1132.666988] ? trace_kmalloc+0x1f/0xb0 [ 1132.666999] ? __kmalloc_noprof+0x274/0x680 [ 1132.667016] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1132.667039] iter_file_splice_write+0xa3a/0x11f0 [ 1132.667070] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1132.667118] ? lock_is_held_type+0x9e/0x120 [ 1132.667145] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1132.667172] direct_splice_actor+0x192/0x7b0 [ 1132.667200] splice_direct_to_actor+0x347/0x9d0 [ 1132.667226] ? __pfx_direct_splice_actor+0x10/0x10 [ 1132.667255] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1132.667282] ? lock_acquire+0x15e/0x2f0 [ 1132.667313] do_splice_direct+0x179/0x250 [ 1132.667338] ? __pfx_do_splice_direct+0x10/0x10 [ 1132.667363] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1132.667391] ? security_file_permission+0x22/0x90 [ 1132.667419] do_sendfile+0xa8e/0xdc0 [ 1132.667452] ? __pfx_do_sendfile+0x10/0x10 [ 1132.667478] ? __fget_files+0x20d/0x3b0 [ 1132.667514] __x64_sys_sendfile64+0x1d3/0x210 [ 1132.667535] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1132.667556] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1132.667588] do_syscall_64+0xbf/0x430 [ 1132.667607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.667625] RIP: 0033:0x7fb59c6b8b19 [ 1132.667638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1132.667655] RSP: 002b:00007fb599c2e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1132.667672] RAX: ffffffffffffffda RBX: 00007fb59c7cbf60 RCX: 00007fb59c6b8b19 [ 1132.667684] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1132.667694] RBP: 00007fb599c2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1132.667704] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1132.667714] R13: 00007fff3932da4f R14: 00007fb599c2e300 R15: 0000000000022000 [ 1132.667740] 23:10:23 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200, 0x60) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) [ 1132.758089] No source specified 23:10:23 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xa0103) 23:10:32 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 11) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:10:32 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:10:32 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000), 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={r6, 0x1, 0x6, @multicast}, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000001700)={r9, 0x1, 0x6, @multicast}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="78000000f9ea2f971cffb8cbc0a60264c38f176b80165558e775f2aacbfcb901000000cb846863513a4b9ec97c9b81d5651591b8aca8caa2e3e2b74f710b7dee71f69a3fe18d9e6a4132a6bc7524dd0ebd2a9c5e900b52bbbd9f52152d9b8eb003e3763a3adeb67eb1c12d2abe383d532b98e6d7d5b76d9ead3dae3550b975e5bdd8289dcfb2271de7356113fd24bc816365497850029378652e102922be79369a86fd33", @ANYRES16=0x0, @ANYBLOB="00042abd7000fbdbdf25030000003c00018008000100", @ANYRES32=0x0, @ANYBLOB="00dd0000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="080003000000000028000180080003000300000008000300030000001400020076657468315f746f5f62617461647600"], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x10) getsockopt$IP_SET_OP_GET_FNAME(r4, 0x1, 0x53, &(0x7f0000000040)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000080)=0x2c) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r3, 0x1, 0x6, @multicast}, 0x10) 23:10:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000001080)='net/arp\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='ip6_fti023\x00'], 0xb) getdents(r0, &(0x7f0000000040)=""/4111, 0xffffffffffffff9d) 23:10:32 executing program 4: r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000000)='fd\x00') fcntl$notify(r1, 0x402, 0x2571fc6deb7a34c0) getdents(r1, &(0x7f00000001c0)=""/4096, 0x1000) 23:10:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:10:32 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xa0103) 23:10:32 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1142.177830] No source specified 23:10:32 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000100), &(0x7f00000000c0)=0x4) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x4b4b, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) writev(r2, &(0x7f0000002300), 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) fcntl$notify(r3, 0x402, 0x3c) getdents(0xffffffffffffffff, &(0x7f00000001c0)=""/4096, 0xfffffffffffffcb0) [ 1142.211685] No source specified [ 1142.257163] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 23:10:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x4, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:10:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) renameat2(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x5) 23:10:32 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (fail_nth: 1) [ 1142.363635] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1142.387385] serio: Serial port ptm0 [ 1142.406199] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1142.420915] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1142.425579] No source specified [ 1142.429593] No source specified 23:10:32 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xa0103) [ 1142.462128] FAULT_INJECTION: forcing a failure. [ 1142.462128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1142.463965] CPU: 0 UID: 0 PID: 9543 Comm: syz-executor.7 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1142.463997] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1142.464011] Call Trace: [ 1142.464019] [ 1142.464028] dump_stack_lvl+0xfa/0x120 [ 1142.464074] should_fail_ex+0x4d7/0x5e0 [ 1142.464103] _copy_to_user+0x32/0xd0 [ 1142.464130] simple_read_from_buffer+0xe0/0x180 [ 1142.464173] proc_fail_nth_read+0x18a/0x240 [ 1142.464201] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1142.464229] ? security_file_permission+0x22/0x90 [ 1142.464260] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1142.464300] vfs_read+0x1eb/0xc70 [ 1142.464329] ? __pfx_vfs_read+0x10/0x10 [ 1142.464352] ? lock_release+0xc8/0x290 [ 1142.464392] ? __fget_files+0x20d/0x3b0 [ 1142.464440] ksys_read+0x121/0x240 [ 1142.464461] ? __pfx_ksys_read+0x10/0x10 [ 1142.464495] do_syscall_64+0xbf/0x430 [ 1142.464522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.464546] RIP: 0033:0x7f82205c469c [ 1142.464564] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1142.464587] RSP: 002b:00007f821db66170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1142.464611] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f82205c469c [ 1142.464627] RDX: 000000000000000f RSI: 00007f821db661e0 RDI: 0000000000000004 [ 1142.464641] RBP: 00007f821db661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1142.464655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1142.464669] R13: 00007ffe8e93148f R14: 00007f821db66300 R15: 0000000000022000 [ 1142.464704] 23:10:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x5, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:10:32 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1142.529842] No source specified [ 1142.532224] No source specified 23:10:33 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1142.633449] serio: Serial port ptm0 23:10:42 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 12) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:10:42 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:10:42 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xa0103) 23:10:42 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001700)={r3, 0x1, 0x6, @multicast}, 0x10) bind$packet(r0, &(0x7f0000000080)={0x11, 0x18, r3, 0x1, 0x1f, 0x6, @broadcast}, 0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r5, 0x1, 0x6, @multicast}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 23:10:42 executing program 4: r0 = getpid() pidfd_open(r0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='fd\x00') fcntl$notify(r1, 0x402, 0x2571fc6deb7a34c0) getdents(r1, &(0x7f00000001c0)=""/4096, 0x1000) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) unlinkat(r2, &(0x7f0000000040)='./file0\x00', 0x200) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000080)={@remote}, 0x14) 23:10:42 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) r1 = openat(0xffffffffffffffff, 0x0, 0x48000, 0x0) ioctl$CDROM_NEXT_WRITABLE(r1, 0x5394, &(0x7f0000000040)) ioctl$CDROMREADRAW(r1, 0x5314, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000b00)={{0x1, 0x1, 0x18}, './file0\x00'}) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000001600)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000003900), r1) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000003a00)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000039c0)={&(0x7f0000003980)={0x34, r3, 0x2, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x400a0}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd4a1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x14) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r4, 0x402, 0x2571fc6deb7a34c0) getdents(r4, &(0x7f00000001c0)=""/4096, 0x1000) 23:10:42 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x2, 0x0) 23:10:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x6, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1152.399124] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1152.406122] No source specified [ 1152.409205] serio: Serial port ptm0 [ 1152.414843] No source specified [ 1152.425849] FAULT_INJECTION: forcing a failure. [ 1152.425849] name failslab, interval 1, probability 0, space 0, times 0 [ 1152.428178] CPU: 0 UID: 0 PID: 9575 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1152.428214] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1152.428229] Call Trace: [ 1152.428238] [ 1152.428247] dump_stack_lvl+0xfa/0x120 [ 1152.428295] should_fail_ex+0x4d7/0x5e0 [ 1152.428324] ? jbd2__journal_start+0x193/0x6b0 [ 1152.428364] should_failslab+0xc2/0x120 [ 1152.428407] kmem_cache_alloc_noprof+0x80/0x690 [ 1152.428439] ? __mark_inode_dirty+0x72d/0x1470 [ 1152.428470] ? lock_is_held_type+0x9e/0x120 [ 1152.428517] ? jbd2__journal_start+0x193/0x6b0 [ 1152.428555] ? __mark_inode_dirty+0x786/0x1470 [ 1152.428581] jbd2__journal_start+0x193/0x6b0 [ 1152.428626] __ext4_journal_start_sb+0x325/0x5d0 [ 1152.428657] ? ext4_file_write_iter+0xd77/0x19f0 [ 1152.428688] ext4_file_write_iter+0xd77/0x19f0 [ 1152.428731] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1152.428758] ? trace_kmalloc+0x1f/0xb0 [ 1152.428779] ? __kmalloc_noprof+0x274/0x680 [ 1152.428811] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1152.428856] iter_file_splice_write+0xa3a/0x11f0 [ 1152.428911] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1152.428985] ? lock_is_held_type+0x9e/0x120 [ 1152.429023] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1152.429062] direct_splice_actor+0x192/0x7b0 [ 1152.429102] splice_direct_to_actor+0x347/0x9d0 [ 1152.429140] ? __pfx_direct_splice_actor+0x10/0x10 [ 1152.429183] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1152.429222] ? lock_acquire+0x15e/0x2f0 [ 1152.429265] do_splice_direct+0x179/0x250 [ 1152.429299] ? __pfx_do_splice_direct+0x10/0x10 [ 1152.429335] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1152.429375] ? security_file_permission+0x22/0x90 [ 1152.429412] do_sendfile+0xa8e/0xdc0 [ 1152.429460] ? __pfx_do_sendfile+0x10/0x10 [ 1152.429499] ? __fget_files+0x20d/0x3b0 [ 1152.429550] __x64_sys_sendfile64+0x1d3/0x210 [ 1152.429580] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1152.429611] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1152.429658] do_syscall_64+0xbf/0x430 [ 1152.429685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.429711] RIP: 0033:0x7fb59c6b8b19 [ 1152.429730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1152.429756] RSP: 002b:00007fb599c2e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1152.429780] RAX: ffffffffffffffda RBX: 00007fb59c7cbf60 RCX: 00007fb59c6b8b19 [ 1152.429798] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1152.429813] RBP: 00007fb599c2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1152.429828] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1152.429844] R13: 00007fff3932da4f R14: 00007fb599c2e300 R15: 0000000000022000 [ 1152.429880] [ 1152.490260] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:10:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x7, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1152.515233] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1152.558363] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:10:43 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xa0103) [ 1152.703009] No source specified 23:10:43 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6gre0\x00', r2, 0x0, 0x8, 0x7, 0x864, 0x38, @mcast2, @dev={0xfe, 0x80, '\x00', 0x14}, 0x10, 0x8, 0x9, 0x20}}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) fcntl$setstatus(r1, 0x4, 0x2000) [ 1152.730264] No source specified 23:10:43 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:10:43 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x54040, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r2, 0x4b4b, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000001240)) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/165}) r3 = syz_open_dev$sg(&(0x7f0000000140), 0xe6a, 0x40400) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r3, 0xffffffff, 0x7fff, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') fcntl$notify(r4, 0x402, 0x2571fc6deb7a34c0) getdents(r4, &(0x7f00000001c0)=""/4096, 0x1000) 23:10:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x8, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:10:43 executing program 2: unlink(&(0x7f0000000040)='./file0\x00') r0 = getpid() pidfd_open(r0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/ip_vs_stats_percpu\x00') fcntl$notify(r1, 0x402, 0x2571fc6deb7a34c0) getdents(r1, &(0x7f00000001c0)=""/4096, 0x1000) [ 1153.034915] No source specified [ 1153.046062] No source specified [ 1153.230706] serio: Serial port ptm1 23:10:54 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x4b47, 0x0) 23:10:54 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$DVD_READ_STRUCT(r1, 0x2284, &(0x7f0000000cc0)=@manufact={0x4, 0x0, 0x800, "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"}) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) lseek(r0, 0x100000000, 0x3) getdents(r0, &(0x7f0000000040)=""/4094, 0xffe) getdents64(r0, &(0x7f0000001040)=""/19, 0x13) 23:10:54 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:10:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$notify(r1, 0x402, 0x2571fc6deb7a34f4) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:10:54 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) 23:10:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x9, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:10:54 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 13) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:10:54 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) syz_mount_image$msdos(0x0, &(0x7f0000002340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f0000002500)='./file0\x00', 0xffffffffffffffff, 0xee01) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) [ 1163.733756] No source specified [ 1163.734706] serio: Serial port ptm0 [ 1163.737274] No source specified 23:10:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xa, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1163.778118] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1163.790577] No source specified [ 1163.793084] No source specified [ 1163.795408] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1163.823440] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1163.828943] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:10:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xb, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1163.878432] No source specified [ 1163.883286] No source specified 23:10:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)={0x3c, 0x4, 0x2, 0x0, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @local]}, 0x28) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:10:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x10, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1163.983090] No source specified [ 1163.991306] No source specified 23:10:54 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) 23:10:54 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:10:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x300, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1164.060216] No source specified [ 1164.062436] No source specified 23:10:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x500, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1164.177149] No source specified [ 1164.178284] No source specified 23:11:03 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x4b49, 0x0) 23:11:03 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:11:03 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) getdents(r1, &(0x7f0000000040)=""/119, 0x77) 23:11:03 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) 23:11:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x600, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:11:03 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 14) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:11:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000100)=0x4) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2400, 0x0) r3 = open_tree(r2, &(0x7f0000003600)='./file0\x00', 0x800) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000003740)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003700)={&(0x7f0000003680)={0x48, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x48}}, 0x4000080) 23:11:03 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000240)={0x0, 0x9, 0x0, [0x80000000, 0x1, 0x7f, 0x3, 0x8], [0xfffffffffffffff9, 0x9, 0x0, 0x3f, 0xae3, 0x9, 0x7, 0xecb7, 0x8000, 0x2c, 0xfff, 0xb4, 0x2, 0x5, 0x10000, 0xff, 0x1f, 0x5, 0x9eb, 0x20, 0x7, 0x5, 0x1ff, 0x2, 0x4, 0x9, 0x4, 0x1, 0x5, 0x9799, 0x8, 0x299, 0x4e, 0x3, 0x1, 0x800, 0x1, 0x80, 0x5, 0x3, 0x37c86f2b, 0x0, 0x6, 0xffffffffffffff01, 0x5, 0x0, 0x7, 0x100000000, 0x78, 0x5, 0x1f, 0x5, 0x80000001, 0x800000000000000, 0x5, 0x1, 0x1, 0x60000, 0x2, 0x8001, 0x5, 0x3, 0x2, 0x0, 0x0, 0x100, 0x9, 0x1, 0x80000000, 0x9, 0x9df, 0x5de, 0x1, 0x48, 0x8001, 0xfffffffffffffffd, 0x0, 0x7, 0x9, 0x81, 0x1000, 0x3, 0x3f73, 0x7f, 0x4, 0x5, 0x8, 0x7, 0x7ff, 0x5, 0x94f0, 0x9, 0x10001, 0x2, 0x4, 0x17, 0x7, 0x0, 0x3, 0x100, 0x400, 0x8000, 0x4, 0x2, 0x4, 0xa1e0000000000000, 0x7, 0x0, 0x2, 0x8, 0x400, 0x2, 0x63c, 0x31c91554, 0x401, 0x1ff, 0x11c, 0x6, 0x5, 0x2, 0x2]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000680)={r6, 0xff, 0xff}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000001700)={r5, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r5, 0x1, 0xfffffffffffffe59, @remote}, 0x10) [ 1173.193793] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1173.198552] FAULT_INJECTION: forcing a failure. [ 1173.198552] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.199474] CPU: 0 UID: 0 PID: 9667 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1173.199492] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1173.199501] Call Trace: [ 1173.199506] [ 1173.199511] dump_stack_lvl+0xfa/0x120 [ 1173.199542] should_fail_ex+0x4d7/0x5e0 [ 1173.199559] should_failslab+0xc2/0x120 [ 1173.199574] __kmalloc_cache_noprof+0x81/0x6b0 [ 1173.199591] ? do_splice_direct+0x179/0x250 [ 1173.199609] ? do_sendfile+0xa8e/0xdc0 [ 1173.199628] ? __x64_sys_sendfile64+0x1d3/0x210 [ 1173.199643] ? do_syscall_64+0xbf/0x430 [ 1173.199655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.199670] ? __iomap_dio_rw+0x271/0x1c90 [ 1173.199682] ? perf_trace_lock+0xb5/0x5d0 [ 1173.199705] ? __iomap_dio_rw+0x271/0x1c90 [ 1173.199716] __iomap_dio_rw+0x271/0x1c90 [ 1173.199731] ? __virt_addr_valid+0x1c6/0x5d0 [ 1173.199747] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1173.199769] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1173.199790] ? lock_release+0xc8/0x290 [ 1173.199810] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1173.199824] ? mark_held_locks+0x49/0x80 [ 1173.199844] ? kasan_quarantine_put+0x84/0x1e0 [ 1173.199869] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1173.199891] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1173.199903] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1173.199925] iomap_dio_rw+0x40/0xa0 [ 1173.199939] ext4_file_write_iter+0xe0e/0x19f0 [ 1173.199966] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1173.199980] ? trace_kmalloc+0x1f/0xb0 [ 1173.199990] ? __kmalloc_noprof+0x274/0x680 [ 1173.200006] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1173.200029] iter_file_splice_write+0xa3a/0x11f0 [ 1173.200057] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1173.200090] ? lock_is_held_type+0x9e/0x120 [ 1173.200111] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1173.200130] direct_splice_actor+0x192/0x7b0 [ 1173.200150] splice_direct_to_actor+0x347/0x9d0 [ 1173.200170] ? __pfx_direct_splice_actor+0x10/0x10 [ 1173.200191] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1173.200210] ? lock_acquire+0x15e/0x2f0 [ 1173.200231] do_splice_direct+0x179/0x250 [ 1173.200249] ? __pfx_do_splice_direct+0x10/0x10 [ 1173.200267] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1173.200287] ? security_file_permission+0x22/0x90 [ 1173.200306] do_sendfile+0xa8e/0xdc0 [ 1173.200330] ? __pfx_do_sendfile+0x10/0x10 [ 1173.200349] ? __fget_files+0x20d/0x3b0 [ 1173.200376] __x64_sys_sendfile64+0x1d3/0x210 [ 1173.200391] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1173.200407] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1173.200430] do_syscall_64+0xbf/0x430 [ 1173.200444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.200456] RIP: 0033:0x7fb59c6b8b19 [ 1173.200466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1173.200479] RSP: 002b:00007fb599c2e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1173.200492] RAX: ffffffffffffffda RBX: 00007fb59c7cbf60 RCX: 00007fb59c6b8b19 [ 1173.200501] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1173.200508] RBP: 00007fb599c2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1173.200516] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1173.200523] R13: 00007fff3932da4f R14: 00007fb599c2e300 R15: 0000000000022000 [ 1173.200542] [ 1173.235846] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1173.246824] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1173.256699] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1173.287727] serio: Serial port ptm0 [ 1173.296225] No source specified [ 1173.305439] No source specified 23:11:03 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) [ 1173.375829] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1173.397427] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1173.405827] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 23:11:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x700, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1173.438199] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1173.482816] No source specified [ 1173.485294] No source specified 23:11:03 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000240)=ANY=[@ANYBLOB="09032dee505ca909e39dfe880000000000000000000000230001c2040000fbff7d65234b74b0f2854c0f0000000000008f180d8daac2899cf2fc0c9de83c87f4195c8001d8fd811f5e7ea4f83906bc8d67ffadb0a14925554625c714f81fad63a2513174"], 0x20) getsockopt$packet_buf(r0, 0x107, 0x1d, &(0x7f0000000000)=""/213, &(0x7f0000000140)=0xd5) r3 = memfd_secret(0x80000) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0xffffffffffffffbf, @multicast}, 0x35) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r3) [ 1173.540950] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1173.543052] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:11:04 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) [ 1173.549909] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1173.564494] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:11:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x900, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:11:04 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 15) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1173.610374] No source specified [ 1173.614808] No source specified 23:11:04 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={r1, 0x1, 0x6, @remote}, 0x10) 23:11:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xa00, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1173.747750] No source specified [ 1173.750567] No source specified [ 1174.104235] serio: Serial port ptm1 23:11:14 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5409, 0x0) 23:11:14 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 16) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:11:14 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) preadv(r0, &(0x7f0000000080)=[{}, {&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000000240)=""/225, 0xe1}], 0x3, 0x101, 0xfffffff8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) 23:11:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xb00, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:11:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$DVD_READ_STRUCT(r1, 0x2284, &(0x7f0000000cc0)=@manufact={0x4, 0x0, 0x800, "d7ab8c6512ee7d174d8857f52cdb15e3ae656a72eac1fdcf236bf3b8d1b0c3e4a822c914430eedbbdf0b8ad91b842063a7d0950c1a32fcdf298402da51b1bb9e02ebb31fc252ea23c54fc0fded6ea020e8b6eb83f52b3cf1a9b272bf98f23b79aa64358418f7505cd998b66b3824ec444b6054df281180694891ca2e6fee8bf74d6dda6146423596d50ee32b29f2e5d16ad2962cb29c23bcb03903f4c62ff70198e3cc3a993f95cf93eecd74e690f1e71255c383b61d1d0edc6dca564fb6bcdefe7cdb13636d3c6b61ca4b0d4c822faa99f1fa31284148c64aaf644288deda634192cce914d4ed2e5f4f1cef824773308bd533d10cf4284422350dfb3d7c9f3ef85413112979b5dc9298c0ef0d9e06077030fdb64992375499bc12e085b971f5b35547ec831d31f7375c05bf8bc5f3966db29724bf1a1cd2e67f029fd7ba07912950540c3de4a54b489d631e13892a8abc97f1e6116cffa602e9b9551f7fceb16a00129556affd3f4479290679c6a6e06a9a942eb4362ff24374d2246f6b60e3c06d0bbcdf65cece53a4ae0ea3ce18f2b6d53ce3ee393a933a2cd29ef6983089e0a6ad3c1d6dfe4901c4b72737c1f923188ff1f098b5ef1c79180eae693bfce4d441e2d106892c09a26030e10e15ec498a298ec67ab3457b2210d1dffb99051dd1f8240741a851359a598454aa4bb41db61c89557238098b314fd6f42a29c55c1c63cca6f335f164c52fd53177de0e7bf175e6a5b81714b7ddf873007c20170cb8a2b979423a7f2ab08f96ada94d8b661364fd1fd3e9c694569fa55062fd82e06358479ec0c6b84a2c2c8affdc69ec22e7e0f17203929143679855b1ad07d7013548fc04d58f844c2f5adee53035627c17d473fd57547f21aa3832fbb73daa4f0334aed73da1f20ffdcd4deea98fcf07b4567926efdb45f752557e00c05e6d1bdd69f4ff35d95cffe2fb2abf0d97b91940cb29a268595fa8fb7484501a723aa3884e140ae8e812c8b42f8447d2557f484529210ae386f2749a6c8f9fcf990c3ab7648ad509af4a1b89063bfbd1e06a6ff06825d7a36565026f9d4e4b83a24d4c008256229407079c79ffc4bc841c11d8b2dfe783c31143ced1908525e834bd0df7cd894913f48275812805c082abcab0fdb2d4e2ba8b01c9da14d11e8c84b1ccf9df4e11f4c01725e4728f2798d62d0db6962a5493e90adb7f3927c87c7ba7e476faf21aecb86e23dc28886350b40e473233ff46960de31d09413a639fa22a15d15ec1f61a894cb67db0f7bdc0aad318019b596df25a74d88e006d25a8b021f9580862b70a94278d95b6749289eae92ab2cf50066b34805fe89b504a3edb492319526180526698a422257afe16c053a53e1c7cc84118db553d8753f3b2333940b551e50070b1554519497b326ee88bc30ff347790e434384485ba4329402694a159da44245a2ae67c626c5850c7dc566dcf273efd8842480b588ad2df88100e61994b1ed0cf01ae62e0172943ad57d4736869404fc5970a5865207005988c89ca822ba158b0bc09b235e687c6a40a167e98235c149fd4c4975ba67b9515d324a71823d1d89854dd00a556b9fa68bf6995a5da0aa31006f4b1c5029048367c0c7eaebad4181153894ac9fefe3b12b093d7ace7e95dfe01da255220159ba438a377048391933aba4a1041900498e94d208d9497b65499cd78f26eb67219960eb1e73afd32595ef81afb9c681807fa05860f88c4fb8d4d18743dc5421313bc11057daecf4ba6a3427d9238a75fd83823bed962f77d4dcb5a9a79b98493b90db03692d04f27c536b432580731bb2ca4e1ba9163f400d9ba54aaadb4b76dff847204db4f0fd5bd8ea4cd9b03acf808378c9450f3b9f9473ff65b553bda1412e470f35abc15b9eb34675f9abc24dd9e0c4f8b804cef95d7af00d2f3971aaec1eb88da2e940a5cac9519ac6493977ecd56236e52a5805002ecd531e608f7a54d36398ee66e3a6b49fb476f1732110acaf4e17be7abece67cc82df12a87ebe7b6762f7021dc8e07255f7060115e44a9930e85140ce9a9ccc033d8624db2ce17dc436794903cb64671eb7c0b4b7ae4eb8d6a8a71d5272f56a32790d8af1f42a2023aab62abfba826942208804f4d412e2db0fd911f23359e715df0cb5da90af1eada47b93f6f9e7826903433f5d0f2ad2257906b6397d0a5eb1d3cb2bc1d0be598e137135fc77bf927334496cd055498da04bed5e6a30b93e73b3408a60042d82b3bdb87f96f43b1046c8457efecef00f2aba0b1f28f33a6ae2f7cbbd5550f4e2db4a0f0d56a9113e002858d456fef7b769e41e69955d2f7e4eedd24f4ef667706dd6484f7adc4512f149b38120d324b42951abce75fbe7a30d0f59fd437a21693478ebc0e034d359738d1e037011fa29bc09cae185528a2970a2407bbc7c9e9bf76332c3c30bb82651500e917947cc8808bbcfd4a6a47696688e03dc04e0b3d21f966f9209ffb376806b0dba2ae0d8dc4b2ce830f93d4f624a5fc3dd27f52ecd2566464a5a2c4d8d93ba8011cfdad93eb280ad54dd715f301e41926a2ac531c432119879650ca3a04d338285f242513efae6746ac14b309364fa7826c1f187854eb0a2c74b5feb23729b8c6315d501b104eeaa4faf0ec917c5ef70e017470a80eb2d2338231b708dd5251c4b317002bf30f7f4254d96b6ace34ad33320cddeeffe8a31d25a92b808689bc682891d77ebe8371c578b1a71b91256fe063fc21552fc3986578fd0999bea820905bf9154022e2c30ef8fda924e4a81bd57751bfe18e14aacb4212a1c537a0a6889b5336974fd2d485d1cc90ce7f4a46f6f21f39ba0eca0a936b74d58154adf7f7605008c62203655e950d76780f9607db638e85b403f432e06"}) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) lseek(r0, 0x100000000, 0x3) getdents(r0, &(0x7f0000000040)=""/4094, 0xffe) getdents64(r0, &(0x7f0000001040)=""/19, 0x13) 23:11:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') ioctl$TIOCSBRK(r0, 0x5427) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xc801, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) recvmmsg$unix(r1, &(0x7f0000001b80)=[{{&(0x7f00000012c0)=@abs, 0x6e, &(0x7f0000001380)=[{&(0x7f0000001340)=""/9, 0x9}], 0x1, &(0x7f0000002480)=ANY=[@ANYBLOB="1c0000ecffffff020100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000f6e26e9ea9203d8f9b75a710ebf3d4f00b6cb430689838d75237d23096af5d5bfc10d7453239aa8abbd57dd9aa5dd691945c15128f89e7ea6451ee418533bb7e09f352481ddaca085e32a878dfeed43068462f77d9299c99b53a5684400b6b37e4b29acfb07c0e09a28db7dec92b293b2bb974895d6753764a7aa0e9e71e9b0c81ae45ad4d78564cc0e98e1bf2613ed1b57ce04780f9a799"], 0x120}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001500)=""/237, 0xed}], 0x1, &(0x7f0000001640)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}}, {{&(0x7f0000001680), 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001700)=""/129, 0x81}, {&(0x7f00000017c0)=""/214, 0xd6}, {&(0x7f00000018c0)=""/75, 0x4b}, {&(0x7f0000001940)=""/46, 0x2e}, {&(0x7f0000001980)=""/184, 0xb8}, {&(0x7f0000001a40)=""/90, 0x5a}, {&(0x7f0000001ac0)=""/37, 0x25}], 0x7}}], 0x3, 0x10003, &(0x7f0000001c40)) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/4, 0x4}, {&(0x7f0000000080)=""/154, 0x9a}, {&(0x7f0000000140)=""/47, 0x2f}, {&(0x7f0000001c80)=""/230, 0xe6}], 0x4, 0x42, 0x7ff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000021c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r7, @ANYBLOB="10000000400000002000000000000004e0b69ee0448c917f16b475b37840979fae5a4cf5f5e955beb07638b460fa3abf1488b28d97b466bba7633c45c3490cece02eebe31077f94d59e7a07b46ffada353b91dbc15dfe14db5ebf6e955fac9c7530f0a1373293f020cede9f717b45d1eb82e29982b8b6d7364493bd0304d5b6de1acf4d28aabfed57ced125a98661488493bc185ba331142cd210ff32c02fe0b0c4c55"], 0x2c, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f000000e480)={{0x1, 0x1, 0x18, r0, {0x0, r4}}, './file0\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f000000fc80)={0x0}, &(0x7f000000fcc0)=0xc) r10 = accept$inet6(r1, &(0x7f000000fd00)={0xa, 0x0, 0x0, @loopback}, &(0x7f000000fd40)=0x1c) r11 = fcntl$dupfd(r0, 0x0, r1) clock_gettime(0x0, &(0x7f000000ff40)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f000000ff00)=[{{&(0x7f000000fd80), 0x6e, &(0x7f000000fe00), 0x0, &(0x7f000000fe40)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}], 0x1, 0x0, &(0x7f000000ff80)={r12, r13+60000000}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000010440)=[{{&(0x7f00000011c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001240)=[{&(0x7f00000013c0)="276d83d606f4d855d8024b29c967658c52cba9dc53aa0019e54da8aa1d3d83de57cf8950bc23aa54adf8519ff3c03a8a05455575b0e0533aa48dc49f538cbf8c4bcdc6b86d37f28db73a6080232f29232f32f78612e03b5e6e05aad0a2aedcad43d0f87b11d1c0a86a017daa625f9afbedfce8815edb7eb74ce35f239b36600e6933f6b78bffd88cadc903e6c7c8df3fb090f44d479b7c79a9300bdf020513e014a0aa3aa8a6f28ebe09bb19a24ed96415591f5b87b0100b8d", 0xb9}], 0x1, 0x0, 0x0, 0x4040815}}, {{&(0x7f0000001480)=@abs={0x7fe403de97810874, 0x0, 0x4e24}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000001f40)="987ff2c6aa31caafb81563750d98d302aef705b60754763f4169288b63b7cacea6bac71e1e94ea102da4e7bf7d711aa36c14c3816a2add6c1fa5a4b9d0ea9422b838893a4f8f5608b7abf0dd4a215552ce0c29855a942ba798eb3a8bb107cb2f7767f4c1fa1fc493c19dfa18d59f11c61c602a76715569f9212e23b171e70e3cd36a778c6500bd5366f53902fd212c43c6bc2f165a0dfcd3c47ab38da9417c5303e6ae4851d91f23dce705750e832dacbd9dadf1b0f4fb0f793418a084688e1833243fd9ad6345c242c7dc", 0xcb}, {&(0x7f0000002040)="da35706dbf50fb5d83124cbcf7a1aea146202ec7993e0df4e969934b5c35133c6b091f789c67ad18c2297e445a6c2aa6856eecdb3671afa1fb9d0803bfae4798d74d326893dc5341307dd9158a7732e7c1f0218c8e87540c8d49f10e8df7bc1ede6bd36d425e055921d27a4b594360fe66c1a9", 0x73}, {&(0x7f00000020c0)="6af6fba2ed2642f539f448b8af52dc38874597aa467af3b137aff60eae01e15ddbcd9ef1c786344e9051b5f087713fcce3c87b60e2363386d2fd0c959c225403cb4a58b523ea95893ec4b3b819261477a54b4e65fd8432bce055f1b69482e0da6b08054d72b83aee17ae86d2c8b4c60283f567e3c33073c5025a51f4652ad4a07e682f5b909c6441c4b49a869f45057a371c68ef92e475b8ab5944d2b0823f80f8655e01bcae1b919d9b9e2ea28da317f559d7498d2e81bd447d7061c0ab7775f45ae1c510460d3aacda367abb3477b3ea59d2067d0b09d28e5c398288db0f856b114bec967b6364db4741e04ca93c9e92e2c19da332c5ff", 0xf8}], 0x3, &(0x7f0000003b40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x58}}, {{&(0x7f0000003bc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000004140)=[{&(0x7f0000003c40)="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", 0xfb}, {&(0x7f0000003d40)="4f01196eb6b499b329e105eab258a39d24bb9bc7afbb973ee1c21049b9e1f8517c7ed1cefc8e9b9ecd8496844938ba16f431ec26bbd9c53947fe7047357dabc50ed7fb358aeefb95b3f1ce6d1154f660a27e0eb4f0760f0eeb87f12dc582e3a93b20600eb5652e6005cd59b7421b14214add8061966c339984a3ebb35b35630383dbf282b96782ff10185e73ecc9d5d1bcb38099a7a094e0de7df0b2c7a558ef8e6d7ccf151b75df8ba031ccbb93f565acef97408b44726ed14c9429f055202721a2f6c0da78b7db540a212ed3482fe4dfb96d89790e47e45394b147d65e71fa9b808f9321234268fe635a33fde648cad36abfb9cf5e3df6", 0xf8}, {&(0x7f0000003e40)="b81d2ebe2b949bf5392af8b1704d91921a7174bc018f4d71db", 0x19}, {&(0x7f0000003e80)="3c0db89878c2c9626bd46f1a5997c66bfb2ff5c72117cfe0dc5f8b1309dfbdbbd79b2b95d11d4dc89241ca2a54801c46a1d8e126472d01c779daea5631561de0f810aa65dd2509fb7f5bad8d6713a72682b32b7f7363ded43c167f29f4ed76fb89a8ec280050d86dbf4a29076233f85145d5f4ec201a1af63564622e913c896e4224aa3a2dadd65a833a1aeedba7ee25e41936fc73c831f405a64045a9c5938377db80078cd61c41f9dbc4b1abaf28498131892e028037d1ffe51b7a5edc3e5984eb584ebe77e3347d9f3d4c8ffe2d0c15c1030f3ef03a11367bba22ae756e6c10bf575c56f7673c1aa8f60890b896031e519b12", 0xf4}, {&(0x7f0000003f80)="b3c02d0454d16483eb299e162b0ed6707b55b16dd413e058603279718415e65f574535ff93ee31e4cfcd433be1c505bcd7b863c11af4c7c2fbc7b8b1d0310146a35a184876184cb7d0766dde0fbd179afa167af4590ce6efd009da15941736c8a6203bf7743d22aae60845c37538555c2f51bae74e25838815c80e3f7071390aef61f1374fc23bf8319944453b229ec5df050c", 0x93}, {&(0x7f0000004040)="80381e2233f3184b82a437fc0248cede51b6fc106b0b64c2f5abdb2f26074ffa0ff3f38945343849a7ea3e8cd65b264818e3c2ce251c3d8937e43a55dad79e34c55f3d699c4acc3b874cb5f13020d6f32f930eeb92b2b6d6e34929a0a3f78a38c9eb4ef8b0f02318eaeccce8093f3694d52b04d56be5c5035b2ebbd56223c42e491c5e4034c044fe5705545a0f1ff74e22283cb4c62bb85a745859f3c5c592b512734ccd309d6fdeac4d86aa22227aea5205b90de7d269ed", 0xb8}, {&(0x7f0000004100)}], 0x7, &(0x7f000000c680)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, r1, r0, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x34, 0x1, 0x1, [r1, r1, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158, 0x1}}, {{&(0x7f000000c800)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f000000ce00)=[{&(0x7f000000c880)="3f6b8b988a26d9806cf7ba3acc230613045a52ebe686afa51fa83e2a56167809942ddf11c83b801b4003c4452c9e99959b638c80dc574cf68079bebb8e3bfce4e5519d857dd15f7960c14df51c09b6958fcdd543cecc817007a5eb0be927fd79ee8b1fbb06643ea1824f46d252cb0f2fa7452fb7ac61b2ba977f723f57fa06703878c686015d74f6acebeffba0c961f17b2a3dfddf7617d743852937ef5798fc0edf5d4aef0ecbed6f6c5059e413691aa35d06db6fca83875e271c8252e726b6fe77be19c23b1b1799b657f6044f784c55c6d832b9bdcaeb27bda337a4f9355615816e", 0xe3}, {&(0x7f000000c980)="bddb0f25a2b0a80acf9b5ded4b247d2cb08b06df61b9e5e814eb9808e0f64240e09bf90aa16f026284c06b02563faf38da0b2e9a67cf5bdc29194c5f3977ec32120fd813b64ceb28eb51501c42057ea9d1af45bbc18349c2fb38074facffc7887ac7423a0b", 0x65}, {&(0x7f000000ca00)="978e28ccb17fedc7e8ee540d4c3d9c7237047d4e1cd79084095771793277b602fb938dab5447ed62dab1b6394c3670765918da4bb4b733bf6ca230bf9ace58e954270417e7efc1370cbe6d65eaee92c8d68543c498fd77f162a08cc10b9478958bdde0f934d9823b3bfcf100153467372f775d5f6947828204a45b0f84d4edf37ef414d6faffb8efd2dbf90d59bbd9df2c94a4254ddd4e171f085fd44e2edcff7b18028bcd8c7284b9eb004ae2646df24ffa12411e7df8021ef50617a79dc7373a72648b74c08d", 0xc7}, {&(0x7f000000cb00)="7bb933aaa0cf8a1cc5821449ab8c2e63e690c0a4e6e6254fbc1e39d38cdb8baa311288950ad045df2e3d628c0e084d47a9fdc3f83f02a05dbd509c4b7313579fb0af755b183fabd7f9b3643ca6c64854e50f481861a2863b5fcf39035d402a2800afa4898d2f0c8fc06dbd1c836d7d1a", 0x70}, {&(0x7f000000cb80)="78d4090cf47c66cc900e7fb6ec1cee7a290955cd3979a19d64c021b06d7fba5b06f8485d6653190866caf9616a4677ccf5bc760e7a69ffb43a3dc0dcbe4c38d367007767d6bd8c1716a8353c9c24ce4edccef463b76dda5dfb5c2de57ec7e808f9843ad0a7bfe2232d5466ef638e880c3d8575fc89f75fd6bc9b3d71295750", 0x7f}, {&(0x7f000000cc00)="d70cf358191c8e487b8a7c1d2299f985edee38ea23a437fba8ea3126d2af37f9191ce0e29db4cd06757855208ac8649d1b3d3ad02b6a9b3949b69ad0d4c330a0da6ba3cc7a62e0b9bf9453260bb6a9e054ed39669d47df8c54ae50aa521e78bd9c0017d950f3137481d177ee4ddfa4f48abcd29b994626", 0x77}, {&(0x7f000000cc80)="023cb6fc90b179805dac03723cc6551dc3d575fdc83ad0411344296593188947f827271d37f1a1e3f6062b218a2ca810057accf8f7792f4cdab46ff098ebd350d3e379ef83f8b70a9c26be47a29c17", 0x4f}, {&(0x7f000000cd00)="986e43de598f412271444bd515d86c5bbf9da6c6231b67cf55ca1e3369ec53e4b1d69ac25ac0136c57e09a1eb6077b249a1d85d31153dc832b3858f8d73a632a6c850bfea74f6953c2619f104d1fe68ca1f786ec03e2030ee4225d26ce84e33e808e891625aec0062f7b03e5267ed72a6eb8a56419333fc59eb7dd1ff334b7e5b2393123f0d47ee4ebf85ae2d7b49a6acea87ee01ac752c4da5dd4b223c42a09ddfcbf4748b8c699ed999f9fa3e4b807aff2c58a1ad978f0d56cd301c01b8115c54c0660f758af9b0f8f8144139cc6c0996e3dcbdb2efe63e075d9a77029f8a79c8335769d79dcaa6a67c85174fdf615c2e4599aff6bac", 0xf7}], 0x8, &(0x7f000000e4c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r2, r8, r4}}}], 0xb0, 0x20000000}}, {{&(0x7f000000e580)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f000000fbc0)=[{&(0x7f000000e600)="72afd7b3b42c8ad922b4680aedcf08a905d520e0c5e8927ccd32db8493a29e96757f248f47b27f435a2b7c858e3cf8cd399beba6835c5995904091e1f7d9fc2cf4d96b06fdc709565ffab929f580476e7280f2fca8f1a653599bf4f05856daac21eca5da5163ca558e0cba7eb9bae503bd3ce15d45cbc4648166754effd6c58976a290daa1c40ec2410b43cb1852fb42c5fdf40ee789355b9134a4d430ecbfa7aff757a5ca0b5da1c2ef0a7b28191cfd82fb738bcae7b677", 0xb8}, {&(0x7f000000e6c0)="b2fb47a16e", 0x5}, {&(0x7f000000e700)="9ad9cdd8e117ba242c64b994edcb36143ccb01ea20555500b5e0e80bfbd79a4bd177c8ac78d9b4f663f5216e023d5d3e73fbced75ec58c7a336692aac33bc04c76adf52f0bd0e024a30e2321a78d95355c4a2abc93b8bf4e3c31ae0f3bf0346ba255fcd383c6563838c9a4ad67d33b577005cf1c9e7313c1ab2467a313e00a1e85f7c03cc3c577153198c53709d35b25130a9b24ffe6462c69971908bfc346a9fe305fa4bda5ef2809bf4e0749753851867da2de30f512c1b412667e50eb46c6701b1769fc5e62a742703998f417d68e844b488857cc185d0d5fc51901bc06", 0xdf}, {&(0x7f000000e800)="6bb1fa9344876d62c352252ac0f8982f", 0x10}, {&(0x7f000000e840)="185e12cf31d0eea4afcf438075fa90d76d280b87278101fd04b643274653e2d55078014146373ac135984f5aea0bade09b88242b222de7e06bd497333b36e3b08d7824b608812c2bb1e2d6565574d1932f00155f71017afab53f986fe7325ca056d72126461964700dc4d2b2b56c3f53fb05beff1599074a03e8aee5bc0e4db89827af21788f212aabb34412c158879ecee2b76254314c96891e02dd0521bd978fe12dc2f20f7ea9b9aa0ed940947547b44f511a39a0c20d94e3276ee7c2db71ef8073bcab5ee57cc99ac79938fde6385c719850f00a34b8ecd6ec49cc75adf93def439f1c6c658cce82dd8c", 0xec}, {&(0x7f000000e940)="e8528642538da6338b82ae02085bb6be0a968735dfc43c707312d09a4afcfa1d8ef8d2dccc8917d3abe1902d884b3a5f113ee3770a5eed0b789f9591e5ec551623e193441a94417affbe2aa737e31f663e153f5c5417e2d596d8c27a613e99d7a69f97f34cd0247faf27256da03e0cec8eef34b211a7127035eb95da713dc014745b7a0486e0da0630a722009eb3a08d94a9fcbb9fe72094dfe54fb925ae69", 0x9f}, {&(0x7f000000ea00)="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", 0x1000}, {&(0x7f000000fa00)="0cfb8b939a5b26c6fe50984791b987008d988b109069f0f6e4e7c7a8045245812f21c4c01e8a977d021ca697d114593d45fcb613feb977491a9e3d0560b6756dd3615d4d3f883fdeb6f4e3d228aa419480bcd8a98bac159a5aed306499e038f2e30399cf6836d4e5ad918d0be3ddf9531fb172377501fd587332648de7dcaa98c337015a8b22b24bc6b150050b81c05e42cbf20cab0915be8d39b45cc675eccd626440dfd9e07b88447584e0992d4adc49750094c1135173832cb0cb78e4216f6814cca741c10823c98d6c16", 0xcc}, {&(0x7f000000fb00)="edd57f52927225e3aafca3d974fac80196339c9abe39ef46e1eb277df8c59c271eb56793c388eb373868e298771781c2a1886fe72ce8fd327a5e91aed77933fdcd34c592e2f2d2111d8ce4a9e0ef96c0bcbbb03bf76e78b62c5e722c7eb1f4009410d61437990ef0685c84ca2764587a5270b6e872a886426efea1fce47a2fd634d3329eecdd6d6cdcd6d836896bb743fe2401bd806b698216d8d268fc1e3cc3156a870547e9e3d3a328eec624bf4d9df7f31dc1e5641e8a207ddf2805da", 0xbe}], 0x9, &(0x7f000000ffc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r14, @ANYBLOB='\x00\x00@\x00'], 0x80, 0x20000004}}, {{&(0x7f0000010040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000010380)=[{&(0x7f00000100c0)="2a77179220f3f9b6db8a4c24608e1ba8ee39d8bf96094385e73e0770bc96df45d5dfb7fce22f5fc6394803346a2c6e1fc843f3b7d197b0114ee95b5f66fe9f7a6c4f63bef3372f4824d18161d5bfcf869738188ae2f4aa30c09fdb67a5bfbae488bb4f4546be6acdb875edb0f1", 0x6d}, {&(0x7f0000010140)="07231e8be72e554dbfc9781e679170256984f82a79e2d275e9428019029bef810e208fa8b12b1f1333ecdbdd1a2f8b8bcd3cccddad9864b88ddc5a74585865126b9a5644c26936dc8cb4637ca6344aace6", 0x51}, {&(0x7f00000101c0)="31ef20b5609b2c37b4c57256eecfb5cd7623b08fd8005907aa5da6dffe77fa63ed6f740a", 0x24}, {&(0x7f0000010200)="91d54cc419bf23071a514619a29257f12dae4e961247ac53bfba2d7f0a116d47ffc6cd256033c79e36478787bd3ec7c2858d432793c06ffb794706f0706ee57182cf4e44b6bf08dc8530a8c242b90b5920c04fd54f0f5e03af7282d2a780c69f88bdd92a1e2b", 0x66}, {&(0x7f0000010280)="cec94b66e132c2e9bd5a8af6eaf0b36bfb98dc1dd946e14a6546bc9f5fb8928419795d57aa25e1c986ca8d7bbdbe671cb0e9ecd6b8294c8ff73afa6c43a5480e9400e81a5fcd152341f06214405cbd879cceed04785177fc5afa589165a6af2aea2d1151655f18bc82d738deee6101c8c2679d544010c107bb6603ee6c1fc2ee5dd7712b6193f1369a29f0b5ed44612f7952e19b6d5da7562ea843050143615bc74a702fb1d8fc0da6e2acddafa5a3a55e2126c4ef5070ebc2fe6f4d359e7ade9e90b33bbbc0dd97ed3c23c7cb23f44ce6429e74c5d2eef37ba0caba6cb4f45622aa7499cedbf130dad29ccfffec84a44d40c9f4503cbd05", 0xf8}], 0x5, &(0x7f0000010400), 0x0, 0x20040001}}], 0x6, 0x410) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:11:14 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:11:14 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"1ebf9d8e5a7b2993c50971799d64aae3", 0x0, 0x0, {0x5, 0x81}, {0x8, 0x3}, 0x9, [0x1, 0x1f, 0x1, 0x9, 0x8000000000000000, 0x21f, 0x6, 0xf77f, 0x3, 0x5, 0x9, 0x85ee, 0xeb, 0x40, 0x0, 0x400]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001240)={{r1}, r2, 0x8, @inherit={0x58, &(0x7f00000011c0)={0x1, 0x2, 0x100000000, 0x1ff, {0x11, 0x0, 0xffff, 0x3, 0x8}, [0x4, 0x7]}}, @name="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"}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r3, 0x402, 0x2571fc6deb7a34c0) fcntl$notify(r3, 0x402, 0x0) ioctl$int_out(r3, 0x4, &(0x7f0000000040)) getdents(r3, &(0x7f00000001c0)=""/4096, 0x1000) [ 1183.838482] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1183.843048] FAULT_INJECTION: forcing a failure. [ 1183.843048] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.844209] CPU: 0 UID: 0 PID: 9724 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1183.844229] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1183.844238] Call Trace: [ 1183.844243] [ 1183.844249] dump_stack_lvl+0xfa/0x120 [ 1183.844280] should_fail_ex+0x4d7/0x5e0 [ 1183.844298] ? jbd2__journal_start+0x193/0x6b0 [ 1183.844319] should_failslab+0xc2/0x120 [ 1183.844335] kmem_cache_alloc_noprof+0x80/0x690 [ 1183.844354] ? stack_trace_save+0x8e/0xc0 [ 1183.844368] ? lock_is_held_type+0x9e/0x120 [ 1183.844393] ? jbd2__journal_start+0x193/0x6b0 [ 1183.844412] jbd2__journal_start+0x193/0x6b0 [ 1183.844436] __ext4_journal_start_sb+0x325/0x5d0 [ 1183.844454] ? ext4_iomap_begin+0x5b0/0xe80 [ 1183.844468] ? ext4_meta_trans_blocks+0x256/0x310 [ 1183.844486] ext4_iomap_begin+0x5b0/0xe80 [ 1183.844502] ? __pfx_perf_trace_lock+0x10/0x10 [ 1183.844531] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1183.844547] ? mark_held_locks+0x49/0x80 [ 1183.844568] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1183.844587] ? __create_object+0x59/0x80 [ 1183.844607] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1183.844622] iomap_iter+0x55a/0x1020 [ 1183.844647] __iomap_dio_rw+0x6dd/0x1c90 [ 1183.844667] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1183.844694] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1183.844712] ? kasan_quarantine_put+0x84/0x1e0 [ 1183.844739] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1183.844760] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1183.844773] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1183.844797] iomap_dio_rw+0x40/0xa0 [ 1183.844812] ext4_file_write_iter+0xe0e/0x19f0 [ 1183.844854] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1183.844869] ? trace_kmalloc+0x1f/0xb0 [ 1183.844880] ? __kmalloc_noprof+0x274/0x680 [ 1183.844896] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1183.844922] iter_file_splice_write+0xa3a/0x11f0 [ 1183.844951] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1183.844991] ? lock_is_held_type+0x9e/0x120 [ 1183.845011] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1183.845032] direct_splice_actor+0x192/0x7b0 [ 1183.845053] splice_direct_to_actor+0x347/0x9d0 [ 1183.845072] ? __pfx_direct_splice_actor+0x10/0x10 [ 1183.845095] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1183.845115] ? lock_acquire+0x15e/0x2f0 [ 1183.845137] do_splice_direct+0x179/0x250 [ 1183.845155] ? __pfx_do_splice_direct+0x10/0x10 [ 1183.845174] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1183.845194] ? security_file_permission+0x22/0x90 [ 1183.845215] do_sendfile+0xa8e/0xdc0 [ 1183.845247] ? __pfx_do_sendfile+0x10/0x10 [ 1183.845268] ? __fget_files+0x20d/0x3b0 [ 1183.845296] __x64_sys_sendfile64+0x1d3/0x210 [ 1183.845312] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1183.845328] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1183.845352] do_syscall_64+0xbf/0x430 [ 1183.845368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.845382] RIP: 0033:0x7fb59c6b8b19 [ 1183.845393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1183.845407] RSP: 002b:00007fb599c2e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1183.845420] RAX: ffffffffffffffda RBX: 00007fb59c7cbf60 RCX: 00007fb59c6b8b19 [ 1183.845430] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1183.845438] RBP: 00007fb599c2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1183.845446] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1183.845455] R13: 00007fff3932da4f R14: 00007fb599c2e300 R15: 0000000000022000 [ 1183.845475] [ 1183.861389] No source specified [ 1183.862710] serio: Serial port ptm0 [ 1183.869735] No source specified [ 1183.876258] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1183.905856] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1183.907643] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:11:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1020, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:11:14 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x2}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x3f, 0x7, 0x3, 0x1}, {0x6, 0x9, 0xff, 0x9}, {0x7, 0x0, 0x20, 0x1}, {0x0, 0x9, 0x3f, 0x7}, {0x1, 0x5, 0x15, 0x5}]}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in=@remote}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000580)=0xe8) r3 = open(&(0x7f00000005c0)='./file0\x00', 0x200, 0x101) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=@getsadinfo={0x204, 0x23, 0x100, 0x70bd25, 0x25dfdbfe, 0x0, [@XFRMA_SET_MARK={0x8, 0x1d, 0x4}, @mark={0xc, 0x15, {0x35075d, 0x7}}, @algo_auth={0x6b, 0x1, {{'sha1-avx\x00'}, 0x118, "2b506915183083ee48d1b3c996cc6a73a693f60b455a87e1b0a36702e1bb50719d9ce1"}}, @policy_type={0xa}, @algo_crypt={0x145, 0x2, {{'ctr-aes-aesni\x00'}, 0x7e8, "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"}}, @extra_flags={0x8, 0x18, 0x8a6f}, @coaddr={0x14, 0xe, @in6=@dev={0xfe, 0x80, '\x00', 0x23}}]}, 0x204}}, 0x800) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) 23:11:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_cache\x00') fcntl$notify(r0, 0x402, 0x2571fc6d6b7a34dd) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) [ 1184.005225] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1184.013987] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1184.027125] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 23:11:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$DVD_READ_STRUCT(r1, 0x2284, &(0x7f0000000cc0)=@manufact={0x4, 0x0, 0x800, "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"}) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) lseek(r0, 0x100000000, 0x3) getdents(r0, &(0x7f0000000040)=""/4094, 0xffe) getdents64(r0, &(0x7f0000001040)=""/19, 0x13) [ 1184.031692] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1184.064482] No source specified [ 1184.070647] No source specified 23:11:14 executing program 5: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) 23:11:14 executing program 2: r0 = getpid() pidfd_open(r0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='fd\x00') fcntl$notify(r1, 0x402, 0x2571fc6deb7a34c0) pidfd_open(r0, 0x0) getdents(r1, &(0x7f00000001c0)=""/4096, 0x1000) [ 1184.145302] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1184.148276] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:11:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1643, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1184.155634] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1184.157190] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:11:14 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 17) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:11:14 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x9, 0x8, 0x2, 0x4, 0x0, 0x8, 0x3}, 0x1c) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @broadcast}, 0x10) recvfrom(r1, &(0x7f0000000240)=""/4085, 0xff5, 0x40012002, &(0x7f0000000040)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) [ 1184.225238] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1184.230617] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1184.241496] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1184.243292] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1184.253986] No source specified [ 1184.257360] No source specified [ 1184.668654] serio: Serial port ptm1 23:11:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:11:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) preadv(r1, &(0x7f0000001680)=[{&(0x7f0000000080)=""/147, 0x93}, {&(0x7f00000011c0)=""/182, 0xb6}, {&(0x7f0000000140)=""/46, 0x2e}, {&(0x7f0000001280)=""/157, 0x9d}, {&(0x7f0000001340)=""/193, 0xc1}, {&(0x7f0000001440)=""/180, 0xb4}, {&(0x7f0000001500)=""/168, 0xa8}, {&(0x7f00000015c0)=""/191, 0xbf}], 0x8, 0x7fffffff, 0x5) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000040)) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:11:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) close(r0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:11:25 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:11:25 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000000)={0x0, 0x100000001, [0x2193654f, 0x9, 0x5, 0x3, 0x40, 0x1]}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) 23:11:25 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 18) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:11:25 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x540b, 0x0) 23:11:25 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$DVD_READ_STRUCT(r1, 0x2284, &(0x7f0000000cc0)=@manufact={0x4, 0x0, 0x800, "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"}) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) lseek(r0, 0x100000000, 0x3) getdents(r0, &(0x7f0000000040)=""/4094, 0xffe) getdents64(r0, &(0x7f0000001040)=""/19, 0x13) [ 1194.867532] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1194.868817] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1194.874976] FAULT_INJECTION: forcing a failure. [ 1194.874976] name failslab, interval 1, probability 0, space 0, times 0 [ 1194.876082] CPU: 0 UID: 0 PID: 9770 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1194.876099] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1194.876107] Call Trace: [ 1194.876112] [ 1194.876117] dump_stack_lvl+0xfa/0x120 [ 1194.876148] should_fail_ex+0x4d7/0x5e0 [ 1194.876165] ? ext4_mb_new_blocks+0x64e/0x4580 [ 1194.876181] should_failslab+0xc2/0x120 [ 1194.876196] kmem_cache_alloc_noprof+0x80/0x690 [ 1194.876215] ? _raw_spin_unlock+0x1e/0x40 [ 1194.876232] ? __mark_inode_dirty+0x7e8/0x1470 [ 1194.876250] ? ext4_mb_new_blocks+0x64e/0x4580 [ 1194.876262] ext4_mb_new_blocks+0x64e/0x4580 [ 1194.876282] ? perf_trace_lock+0xb5/0x5d0 [ 1194.876303] ? ext4_ind_map_blocks+0x263/0x2330 [ 1194.876323] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 1194.876336] ? __pfx_perf_trace_lock+0x10/0x10 [ 1194.876353] ? ext4_get_branch+0x588/0x740 [ 1194.876374] ext4_ind_map_blocks+0x1850/0x2330 [ 1194.876394] ? unwind_next_frame+0x3bc/0x2540 [ 1194.876412] ? __pfx_ext4_ind_map_blocks+0x10/0x10 [ 1194.876437] ? lock_acquire+0x15e/0x2f0 [ 1194.876453] ? ext4_map_blocks+0x564/0x1510 [ 1194.876473] ? down_write+0x119/0x1f0 [ 1194.876485] ? __pfx_down_write+0x10/0x10 [ 1194.876496] ? lock_release+0xc8/0x290 [ 1194.876517] ext4_map_blocks+0xaf1/0x1510 [ 1194.876532] ? kmem_cache_alloc_noprof+0x270/0x690 [ 1194.876548] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1194.876565] ? jbd2__journal_start+0xf6/0x6b0 [ 1194.876587] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1194.876602] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1194.876615] ? ext4_iomap_begin+0x5b0/0xe80 [ 1194.876628] ? ext4_meta_trans_blocks+0x256/0x310 [ 1194.876645] ext4_iomap_begin+0xa5e/0xe80 [ 1194.876658] ? __pfx_perf_trace_lock+0x10/0x10 [ 1194.876683] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1194.876697] ? mark_held_locks+0x49/0x80 [ 1194.876715] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1194.876732] ? __create_object+0x59/0x80 [ 1194.876750] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1194.876763] iomap_iter+0x55a/0x1020 [ 1194.876786] __iomap_dio_rw+0x6dd/0x1c90 [ 1194.876804] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1194.876828] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1194.876845] ? kasan_quarantine_put+0x84/0x1e0 [ 1194.876870] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1194.876888] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1194.876900] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1194.876921] iomap_dio_rw+0x40/0xa0 [ 1194.876935] ext4_file_write_iter+0xe0e/0x19f0 [ 1194.876960] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1194.876973] ? trace_kmalloc+0x1f/0xb0 [ 1194.876983] ? __kmalloc_noprof+0x274/0x680 [ 1194.876998] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1194.877019] iter_file_splice_write+0xa3a/0x11f0 [ 1194.877046] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1194.877092] ? lock_is_held_type+0x9e/0x120 [ 1194.877114] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1194.877132] direct_splice_actor+0x192/0x7b0 [ 1194.877151] splice_direct_to_actor+0x347/0x9d0 [ 1194.877169] ? __pfx_direct_splice_actor+0x10/0x10 [ 1194.877189] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1194.877207] ? lock_acquire+0x15e/0x2f0 [ 1194.877227] do_splice_direct+0x179/0x250 [ 1194.877243] ? __pfx_do_splice_direct+0x10/0x10 [ 1194.877259] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1194.877278] ? security_file_permission+0x22/0x90 [ 1194.877297] do_sendfile+0xa8e/0xdc0 [ 1194.877321] ? __pfx_do_sendfile+0x10/0x10 [ 1194.877339] ? __fget_files+0x20d/0x3b0 [ 1194.877364] __x64_sys_sendfile64+0x1d3/0x210 [ 1194.877379] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1194.877393] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1194.877415] do_syscall_64+0xbf/0x430 [ 1194.877429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.877442] RIP: 0033:0x7fb59c6b8b19 [ 1194.877452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1194.877464] RSP: 002b:00007fb599c2e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1194.877476] RAX: ffffffffffffffda RBX: 00007fb59c7cbf60 RCX: 00007fb59c6b8b19 [ 1194.877484] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1194.877492] RBP: 00007fb599c2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1194.877500] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1194.877507] R13: 00007fff3932da4f R14: 00007fb599c2e300 R15: 0000000000022000 [ 1194.877526] [ 1194.923398] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1194.929252] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1194.952330] serio: Serial port ptm0 [ 1194.968146] No source specified [ 1194.972659] No source specified 23:11:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$CDROMPLAYTRKIND(r1, 0x5304, &(0x7f0000000080)={0x1, 0x1f, 0x76, 0x6}) ioctl$CDROMEJECT(r1, 0x5309) 23:11:25 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000001700)={r6, 0x1, 0x6, @multicast}, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@private1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=@expire={0x2a8, 0x18, 0x400, 0x70bd2a, 0x25dfdbfe, {{{@in6=@private0, @in=@local, 0x4e20, 0x208, 0x4e20, 0x3, 0xa, 0x20, 0x20, 0x33, r6, r7}, {@in=@empty, 0x4d5, 0xff}, @in6=@empty, {0xffffffffffffff00, 0x10000, 0x113d809a, 0x2, 0x1, 0x80000000, 0x100, 0x58d1}, {0x800, 0x5, 0x5}, {0x7fff, 0x800, 0xffffffff}, 0x70bd26, 0x0, 0x2, 0x4, 0x79, 0x1a}, 0x7}, [@algo_auth_trunc={0x13e, 0x14, {{'tgr128\x00'}, 0x790, 0x0, "a85928c66c851db61dfa845485694be0e19fde884bb33ec1d487f11af7e0726d15a340b5da668e757ac153f29692eaa2be73d6bffb986f8c9f132d8d6b42c0c37f37e1de3f56db39b9d72cb13b92f9f8cbba3e5d01873458bea44127f5598b89ad7536cd6b857c13027dd2d99c0ded5382d90014c7d018549f8bab2122dfbc4c6f3d39ccc4611dc94c36e4f1ad325a0a4bbbe05472b8ff4a9f1acd85156d9b51093eea0d015c0ac261cfadb7ecde49bafff3851637c65d225d956176240f80198d116544ad2495fd2dcdd62dd91dff481b02449b3ce4776e51ccfec288caa2e7e6c56903e1022645f379cd83bd916351fc7e"}}, @srcaddr={0x14, 0xd, @in=@local}, @algo_auth={0x48, 0x1, {{'cbcmac-aes-ce\x00'}}}, @mark={0xc, 0x15, {0x35075b, 0x20}}, @extra_flags={0x8}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x1}, 0x8885) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) 23:11:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2010, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:11:25 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 1) 23:11:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) dup(r1) fcntl$notify(r1, 0x402, 0x0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) r2 = memfd_secret(0x80000) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000000c0)={0x6, 0x3, 0x7ff, 0x1, 0x7}) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000100)={'veth1_macvtap', 0x32, 0x35}, 0x10) 23:11:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, 0x0, 0x9, 0x301, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3f}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_TUPLE={0x50, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20048c1}, 0x20000004) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) [ 1195.116413] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1195.184611] No source specified [ 1195.192131] No source specified 23:11:25 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 19) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1195.233363] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1195.246477] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1195.252294] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1195.255419] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1195.262390] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:11:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x4316, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1195.303275] FAULT_INJECTION: forcing a failure. [ 1195.303275] name failslab, interval 1, probability 0, space 0, times 0 [ 1195.305302] CPU: 1 UID: 0 PID: 9812 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1195.305335] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1195.305349] Call Trace: [ 1195.305356] [ 1195.305365] dump_stack_lvl+0xfa/0x120 [ 1195.305411] should_fail_ex+0x4d7/0x5e0 [ 1195.305439] should_failslab+0xc2/0x120 [ 1195.305465] __kmalloc_cache_noprof+0x81/0x6b0 [ 1195.305497] ? __might_fault+0xe0/0x190 [ 1195.305530] ? alloc_pipe_info+0x10d/0x5a0 [ 1195.305553] ? find_held_lock+0x2b/0x80 [ 1195.305585] ? alloc_pipe_info+0x10d/0x5a0 [ 1195.305609] alloc_pipe_info+0x10d/0x5a0 [ 1195.305637] splice_direct_to_actor+0x78c/0x9d0 [ 1195.305673] ? __pfx_direct_splice_actor+0x10/0x10 [ 1195.305706] ? lock_acquire+0x132/0x2f0 [ 1195.305744] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1195.305780] ? lock_acquire+0x15e/0x2f0 [ 1195.305818] do_splice_direct+0x179/0x250 [ 1195.305850] ? __pfx_do_splice_direct+0x10/0x10 [ 1195.305883] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1195.305919] ? security_file_permission+0x22/0x90 [ 1195.305954] do_sendfile+0xa8e/0xdc0 [ 1195.306005] ? __pfx_do_sendfile+0x10/0x10 [ 1195.306041] ? __fget_files+0x20d/0x3b0 [ 1195.306088] __x64_sys_sendfile64+0x1d3/0x210 [ 1195.306116] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1195.306145] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1195.306187] do_syscall_64+0xbf/0x430 [ 1195.306213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.306237] RIP: 0033:0x7f7a32465b19 [ 1195.306256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1195.306279] RSP: 002b:00007f7a2f9ba188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1195.306301] RAX: ffffffffffffffda RBX: 00007f7a32579020 RCX: 00007f7a32465b19 [ 1195.306318] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1195.306333] RBP: 00007f7a2f9ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1195.306349] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 1195.306364] R13: 00007ffe0bebc99f R14: 00007f7a2f9ba300 R15: 0000000000022000 [ 1195.306397] 23:11:25 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) 23:11:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) sync_file_range(r0, 0x0, 0x2, 0x1) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0x3) [ 1195.480203] No source specified [ 1195.484028] No source specified [ 1195.771769] serio: Serial port ptm1 23:11:37 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 2) 23:11:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000080)={0x0, 0x21, 0xa62}) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x5}}, './file0\x00'}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) 23:11:37 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x540c, 0x0) 23:11:37 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) r2 = signalfd(r1, &(0x7f0000000040)={[0x1]}, 0x8) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000080)) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @remote}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2, 0x50, r1, 0x0) ioctl$TIOCSLCKTRMIOS(r5, 0x4b4b, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000480)={{r1}, 0x0, 0x0, @unused=[0x6, 0x7fffffff, 0x401, 0xffffffffffffffff], @subvolid=0x2}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r4, 0x1, 0x6, @multicast}, 0x10) 23:11:37 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 20) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:11:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xedc0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:11:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000011c0)={0x0, 0xb64f}) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'batadv_slave_0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="110000006c0c0000ffffffff2000000081ffffff08000000000e6a3f5f73272600000000e746cac5f912534c76453c95917945ed6e536dc8b5ddec6278f9cd0dc982683ecea70f612d1d6bb5efa2fbf6447e23c354517b99b68787a4aef8a606cd121cead338a894a92b74e91f7a70eee9b90b83674eda302e63fc967a452f195beada76182fefdf4b790682fd2394a8"]}) 23:11:37 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) [ 1207.310740] FAULT_INJECTION: forcing a failure. [ 1207.310740] name failslab, interval 1, probability 0, space 0, times 0 [ 1207.312852] CPU: 0 UID: 0 PID: 9834 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1207.312884] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1207.312898] Call Trace: [ 1207.312906] [ 1207.312915] dump_stack_lvl+0xfa/0x120 [ 1207.312968] should_fail_ex+0x4d7/0x5e0 [ 1207.312996] ? __es_insert_extent+0xed2/0x1370 [ 1207.313032] should_failslab+0xc2/0x120 [ 1207.313059] kmem_cache_alloc_noprof+0x80/0x690 [ 1207.313101] ? __es_insert_extent+0xed2/0x1370 [ 1207.313135] __es_insert_extent+0xed2/0x1370 [ 1207.313175] ? __pfx_do_raw_write_lock+0x10/0x10 [ 1207.313212] ext4_es_insert_extent+0x438/0x1090 [ 1207.313247] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 1207.313271] ? lock_acquire+0x15e/0x2f0 [ 1207.313303] ? ext4_map_blocks+0x564/0x1510 [ 1207.313341] ? down_write+0x119/0x1f0 [ 1207.313378] ? __pfx_down_write+0x10/0x10 [ 1207.313401] ? lock_release+0xc8/0x290 [ 1207.313441] ext4_map_blocks+0x808/0x1510 [ 1207.313471] ? kmem_cache_alloc_noprof+0x270/0x690 [ 1207.313503] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1207.313535] ? jbd2__journal_start+0xf6/0x6b0 [ 1207.313579] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1207.313606] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1207.313632] ? ext4_iomap_begin+0x5b0/0xe80 [ 1207.313658] ? ext4_meta_trans_blocks+0x256/0x310 [ 1207.313691] ext4_iomap_begin+0xa5e/0xe80 [ 1207.313716] ? __pfx_perf_trace_lock+0x10/0x10 [ 1207.313766] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1207.313794] ? mark_held_locks+0x49/0x80 [ 1207.313831] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1207.313864] ? __create_object+0x59/0x80 [ 1207.313899] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1207.313924] iomap_iter+0x55a/0x1020 [ 1207.313968] __iomap_dio_rw+0x6dd/0x1c90 [ 1207.314002] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1207.314049] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1207.314082] ? kasan_quarantine_put+0x84/0x1e0 [ 1207.314129] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1207.314166] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1207.314189] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1207.314230] iomap_dio_rw+0x40/0xa0 [ 1207.314256] ext4_file_write_iter+0xe0e/0x19f0 [ 1207.314296] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1207.314321] ? trace_kmalloc+0x1f/0xb0 [ 1207.314341] ? __kmalloc_noprof+0x274/0x680 [ 1207.314371] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1207.314414] iter_file_splice_write+0xa3a/0x11f0 [ 1207.314466] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1207.314531] ? lock_is_held_type+0x9e/0x120 [ 1207.314566] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1207.314602] direct_splice_actor+0x192/0x7b0 [ 1207.314640] splice_direct_to_actor+0x347/0x9d0 [ 1207.314675] ? __pfx_direct_splice_actor+0x10/0x10 [ 1207.314716] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1207.314752] ? lock_acquire+0x15e/0x2f0 [ 1207.314791] do_splice_direct+0x179/0x250 [ 1207.314823] ? __pfx_do_splice_direct+0x10/0x10 [ 1207.314857] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1207.314894] ? security_file_permission+0x22/0x90 [ 1207.314929] do_sendfile+0xa8e/0xdc0 [ 1207.314973] ? __pfx_do_sendfile+0x10/0x10 [ 1207.315009] ? __fget_files+0x20d/0x3b0 [ 1207.315058] __x64_sys_sendfile64+0x1d3/0x210 [ 1207.315087] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1207.315116] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1207.315160] do_syscall_64+0xbf/0x430 [ 1207.315186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.315210] RIP: 0033:0x7fb59c6b8b19 [ 1207.315228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1207.315252] RSP: 002b:00007fb599c2e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1207.315274] RAX: ffffffffffffffda RBX: 00007fb59c7cbf60 RCX: 00007fb59c6b8b19 [ 1207.315290] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1207.315304] RBP: 00007fb599c2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1207.315318] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1207.315333] R13: 00007fff3932da4f R14: 00007fb599c2e300 R15: 0000000000022000 [ 1207.315368] [ 1207.447028] No source specified [ 1207.470599] serio: Serial port ptm0 [ 1207.470884] No source specified 23:11:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000080)={0xfe1, 0x0, 0x3, 0x2, 0x3, 0x7ff}) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) [ 1207.485169] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1207.487894] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1207.494307] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1207.496475] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:11:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='autogroup\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) fcntl$notify(r1, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:11:38 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @multicast}, 0x10) r2 = socket$unix(0x1, 0x5, 0x0) recvmsg(r2, &(0x7f00000001c0)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)}, {&(0x7f0000000240)=""/232, 0xe8}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f00000000c0)=""/1, 0x1}, {&(0x7f0000000340)=""/229, 0xe5}], 0x5, &(0x7f00000004c0)=""/245, 0xf5}, 0x40000020) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={r1, 0x1, 0x6, @multicast}, 0x10) 23:11:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x80000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:11:38 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 3) 23:11:38 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000080)={{r0}, 0x4, &(0x7f0000000040)=[0x150, 0xf6, 0x0, 0x7], 0x1, 0x1, [0x18b8bd0e, 0x4, 0x8, 0x4]}) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) fsetxattr(r1, &(0x7f0000000180)=@known='trusted.overlay.upper\x00', &(0x7f00000011c0)='.pending_reads\x00', 0xf, 0x3) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) openat$incfs(r2, &(0x7f0000000140)='.pending_reads\x00', 0x1010c0, 0x0) [ 1207.789896] No source specified 23:11:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) [ 1207.796495] No source specified [ 1207.901556] FAULT_INJECTION: forcing a failure. [ 1207.901556] name failslab, interval 1, probability 0, space 0, times 0 [ 1207.903302] CPU: 0 UID: 0 PID: 9872 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1207.903335] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1207.903353] Call Trace: [ 1207.903364] [ 1207.903378] dump_stack_lvl+0xfa/0x120 [ 1207.903443] should_fail_ex+0x4d7/0x5e0 [ 1207.903482] should_failslab+0xc2/0x120 [ 1207.903508] __kmalloc_noprof+0xcd/0x680 [ 1207.903540] ? alloc_pipe_info+0x1e8/0x5a0 [ 1207.903571] alloc_pipe_info+0x1e8/0x5a0 [ 1207.903600] splice_direct_to_actor+0x78c/0x9d0 [ 1207.903635] ? __pfx_direct_splice_actor+0x10/0x10 [ 1207.903669] ? lock_acquire+0x132/0x2f0 [ 1207.903708] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1207.903745] ? lock_acquire+0x15e/0x2f0 [ 1207.903783] do_splice_direct+0x179/0x250 [ 1207.903815] ? __pfx_do_splice_direct+0x10/0x10 [ 1207.903849] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1207.903886] ? security_file_permission+0x22/0x90 [ 1207.903921] do_sendfile+0xa8e/0xdc0 [ 1207.903972] ? __pfx_do_sendfile+0x10/0x10 [ 1207.904008] ? __fget_files+0x20d/0x3b0 [ 1207.904056] __x64_sys_sendfile64+0x1d3/0x210 [ 1207.904084] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1207.904113] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1207.904156] do_syscall_64+0xbf/0x430 [ 1207.904182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.904206] RIP: 0033:0x7f7a32465b19 [ 1207.904224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1207.904248] RSP: 002b:00007f7a2f9ba188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1207.904271] RAX: ffffffffffffffda RBX: 00007f7a32579020 RCX: 00007f7a32465b19 [ 1207.904287] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1207.904302] RBP: 00007f7a2f9ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1207.904316] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 1207.904330] R13: 00007ffe0bebc99f R14: 00007f7a2f9ba300 R15: 0000000000022000 [ 1207.904364] [ 1208.277352] serio: Serial port ptm1 23:11:47 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 4) 23:11:47 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x540d, 0x0) 23:11:47 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 21) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:11:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$getown(r0, 0x9) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) fcntl$notify(r1, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) close_range(r0, r0, 0x0) 23:11:47 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/keycreate\x00') r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000000)={0x2, 0x2, 0x8, 0x401, 0xfffff8b8, 0x1ff}) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:11:47 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 23:11:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xe0ffff, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:11:47 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @multicast}, 0x10) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000600), 0xc, &(0x7f0000000ac0)={&(0x7f0000001100)=ANY=[@ANYBLOB="6804000012eeff0027bd00000000df3633c19e974e234e2207000000f002000000000000d7aa000009000000008003000300000003000000e6691bd3a2a1f11c0d3c21c402e07d8b37a57e900de1f763c7b6e9beb5685f9cd9e65c07eb876e18d5983c20cb80448004b55f8e53a934864de1ca971bac8c6592fb0328ce6cd06d9d63bca05bff79c0eed774a0df153e431c5e88e34b67de5335f6eadb717ef5de4d11d4ac0f4ce7728f70685f3644ce5c37f4388840f55ea4546e1c5752bf6eeb04165a83f60d6dfbccf323660b05fca36862a6a2ce8fc3aa23f32baaa8992ab6dfe4d161f438da144010f9b151a029652781aa177a9aea2f", @ANYRES32=0x0, @ANYBLOB="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"], 0x468}}, 0x0) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x87, &(0x7f0000000500)="92dea6f2494abf580c7f18bc2a2bdd5355f4dcee6541c17f51d400286047997d9338501f00ce17855ceb81c76ee51f650355f905e0b2a8a3500f1751f93b18e365685947de364f738839b49a167f0c07a4bc469e4c44d34bd624b8d988ac481bfd165b8174a3b345c75255b0a8436aa023f0666c5683c5a1bd934f7e0a619cd9b3606632dc5939"}) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000040)={@private0, r2}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x3}, 0x4) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000180)=0x0) r6 = getpid() pidfd_open(r6, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) r8 = getpid() pidfd_open(r8, 0x0) clone3(&(0x7f0000000480)={0x3000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), {}, &(0x7f0000000240)=""/168, 0xa8, &(0x7f0000000300)=""/232, &(0x7f0000000400)=[r5, r6, r7, r8], 0x4, {r3}}, 0x58) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) 23:11:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x100, 0x505301) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) close(r2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000080)={0x1, 0x2, 'client1\x00', 0x3, "e47cbb23bdb9d02c", "2942400478cec2324cc721ba33b0fe0dc8d547675b283486be9cbfbc2162d892", 0x7, 0x1}) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) [ 1217.155444] serio: Serial port ptm0 [ 1217.160574] No source specified [ 1217.164719] No source specified [ 1217.176258] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 23:11:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:11:47 executing program 2: fcntl$notify(0xffffffffffffffff, 0x402, 0x2571fc6d6b7a34ea) getdents(0xffffffffffffffff, &(0x7f00000001c0)=""/4096, 0x1000) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) getdents64(r0, &(0x7f0000001ac0)=""/175, 0xaf) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x401, 0xa, &(0x7f0000001840)=[{&(0x7f0000000080)="4cc83e49348084e27a0ca6693d165da9a04b99e483774b984d0fb4ab688f5a0ba46ac3477cdd914300f57860888da3dbd312952c9e3163f78897df23d31efe0b05d7b363116d9dd50b011dbd1f82a89faf8dea5a869ac3fcb1466bd565e13dc802ad2933f0512a182361bca4635a36231957", 0x72, 0x9}, {&(0x7f0000000100)="d7d42960e16ddde12d6d93044471047578507651183a84c3a5dee1bf34e6f3c9fbe84d45ddbe0abc7b99db203f43da3397a1af59b6c146d0fbb88e6676502248b16d00e7680678ac3078e15694e5580cca72ec54d557", 0x56, 0x400}, {&(0x7f00000011c0)="f42ce5abd270455a00861078bb443c7f24bc098d5e5023747668163573c06c636064f9dc7650b9fe78846f302e9b681518c663ee1e626816be291eb7ce383185482f80defb03e919a7861908822dbd979c2d06a5f3af758a3b3b6f409689f430dd939541a2a432a5528dad179125efc0a07a6b149e7f3bc0db3899838f9ccbef34706dfed723d0e223fd7a7d031836e62caf30ac3072884a95e62c31681c3e4dbe51ecbb1c2ad349a013677ef9d896173645fadf824cff20543413973979fb6543e9d244344fef86c5c5812f5c981d", 0xcf, 0x700e81dc}, {&(0x7f00000012c0)="8a68e5f8e40d7c513e311a02e883eec74493f1e8ffebe420e54b7128223dc60a710af6cf43389b94042004acefe3585014e81e2ee9de6404eec45a8438cb94289cde9e064151dc76e8691a7b7917445db1b907d6767f3da9c7cc44c8f6a54b5f0b185f8fcf02d20a560d0b6aa9cb5368d5896b5552c663a9c88750d304d6b9ff5136b5e40272ca3abdcbf6e8554dee7172bf286d773eb9a92d3b3ec8ae4581781ad320aa42591f1379647b5df288881a82ce03137f45fcdbdaaa1434cc712ebde1fef54fb083f6e15a983c8b7e2cb4592da80ff9603e4236b27448c005a75c353f05b05cd01eae1569cefe805804f708972504d74f066761a7f1c6", 0xfb, 0xfffffffffffff956}, {&(0x7f00000013c0)="b4fe6c0c6e12ec3fff612f7ab90f11086e39f6a28c512501dac83d0532d14e56c2b949462cde05036a339e754e67d4b9b1eb0b56383e30b3893732d31c0521b3d94d5133a2198ff5462e03bc1ee2e075e97d254120dbc24913fcec173057f8bf30aaaaaf344a40a2d6c34061ad45e7dbcd45f7abe3629adb14982357abcf2446f348559bf8962d045cc9780d7af164272fd4c71b1c195ccbb604a6e58095d0d7a2b285a38cf7c726c9f0a8486e88bf5a20820197c6e373b0b2a6d151063499c7747cb9d5aefe4e74f847c5642bb3", 0xce, 0x1}, {&(0x7f00000014c0)="b116b9682499c431032a3ed2d87854187b665835094cd02b9f1d70991a2a074e3a41343d918b26c1d0c68477d45f7e1497c0129b8e2d231f0006c17ee4ab9c7ff75d81262b9297", 0x47, 0x388}, {&(0x7f0000001540)="9bc515424636dec9e8859bbd99cc922cfe5a387dcad7ee49cd17a3833040a627c5f6790a678e6b3a73b34a80da2657df6bc7f0d096e9b503ef5dc727af4044085eb0115790dd002f43dddf16f61bd8568706ad47cd3631f07d8370d265fb57d3", 0x60}, {&(0x7f00000015c0)="95ad894ae10db0203061c22cf9a81613bc42409d173ee1979531a12967beadbbf6140e816a7ec96c829d1285d40907d83e8b926577900c0170afc71988303da658fbfc713d030aa9b2d40773497d7b482e25b1876ec87c379cff042adae3c231a841e3e7ff13b61dc6c0e8d04fdd6d7a6df93c83127ea66540c2c94ec05f8e3a4016c25f51", 0x85, 0x100000001}, {&(0x7f0000001680)="2273d083fda2d97ce728fd2412da53d3a191f7379f050ccf3cd3d208f7fb5448f692afe8979a048b974ceb31f562cfa3cfae3e5035794a74f61e95c6d9a6991231ae000827b2b68d4939431f6a28204b50f9c60b5e96bdca3c916a0a39784e5dc3af4e850597295c23f9dd5af13a4bbc1b9e05aa2f6e7b289e398787cf2a5efc9d47a64887d69c15b0cab026", 0x8c, 0x3}, {&(0x7f0000001740)="322bbec3595ebd59df449e157eee05b4b545b82c1ab314ad2574d6c536b74cbf1959d75d22736f9b4bc35f3ce0db0dcb9fee44c7d9fca0d6b731d1ec57f86cad5655854f89e5969467b509d1c063570280e4966da39faee4ed89d979984cf63ac81abe85a9458ad9f17470201265c3d3088a3e19272d720156003695e1b8d6591e34f92928c3993eb78d36741805a4bb360a777e60e7b7392b3d0148257396af1f81b2c50cd9d18e1f6f86eef665a075c2c709d8c9898ddfa76167d4bc3231b5c2870c5e530d4096c54595bab7e349569565b98bd0969d2d301f7bbf853c8d98d321c230f5ef4ff738926f0523ab656c1d4db29f", 0xf4, 0xc67}], 0x2100803, &(0x7f0000001940)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8}}], [{@euid_lt}, {@hash}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@seclabel}, {@hash}, {@obj_user}, {@dont_measure}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) getdents(r1, &(0x7f0000001a00)=""/138, 0x8a) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r2, 0x4b4b, 0x0) close_range(0xffffffffffffffff, r2, 0x0) 23:11:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) getdents64(r1, &(0x7f0000000040)=""/147, 0x93) 23:11:47 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 5) [ 1217.343554] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1217.349302] No source specified [ 1217.361032] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1217.364927] No source specified 23:11:47 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 22) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:11:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:11:47 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1217.431429] No source specified [ 1217.435257] No source specified [ 1217.448068] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:11:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x3000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1217.517793] No source specified [ 1217.519914] No source specified [ 1217.978466] serio: Serial port ptm1 23:11:59 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 6) 23:11:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='setgroups\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x38, r4, 0x1, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0xa}]}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0xc178cc740b87e925}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, 0x34}}, 0x20048844) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 23:11:59 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5412, 0x0) 23:11:59 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6erspan0\x00', 0x0}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x48201, 0x1d2) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @multicast}, 0x10) ioctl$CDROMREADMODE2(r4, 0x530c, &(0x7f0000000240)={0x6, 0x0, 0x4, 0x3f, 0x6e, 0x7}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000000c0)) r5 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(r5, 0xffffffffffffffff) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/diskstats\x00', 0x0, 0x0) syz_io_uring_setup(0x74a5, &(0x7f0000001ec0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000001f40), &(0x7f0000001f80)) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r6) sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xfc46, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r8, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xd66}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48004}, 0x40020d4) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xec, r8, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1ff}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1a}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000020) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) 23:11:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x4000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:11:59 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 23) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:11:59 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:11:59 executing program 4: r0 = getpid() pidfd_open(r0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='syscall\x00') fcntl$notify(r2, 0x402, 0x2571fc6deb7a34c0) getdents(r2, &(0x7f00000001c0)=""/4096, 0x1000) [ 1229.153410] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1229.164756] serio: Serial port ptm0 [ 1229.175651] No source specified [ 1229.184552] No source specified [ 1229.191772] FAULT_INJECTION: forcing a failure. [ 1229.191772] name failslab, interval 1, probability 0, space 0, times 0 [ 1229.193512] CPU: 1 UID: 0 PID: 9949 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1229.193529] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1229.193537] Call Trace: [ 1229.193541] [ 1229.193546] dump_stack_lvl+0xfa/0x120 [ 1229.193572] should_fail_ex+0x4d7/0x5e0 [ 1229.193588] ? jbd2__journal_start+0x193/0x6b0 [ 1229.193607] should_failslab+0xc2/0x120 [ 1229.193622] kmem_cache_alloc_noprof+0x80/0x690 [ 1229.193644] ? jbd2__journal_start+0x193/0x6b0 [ 1229.193662] jbd2__journal_start+0x193/0x6b0 [ 1229.193683] __ext4_journal_start_sb+0x325/0x5d0 [ 1229.193698] ? ext4_dirty_inode+0xa5/0x130 [ 1229.193717] ext4_dirty_inode+0xa5/0x130 [ 1229.193732] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1229.193747] __mark_inode_dirty+0x1b7/0x1470 [ 1229.193765] generic_update_time+0xcb/0xf0 [ 1229.193780] file_modified+0x1f0/0x230 [ 1229.193794] ext4_file_write_iter+0xca6/0x19f0 [ 1229.193814] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1229.193827] ? trace_kmalloc+0x1f/0xb0 [ 1229.193837] ? __kmalloc_noprof+0x274/0x680 [ 1229.193852] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1229.193884] iter_file_splice_write+0xa3a/0x11f0 [ 1229.193910] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1229.193943] ? lock_is_held_type+0x9e/0x120 [ 1229.193966] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1229.193984] direct_splice_actor+0x192/0x7b0 [ 1229.194003] splice_direct_to_actor+0x347/0x9d0 [ 1229.194020] ? __pfx_direct_splice_actor+0x10/0x10 [ 1229.194041] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1229.194059] ? lock_acquire+0x15e/0x2f0 [ 1229.194081] do_splice_direct+0x179/0x250 [ 1229.194097] ? __pfx_do_splice_direct+0x10/0x10 [ 1229.194114] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1229.194132] ? security_file_permission+0x22/0x90 [ 1229.194151] do_sendfile+0xa8e/0xdc0 [ 1229.194174] ? __pfx_do_sendfile+0x10/0x10 [ 1229.194192] ? __fget_files+0x20d/0x3b0 [ 1229.194217] __x64_sys_sendfile64+0x1d3/0x210 [ 1229.194232] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1229.194247] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1229.194269] do_syscall_64+0xbf/0x430 [ 1229.194283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.194295] RIP: 0033:0x7f7a32465b19 [ 1229.194305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1229.194317] RSP: 002b:00007f7a2f9db188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1229.194329] RAX: ffffffffffffffda RBX: 00007f7a32578f60 RCX: 00007f7a32465b19 [ 1229.194337] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1229.194344] RBP: 00007f7a2f9db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1229.194351] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 1229.194358] R13: 00007ffe0bebc99f R14: 00007f7a2f9db300 R15: 0000000000022000 [ 1229.194376] 23:11:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) memfd_secret(0x0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) ioctl$KDDISABIO(r0, 0x4b37) 23:11:59 executing program 2: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='fd\x00') fcntl$notify(r1, 0x402, 0x0) recvmsg$unix(r2, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000040)=""/174, 0xae}, {&(0x7f0000000100)=""/45, 0x2d}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/173, 0xad}, {&(0x7f0000000140)=""/5, 0x5}], 0x5, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) syz_open_procfs(r3, &(0x7f0000002340)='net/l2cap\x00') getdents(r2, &(0x7f00000001c0)=""/4096, 0x1000) 23:11:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x5000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1229.343459] No source specified [ 1229.345920] No source specified [ 1229.981949] serio: Serial port ptm1 23:12:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/4111, 0x100f) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000001080)={0x9, 0xff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000020c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000010c0)="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", 0x1000, r0}, 0x68) 23:12:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x6000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:12:10 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5413, 0x0) 23:12:10 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:12:10 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 24) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:12:10 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000040)) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) 23:12:10 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @broadcast}, 0x10) 23:12:10 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 7) 23:12:10 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) r1 = fspick(r0, &(0x7f0000000040)='./file0\x00', 0x1) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000080)={0x1, 0x8df3}) [ 1240.483711] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1240.490493] serio: Serial port ptm0 [ 1240.496461] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1240.504291] No source specified [ 1240.513310] No source specified [ 1240.515905] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1240.520127] FAULT_INJECTION: forcing a failure. [ 1240.520127] name failslab, interval 1, probability 0, space 0, times 0 [ 1240.521932] CPU: 0 UID: 0 PID: 9998 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1240.521969] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1240.521983] Call Trace: [ 1240.521990] [ 1240.521998] dump_stack_lvl+0xfa/0x120 [ 1240.522042] should_fail_ex+0x4d7/0x5e0 [ 1240.522068] ? jbd2__journal_start+0x193/0x6b0 [ 1240.522103] should_failslab+0xc2/0x120 [ 1240.522139] kmem_cache_alloc_noprof+0x80/0x690 [ 1240.522171] ? lock_is_held_type+0x9e/0x120 [ 1240.522210] ? jbd2__journal_start+0x193/0x6b0 [ 1240.522243] jbd2__journal_start+0x193/0x6b0 [ 1240.522282] __ext4_journal_start_sb+0x325/0x5d0 [ 1240.522309] ? ext4_iomap_begin+0x5b0/0xe80 [ 1240.522333] ? ext4_meta_trans_blocks+0x256/0x310 [ 1240.522363] ext4_iomap_begin+0x5b0/0xe80 [ 1240.522403] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1240.522431] ? iomap_iter_advance+0x177/0x1f0 [ 1240.522468] ? iomap_dio_bio_iter+0x8ac/0x1310 [ 1240.522495] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1240.522519] iomap_iter+0x55a/0x1020 [ 1240.522558] __iomap_dio_rw+0x6dd/0x1c90 [ 1240.522591] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1240.522634] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1240.522665] ? kasan_quarantine_put+0x84/0x1e0 [ 1240.522709] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1240.522743] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1240.522765] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1240.522803] iomap_dio_rw+0x40/0xa0 [ 1240.522827] ext4_file_write_iter+0xe0e/0x19f0 [ 1240.522866] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1240.522889] ? trace_kmalloc+0x1f/0xb0 [ 1240.522908] ? __kmalloc_noprof+0x274/0x680 [ 1240.522935] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1240.522975] iter_file_splice_write+0xa3a/0x11f0 [ 1240.523024] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1240.523083] ? lock_is_held_type+0x9e/0x120 [ 1240.523115] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1240.523149] direct_splice_actor+0x192/0x7b0 [ 1240.523184] splice_direct_to_actor+0x347/0x9d0 [ 1240.523216] ? __pfx_direct_splice_actor+0x10/0x10 [ 1240.523254] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1240.523287] ? lock_acquire+0x15e/0x2f0 [ 1240.523325] do_splice_direct+0x179/0x250 [ 1240.523354] ? __pfx_do_splice_direct+0x10/0x10 [ 1240.523385] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1240.523419] ? security_file_permission+0x22/0x90 [ 1240.523453] do_sendfile+0xa8e/0xdc0 [ 1240.523494] ? __pfx_do_sendfile+0x10/0x10 [ 1240.523527] ? __fget_files+0x20d/0x3b0 [ 1240.523575] __x64_sys_sendfile64+0x1d3/0x210 [ 1240.523603] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1240.523630] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1240.523670] do_syscall_64+0xbf/0x430 [ 1240.523694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.523716] RIP: 0033:0x7fb59c6b8b19 [ 1240.523734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1240.523756] RSP: 002b:00007fb599c2e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1240.523777] RAX: ffffffffffffffda RBX: 00007fb59c7cbf60 RCX: 00007fb59c6b8b19 [ 1240.523792] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1240.523805] RBP: 00007fb599c2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1240.523818] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1240.523832] R13: 00007fff3932da4f R14: 00007fb599c2e300 R15: 0000000000022000 [ 1240.523864] [ 1240.525355] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:12:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x7000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1240.620413] FAULT_INJECTION: forcing a failure. [ 1240.620413] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1240.622244] CPU: 0 UID: 0 PID: 10003 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1240.622275] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1240.622288] Call Trace: [ 1240.622296] [ 1240.622304] dump_stack_lvl+0xfa/0x120 [ 1240.622349] should_fail_ex+0x4d7/0x5e0 [ 1240.622376] should_fail_alloc_page+0xe0/0x110 [ 1240.622403] prepare_alloc_pages+0x1eb/0x550 [ 1240.622439] ? __pfx_perf_trace_lock+0x10/0x10 [ 1240.622477] alloc_pages_bulk_noprof+0x148/0xc30 [ 1240.622506] ? find_held_lock+0x2b/0x80 [ 1240.622535] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1240.622567] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1240.622601] ? trace_kmalloc+0x1f/0xb0 [ 1240.622620] ? __kmalloc_noprof+0x274/0x680 [ 1240.622645] ? __pfx_perf_trace_lock+0x10/0x10 [ 1240.622675] ? obj_cgroup_charge_account+0x11a/0x6e0 [ 1240.622707] ? copy_splice_read+0x15b/0xc00 [ 1240.622742] copy_splice_read+0x192/0xc00 [ 1240.622779] ? __pfx_copy_splice_read+0x10/0x10 [ 1240.622806] ? __memcg_slab_post_alloc_hook+0x4ac/0x9e0 [ 1240.622844] ? look_up_lock_class+0x56/0x150 [ 1240.622878] ? register_lock_class+0x41/0x560 [ 1240.622909] ? lockdep_init_map_type+0x4b/0x240 [ 1240.622944] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1240.622987] ? __pfx_copy_splice_read+0x10/0x10 [ 1240.623018] do_splice_read+0x1f8/0x2a0 [ 1240.623049] splice_direct_to_actor+0x2a8/0x9d0 [ 1240.623081] ? __pfx_direct_splice_actor+0x10/0x10 [ 1240.623119] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1240.623152] ? lock_acquire+0x15e/0x2f0 [ 1240.623188] do_splice_direct+0x179/0x250 [ 1240.623217] ? __pfx_do_splice_direct+0x10/0x10 [ 1240.623248] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1240.623282] ? security_file_permission+0x22/0x90 [ 1240.623315] do_sendfile+0xa8e/0xdc0 [ 1240.623355] ? __pfx_do_sendfile+0x10/0x10 [ 1240.623388] ? __fget_files+0x20d/0x3b0 [ 1240.623432] __x64_sys_sendfile64+0x1d3/0x210 [ 1240.623458] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1240.623485] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1240.623525] do_syscall_64+0xbf/0x430 [ 1240.623549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.623572] RIP: 0033:0x7f7a32465b19 [ 1240.623589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1240.623610] RSP: 002b:00007f7a2f9ba188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1240.623632] RAX: ffffffffffffffda RBX: 00007f7a32579020 RCX: 00007f7a32465b19 [ 1240.623647] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1240.623660] RBP: 00007f7a2f9ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1240.623673] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 1240.623686] R13: 00007ffe0bebc99f R14: 00007f7a2f9ba300 R15: 0000000000022000 [ 1240.623718] [ 1240.746949] No source specified [ 1240.751543] No source specified 23:12:11 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth1_vlan\x00', &(0x7f0000000100)=@ethtool_ts_info}) r2 = syz_mount_image$nfs(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x5, 0x5, &(0x7f0000000380)=[{&(0x7f0000000480)="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", 0x1000, 0xfffffffffffffffe}, {&(0x7f0000000280)="4be72cb23e28536f88eee2452881a61d85f8213eb22c6293bef664eafe61c031e45bd40fe94cd943", 0x28, 0x9}, {&(0x7f00000002c0)="041394ef64eb97375962f92e55c0d17adb09f01c348fb6c24f08cbae3e8f3e85997b5fa9e608428b5652b69b6962626b7fc6dff548992a9003e7c3dd194cff76d197a840a40b3018abb0031d6e20d3ead8f14a390e0bc6d6d4f433c05a1d76589601c6b2876f53f202435944b44c639e7e4a97dcf4597445a4caeda32b4c311f0429b5974bf2bb69f4f29662ef16531d07620907e509361b71307561ad8bda1221b06ffbee6f1beb647881", 0xab, 0xfff}, {&(0x7f0000001480)="0c2e9e6be77989dc1e6857fd970ef4a7150d87faa56c73898b8dd2185882b361d918e6ec64cf6be8d03d9ac01e7f250340fc0fdf2b1de0b1a5427163dbc666b34a2241a3a94dade433c8a50976a3fd754edf461e35c7953bf7caf60412bdb7837760a5888ec8ff19c5ecb49896588720906ce452d50e85592ac6262db2c1c06e0fe9ae479e0403d03c95b0c46225aefa41d3b9fb146ce0fe90c5bb6c19f071a9d3366da2e7985a9295951846eabe7085f6cb04496a86e6bd5ce5968c527620c543b944", 0xc3, 0x1}, {&(0x7f0000001580)="ca3918fab471ccfc20148606fdfedf82fe0bbf852fdbb4ef05f067307c76892ce6c7a1db8c5a822e91f2eee5cd247feab19475b09872ebe8bfcee9423b5e9db8c36606eff7533572b521d52c9dc73690be5610aac86fdbcad16196ac3f9db39cfb6cce950e329ad70653e16899b958386a1bd2fd15874d7c8880b02bef5dcbe675a0a8254c4fd7c112f4e593ce0d4264ab516a77ffac2146c7879f15663d77642844b5eab4e6da8dd07e01b56729c61926dce47d85395fb8bf54dac4f0ca81ab6c44b3abe2ff213b4c42069569eecf", 0xcf}], 0x1000000, &(0x7f0000000400)={[{}, {'!'}], [{@appraise_type}, {@uid_lt={'uid<', 0xee01}}]}) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000001680)=0x7719) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) fcntl$notify(r1, 0x402, 0x2571fc6deb7a34c0) dup(r0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x200d81, 0x82, 0x10}, 0x18) getdents(r4, &(0x7f0000002040)=""/4064, 0xfe0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000180)) 23:12:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x100, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f00000011c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) getdents64(r0, &(0x7f00000000c0)=""/75, 0x4b) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) getdents(r1, &(0x7f0000000040)=""/84, 0x54) 23:12:11 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x4000010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0x1ff, 0x0, 0x7}, 0x101) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@loopback, 0x3, r2}) ioctl$BLKFLSBUF(r5, 0x1261, &(0x7f0000000240)=0xb254) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x122, 0x400080, 0x23456}, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'geneve0\x00'}) r7 = signalfd(r4, &(0x7f0000000040)={[0x3]}, 0x8) signalfd(r7, &(0x7f0000000080)={[0x6]}, 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a00)={'erspan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xfffffffc}}, './file0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00'}) 23:12:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x8000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:12:11 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 8) [ 1240.916664] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1240.921520] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 23:12:11 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 25) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1240.988626] No source specified [ 1240.995266] No source specified 23:12:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x9000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1241.106487] FAULT_INJECTION: forcing a failure. [ 1241.106487] name failslab, interval 1, probability 0, space 0, times 0 [ 1241.108192] CPU: 0 UID: 0 PID: 10027 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1241.108225] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1241.108239] Call Trace: [ 1241.108247] [ 1241.108256] dump_stack_lvl+0xfa/0x120 [ 1241.108302] should_fail_ex+0x4d7/0x5e0 [ 1241.108330] should_failslab+0xc2/0x120 [ 1241.108357] __kmalloc_noprof+0xcd/0x680 [ 1241.108388] ? iter_file_splice_write+0x1cd/0x11f0 [ 1241.108430] iter_file_splice_write+0x1cd/0x11f0 [ 1241.108469] ? kfree+0x284/0x550 [ 1241.108495] ? read_iter_zero+0x120/0x310 [ 1241.108527] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1241.108563] ? __lock_acquire+0xc65/0x1b70 [ 1241.108622] ? lock_is_held_type+0x9e/0x120 [ 1241.108659] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1241.108696] direct_splice_actor+0x192/0x7b0 [ 1241.108733] splice_direct_to_actor+0x347/0x9d0 [ 1241.108768] ? __pfx_direct_splice_actor+0x10/0x10 [ 1241.108808] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1241.108844] ? lock_acquire+0x15e/0x2f0 [ 1241.108883] do_splice_direct+0x179/0x250 [ 1241.108915] ? __pfx_do_splice_direct+0x10/0x10 [ 1241.108948] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1241.108992] ? security_file_permission+0x22/0x90 [ 1241.109027] do_sendfile+0xa8e/0xdc0 [ 1241.109071] ? __pfx_do_sendfile+0x10/0x10 [ 1241.109107] ? __fget_files+0x20d/0x3b0 [ 1241.109155] __x64_sys_sendfile64+0x1d3/0x210 [ 1241.109184] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1241.109212] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1241.109256] do_syscall_64+0xbf/0x430 [ 1241.109281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.109306] RIP: 0033:0x7f7a32465b19 [ 1241.109324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1241.109348] RSP: 002b:00007f7a2f9ba188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1241.109371] RAX: ffffffffffffffda RBX: 00007f7a32579020 RCX: 00007f7a32465b19 [ 1241.109387] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1241.109401] RBP: 00007f7a2f9ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1241.109415] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 1241.109429] R13: 00007ffe0bebc99f R14: 00007f7a2f9ba300 R15: 0000000000022000 [ 1241.109463] 23:12:11 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1241.149206] FAULT_INJECTION: forcing a failure. [ 1241.149206] name failslab, interval 1, probability 0, space 0, times 0 [ 1241.150863] CPU: 0 UID: 0 PID: 10028 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1241.150895] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1241.150908] Call Trace: [ 1241.150916] [ 1241.150924] dump_stack_lvl+0xfa/0x120 [ 1241.150972] should_fail_ex+0x4d7/0x5e0 [ 1241.150997] ? jbd2__journal_start+0x193/0x6b0 [ 1241.151034] should_failslab+0xc2/0x120 [ 1241.151058] kmem_cache_alloc_noprof+0x80/0x690 [ 1241.151091] ? lock_is_held_type+0x9e/0x120 [ 1241.151132] ? jbd2__journal_start+0x193/0x6b0 [ 1241.151168] jbd2__journal_start+0x193/0x6b0 [ 1241.151210] __ext4_journal_start_sb+0x325/0x5d0 [ 1241.151240] ? ext4_iomap_begin+0x5b0/0xe80 [ 1241.151266] ? ext4_meta_trans_blocks+0x256/0x310 [ 1241.151298] ext4_iomap_begin+0x5b0/0xe80 [ 1241.151340] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1241.151370] ? iomap_iter_advance+0x177/0x1f0 [ 1241.151409] ? iomap_dio_bio_iter+0x8ac/0x1310 [ 1241.151438] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1241.151464] iomap_iter+0x55a/0x1020 [ 1241.151507] __iomap_dio_rw+0x6dd/0x1c90 [ 1241.151540] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1241.151586] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1241.151619] ? kasan_quarantine_put+0x84/0x1e0 [ 1241.151665] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1241.151703] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1241.151726] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1241.151767] iomap_dio_rw+0x40/0xa0 [ 1241.151793] ext4_file_write_iter+0xe0e/0x19f0 [ 1241.151833] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1241.151859] ? trace_kmalloc+0x1f/0xb0 [ 1241.151878] ? __kmalloc_noprof+0x274/0x680 [ 1241.151908] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1241.151950] iter_file_splice_write+0xa3a/0x11f0 [ 1241.152002] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1241.152065] ? lock_is_held_type+0x9e/0x120 [ 1241.152100] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1241.152137] direct_splice_actor+0x192/0x7b0 [ 1241.152174] splice_direct_to_actor+0x347/0x9d0 [ 1241.152209] ? __pfx_direct_splice_actor+0x10/0x10 [ 1241.152250] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1241.152286] ? lock_acquire+0x15e/0x2f0 [ 1241.152325] do_splice_direct+0x179/0x250 [ 1241.152357] ? __pfx_do_splice_direct+0x10/0x10 [ 1241.152391] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1241.152428] ? security_file_permission+0x22/0x90 [ 1241.152462] do_sendfile+0xa8e/0xdc0 [ 1241.152505] ? __pfx_do_sendfile+0x10/0x10 [ 1241.152541] ? __fget_files+0x20d/0x3b0 [ 1241.152588] __x64_sys_sendfile64+0x1d3/0x210 [ 1241.152616] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1241.152645] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1241.152688] do_syscall_64+0xbf/0x430 [ 1241.152714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.152737] RIP: 0033:0x7fb59c6b8b19 [ 1241.152754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1241.152777] RSP: 002b:00007fb599c2e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1241.152799] RAX: ffffffffffffffda RBX: 00007fb59c7cbf60 RCX: 00007fb59c6b8b19 [ 1241.152815] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1241.152829] RBP: 00007fb599c2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1241.152843] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1241.152857] R13: 00007fff3932da4f R14: 00007fb599c2e300 R15: 0000000000022000 [ 1241.152891] [ 1241.269808] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1241.289783] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1241.323499] serio: Serial port ptm1 [ 1241.337891] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1241.358452] No source specified [ 1241.370911] No source specified 23:12:12 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5414, 0x0) 23:12:12 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 9) 23:12:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x1b6f00, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) dup3(r0, r2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r5, 0x4b4b, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x3bfb713a}}, './file0/file0\x00'}) write$P9_RCREATE(r3, &(0x7f00000000c0)={0x18, 0x73, 0x1, {{0x8, 0x1}, 0x5}}, 0x18) 23:12:12 executing program 2: r0 = getpid() pidfd_open(r0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/mcfilter\x00') r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) process_madvise(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="71edf45b264b85d21662015558271feec3ee97f364680a2d7ec3f374206ec187463d526ca1b2688716a7882dbf978d382a66d8f2e6e54e8e8c8c90ba186d1173be187bc2c251b8a2e1c821d54a3e3c5b78fb5d3a5410f447eebb0e5dfe8ca9bf91b2a1f3c64e324fd0fe32da6ea8ce18a839a126ba49ec3594b9de3332d8fa212b4e8537474e5484fcf81277626809e99ffb9e6b24efc24fb676bd9c6ce570ad79", 0xa1}, {&(0x7f00000011c0)="e18a3ab2bbf3be09aed445706ff0f3969c8bf480ce584e1d9f3cac98153bf29e3ff815c6bb4f9222d241367a0d18031fd1101b7fd9aa8586f3242130b4f332855d527f130f8852c47efcbc8939b9b209aa3dddf2edc677203aefff2a26b0d7fcc6a5d49ede1ec3b849c166621ad1ee9768aa68b508735a7991a6b1def3b72894627f220d20c2512f8c1c2a", 0x8b}, {&(0x7f0000000000)="cff84413b734459264e5b7a3c928e658e6412e5ee30d856a2d70a4e85a642a9b68", 0x21}], 0x3, 0x14, 0x0) fcntl$notify(r1, 0x402, 0x2571fc6deb7a34c0) getdents(r1, &(0x7f00000001c0)=""/4096, 0x1000) 23:12:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xa000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:12:12 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r3, 0x4b4b, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000000)=0xa1ba) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) [ 1241.607176] serio: Serial port ptm0 23:12:12 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1241.664088] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1241.679684] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1241.699435] No source specified [ 1241.704113] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1241.706932] No source specified [ 1241.711885] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1242.433823] serio: Serial port ptm1 23:12:22 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5415, 0x0) 23:12:22 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 26) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:12:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xb000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:12:22 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:12:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000011c0)=""/4101, 0xac3) 23:12:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xe8041, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 23:12:22 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 10) 23:12:22 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) accept4$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r3, 0x1, 0x6}, 0x10) [ 1252.116801] FAULT_INJECTION: forcing a failure. [ 1252.116801] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.117860] CPU: 1 UID: 0 PID: 10079 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1252.117877] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1252.117886] Call Trace: [ 1252.117891] [ 1252.117895] dump_stack_lvl+0xfa/0x120 [ 1252.117927] should_fail_ex+0x4d7/0x5e0 [ 1252.117943] should_failslab+0xc2/0x120 [ 1252.117962] __kmalloc_cache_noprof+0x81/0x6b0 [ 1252.117977] ? do_splice_direct+0x179/0x250 [ 1252.117995] ? do_sendfile+0xa8e/0xdc0 [ 1252.118012] ? __x64_sys_sendfile64+0x1d3/0x210 [ 1252.118026] ? do_syscall_64+0xbf/0x430 [ 1252.118041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.118054] ? __iomap_dio_rw+0x271/0x1c90 [ 1252.118066] ? perf_trace_lock+0xb5/0x5d0 [ 1252.118089] ? __iomap_dio_rw+0x271/0x1c90 [ 1252.118099] __iomap_dio_rw+0x271/0x1c90 [ 1252.118113] ? __virt_addr_valid+0x1c6/0x5d0 [ 1252.118127] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1252.118148] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1252.118167] ? lock_release+0xc8/0x290 [ 1252.118186] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1252.118199] ? mark_held_locks+0x49/0x80 [ 1252.118218] ? kasan_quarantine_put+0x84/0x1e0 [ 1252.118241] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1252.118262] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1252.118274] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1252.118295] iomap_dio_rw+0x40/0xa0 [ 1252.118308] ext4_file_write_iter+0xe0e/0x19f0 [ 1252.118330] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1252.118342] ? trace_kmalloc+0x1f/0xb0 [ 1252.118353] ? __kmalloc_noprof+0x274/0x680 [ 1252.118367] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1252.118396] iter_file_splice_write+0xa3a/0x11f0 [ 1252.118423] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1252.118455] ? lock_is_held_type+0x9e/0x120 [ 1252.118474] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1252.118492] direct_splice_actor+0x192/0x7b0 [ 1252.118510] splice_direct_to_actor+0x347/0x9d0 [ 1252.118527] ? __pfx_direct_splice_actor+0x10/0x10 [ 1252.118548] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1252.118566] ? lock_acquire+0x15e/0x2f0 [ 1252.118585] do_splice_direct+0x179/0x250 [ 1252.118602] ? __pfx_do_splice_direct+0x10/0x10 [ 1252.118618] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1252.118637] ? security_file_permission+0x22/0x90 [ 1252.118656] do_sendfile+0xa8e/0xdc0 [ 1252.118678] ? __pfx_do_sendfile+0x10/0x10 [ 1252.118696] ? __fget_files+0x20d/0x3b0 [ 1252.118721] __x64_sys_sendfile64+0x1d3/0x210 [ 1252.118736] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1252.118750] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1252.118772] do_syscall_64+0xbf/0x430 [ 1252.118785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.118796] RIP: 0033:0x7f7a32465b19 [ 1252.118806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1252.118818] RSP: 002b:00007f7a2f9db188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1252.118831] RAX: ffffffffffffffda RBX: 00007f7a32578f60 RCX: 00007f7a32465b19 [ 1252.118839] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1252.118846] RBP: 00007f7a2f9db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1252.118854] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1252.118862] R13: 00007ffe0bebc99f R14: 00007f7a2f9db300 R15: 0000000000022000 [ 1252.118879] [ 1252.162837] No source specified 23:12:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) [ 1252.169501] No source specified [ 1252.193231] serio: Serial port ptm0 23:12:22 executing program 4: shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) fork() r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f00000011c0)) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) r2 = dup3(r1, r1, 0x80000) fsetxattr$security_selinux(r2, &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:hald_log_t:s0\x00', 0x20, 0x1) getdents(r1, &(0x7f0000000080)=""/163, 0xa3) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000040)) 23:12:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x10000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1252.226134] FAULT_INJECTION: forcing a failure. [ 1252.226134] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.228488] CPU: 0 UID: 0 PID: 10094 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1252.228521] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1252.228536] Call Trace: [ 1252.228543] [ 1252.228552] dump_stack_lvl+0xfa/0x120 [ 1252.228598] should_fail_ex+0x4d7/0x5e0 [ 1252.228627] ? ext4_mb_new_blocks+0x64e/0x4580 [ 1252.228654] should_failslab+0xc2/0x120 [ 1252.228683] kmem_cache_alloc_noprof+0x80/0x690 [ 1252.228713] ? ext4_dirty_inode+0xf1/0x130 [ 1252.228745] ? __mark_inode_dirty+0x254/0x1470 [ 1252.228778] ? ext4_mb_new_blocks+0x64e/0x4580 [ 1252.228802] ext4_mb_new_blocks+0x64e/0x4580 [ 1252.228839] ? perf_trace_lock+0xb5/0x5d0 [ 1252.228881] ? ext4_ind_map_blocks+0x263/0x2330 [ 1252.228917] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 1252.228944] ? __pfx_perf_trace_lock+0x10/0x10 [ 1252.228986] ? ext4_get_branch+0x588/0x740 [ 1252.229026] ext4_ind_map_blocks+0x1850/0x2330 [ 1252.229065] ? unwind_next_frame+0x3bc/0x2540 [ 1252.229098] ? __pfx_ext4_ind_map_blocks+0x10/0x10 [ 1252.229147] ? lock_acquire+0x15e/0x2f0 [ 1252.229180] ? ext4_map_blocks+0x564/0x1510 [ 1252.229217] ? down_write+0x119/0x1f0 [ 1252.229242] ? __pfx_down_write+0x10/0x10 [ 1252.229265] ? lock_release+0xc8/0x290 [ 1252.229305] ext4_map_blocks+0xaf1/0x1510 [ 1252.229335] ? kmem_cache_alloc_noprof+0x270/0x690 [ 1252.229367] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1252.229399] ? jbd2__journal_start+0xf6/0x6b0 [ 1252.229443] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1252.229470] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1252.229496] ? ext4_iomap_begin+0x5b0/0xe80 [ 1252.229522] ? ext4_meta_trans_blocks+0x256/0x310 [ 1252.229556] ext4_iomap_begin+0xa5e/0xe80 [ 1252.229599] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1252.229629] ? iomap_iter_advance+0x177/0x1f0 [ 1252.229668] ? iomap_dio_bio_iter+0x8ac/0x1310 [ 1252.229696] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1252.229722] iomap_iter+0x55a/0x1020 [ 1252.229765] __iomap_dio_rw+0x6dd/0x1c90 [ 1252.229800] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1252.229846] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1252.229880] ? kasan_quarantine_put+0x84/0x1e0 [ 1252.229926] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1252.229964] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1252.229987] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1252.230028] iomap_dio_rw+0x40/0xa0 [ 1252.230054] ext4_file_write_iter+0xe0e/0x19f0 [ 1252.230094] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1252.230120] ? trace_kmalloc+0x1f/0xb0 [ 1252.230140] ? __kmalloc_noprof+0x274/0x680 [ 1252.230165] ? find_held_lock+0x2b/0x80 [ 1252.230191] ? kasan_quarantine_put+0x186/0x1e0 [ 1252.230213] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1252.230256] iter_file_splice_write+0xa3a/0x11f0 [ 1252.230308] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1252.230372] ? lock_is_held_type+0x9e/0x120 [ 1252.230426] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1252.230463] direct_splice_actor+0x192/0x7b0 [ 1252.230501] splice_direct_to_actor+0x347/0x9d0 [ 1252.230536] ? __pfx_direct_splice_actor+0x10/0x10 [ 1252.230576] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1252.230612] ? lock_acquire+0x15e/0x2f0 [ 1252.230651] do_splice_direct+0x179/0x250 [ 1252.230683] ? __pfx_do_splice_direct+0x10/0x10 [ 1252.230717] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1252.230754] ? security_file_permission+0x22/0x90 [ 1252.230789] do_sendfile+0xa8e/0xdc0 [ 1252.230833] ? __pfx_do_sendfile+0x10/0x10 [ 1252.230869] ? __fget_files+0x20d/0x3b0 [ 1252.230918] __x64_sys_sendfile64+0x1d3/0x210 [ 1252.230946] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1252.230975] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1252.231019] do_syscall_64+0xbf/0x430 [ 1252.231045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.231069] RIP: 0033:0x7fb59c6b8b19 [ 1252.231087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1252.231111] RSP: 002b:00007fb599c2e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1252.231134] RAX: ffffffffffffffda RBX: 00007fb59c7cbf60 RCX: 00007fb59c6b8b19 [ 1252.231150] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1252.231164] RBP: 00007fb599c2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1252.231179] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1252.231193] R13: 00007fff3932da4f R14: 00007fb599c2e300 R15: 0000000000022000 [ 1252.231228] [ 1252.243579] No source specified [ 1252.279738] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 23:12:22 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 11) [ 1252.294256] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:12:22 executing program 2: r0 = getpid() pidfd_open(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000000)=0x200, 0x4) fcntl$notify(r1, 0x402, 0x2571fc6deb7a34c0) getdents(r1, &(0x7f00000001c0)=""/4096, 0x1000) name_to_handle_at(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0c00000051001e00000000"], &(0x7f00000000c0), 0x1400) [ 1252.351834] No source specified [ 1252.365757] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1252.371516] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:12:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x20000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1252.541589] No source specified [ 1252.544416] No source specified [ 1253.005129] serio: Serial port ptm1 23:12:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$setpipe(r0, 0x407, 0xfffffffffffffff7) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:12:33 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x3e, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) 23:12:33 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5416, 0x0) 23:12:33 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 12) 23:12:33 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:12:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x20100000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:12:33 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 27) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:12:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) fcntl$notify(r1, 0x402, 0x2571fc6d6b7a34fa) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:12:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) close_range(r0, r1, 0x0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) pipe2(&(0x7f0000000040), 0x0) [ 1263.456721] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1263.463565] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1263.466357] No source specified [ 1263.471405] No source specified [ 1263.495621] serio: Serial port ptm0 23:12:33 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x1, 0xfffffffb, 0x73, 0xff}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) 23:12:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x43160000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1263.586102] FAULT_INJECTION: forcing a failure. [ 1263.586102] name failslab, interval 1, probability 0, space 0, times 0 [ 1263.587882] CPU: 1 UID: 0 PID: 10147 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1263.587914] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1263.587928] Call Trace: [ 1263.587936] [ 1263.587945] dump_stack_lvl+0xfa/0x120 [ 1263.587999] should_fail_ex+0x4d7/0x5e0 [ 1263.588029] should_failslab+0xc2/0x120 [ 1263.588058] __kmalloc_cache_noprof+0x81/0x6b0 [ 1263.588087] ? __virt_addr_valid+0x1c6/0x5d0 [ 1263.588114] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1263.588153] ? __iomap_dio_rw+0x271/0x1c90 [ 1263.588177] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1263.588220] ? __iomap_dio_rw+0x271/0x1c90 [ 1263.588240] __iomap_dio_rw+0x271/0x1c90 [ 1263.588266] ? mark_held_locks+0x49/0x80 [ 1263.588304] ? kasan_quarantine_put+0x84/0x1e0 [ 1263.588332] ? kmem_cache_free+0x2a4/0x550 [ 1263.588366] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1263.588395] ? jbd2_journal_stop+0x184/0xe20 [ 1263.588449] ? ext4_dirty_inode+0xf1/0x130 [ 1263.588481] ? __mark_inode_dirty+0x254/0x1470 [ 1263.588518] iomap_dio_rw+0x40/0xa0 [ 1263.588544] ext4_file_write_iter+0x11eb/0x19f0 [ 1263.588586] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1263.588617] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1263.588659] iter_file_splice_write+0xa3a/0x11f0 [ 1263.588712] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1263.588777] ? lock_is_held_type+0x9e/0x120 [ 1263.588813] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1263.588849] direct_splice_actor+0x192/0x7b0 [ 1263.588886] splice_direct_to_actor+0x347/0x9d0 [ 1263.588921] ? __pfx_direct_splice_actor+0x10/0x10 [ 1263.588962] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1263.588998] ? lock_acquire+0x15e/0x2f0 [ 1263.589037] do_splice_direct+0x179/0x250 [ 1263.589069] ? __pfx_do_splice_direct+0x10/0x10 [ 1263.589103] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1263.589139] ? security_file_permission+0x22/0x90 [ 1263.589175] do_sendfile+0xa8e/0xdc0 [ 1263.589220] ? __pfx_do_sendfile+0x10/0x10 [ 1263.589255] ? __fget_files+0x20d/0x3b0 [ 1263.589304] __x64_sys_sendfile64+0x1d3/0x210 [ 1263.589332] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1263.589361] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1263.589405] do_syscall_64+0xbf/0x430 [ 1263.589436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.589460] RIP: 0033:0x7f7a32465b19 [ 1263.589479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1263.589502] RSP: 002b:00007f7a2f9ba188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1263.589525] RAX: ffffffffffffffda RBX: 00007f7a32579020 RCX: 00007f7a32465b19 [ 1263.589541] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1263.589554] RBP: 00007f7a2f9ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1263.589569] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1263.589583] R13: 00007ffe0bebc99f R14: 00007f7a2f9ba300 R15: 0000000000022000 [ 1263.589618] [ 1263.671306] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1263.688758] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1263.707201] No source specified [ 1263.708553] No source specified [ 1263.714172] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1263.738253] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1264.312577] serio: Serial port ptm1 23:12:45 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5418, 0x0) 23:12:45 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:12:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x8cffffff, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:12:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (fail_nth: 1) 23:12:45 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 28) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:12:45 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 13) 23:12:45 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@flushpolicy={0x2c, 0x1d, 0x20, 0x70bd26, 0x25dfdbff, "", [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x10000}, @srcaddr={0x14, 0xd, @in=@private=0xa010100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48884}, 0x805) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f00000001c0)='.pending_reads\x00', 0x220, 0x68) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) accept4$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd4, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x74, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0x68, 0x4, "a98d9f25c123ba68b918e0b63b43fc24b75444dea62c221ffc30f689a585a56d866dbd4ba0dbbdf728e7a3b0aa1042fa9057fa80b6ebcf2190bca5b905a7483fbd130780b3d25b610ed2b1378e93cc494be830444d27eaf3042a804b2efa0abc647a3d2a"}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8040}, 0x24004884) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x4471}, 0x8) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) [ 1275.390824] No source specified [ 1275.399936] No source specified [ 1275.404719] FAULT_INJECTION: forcing a failure. [ 1275.404719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1275.406504] serio: Serial port ptm1 [ 1275.407273] CPU: 0 UID: 0 PID: 10171 Comm: syz-executor.4 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1275.407304] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1275.407318] Call Trace: [ 1275.407325] [ 1275.407334] dump_stack_lvl+0xfa/0x120 [ 1275.407377] should_fail_ex+0x4d7/0x5e0 [ 1275.407404] _copy_to_user+0x32/0xd0 [ 1275.407429] simple_read_from_buffer+0xe0/0x180 [ 1275.407465] proc_fail_nth_read+0x18a/0x240 [ 1275.407492] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1275.407517] ? security_file_permission+0x22/0x90 [ 1275.407546] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1275.407571] vfs_read+0x1eb/0xc70 [ 1275.407597] ? __pfx_vfs_read+0x10/0x10 [ 1275.407619] ? lock_release+0xc8/0x290 [ 1275.407656] ? __fget_files+0x20d/0x3b0 [ 1275.407702] ksys_read+0x121/0x240 [ 1275.407721] ? __pfx_ksys_read+0x10/0x10 [ 1275.407742] ? fput+0x92/0xd0 [ 1275.407773] do_syscall_64+0xbf/0x430 [ 1275.407798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.407821] RIP: 0033:0x7f7fd338369c [ 1275.407838] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1275.407859] RSP: 002b:00007f7fd0946170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1275.407880] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7fd338369c [ 1275.407895] RDX: 000000000000000f RSI: 00007f7fd09461e0 RDI: 0000000000000004 [ 1275.407908] RBP: 00007f7fd09461d0 R08: 0000000000000000 R09: 0000000000000000 [ 1275.407921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1275.407940] R13: 00007ffe8743dc9f R14: 00007f7fd0946300 R15: 0000000000022000 [ 1275.407980] 23:12:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xc0ed0000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:12:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1275.614655] No source specified [ 1275.633351] No source specified 23:12:46 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 14) 23:12:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xf6ffffff, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:12:46 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 29) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:12:46 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1275.804334] No source specified [ 1275.808712] No source specified [ 1275.816291] FAULT_INJECTION: forcing a failure. [ 1275.816291] name failslab, interval 1, probability 0, space 0, times 0 [ 1275.817894] CPU: 1 UID: 0 PID: 10188 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1275.817917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1275.817928] Call Trace: [ 1275.817934] [ 1275.817941] dump_stack_lvl+0xfa/0x120 [ 1275.817981] should_fail_ex+0x4d7/0x5e0 [ 1275.818008] should_failslab+0xc2/0x120 [ 1275.818027] __kmalloc_noprof+0xcd/0x680 [ 1275.818049] ? __is_insn_slot_addr+0x140/0x290 [ 1275.818074] ? ext4_find_extent+0x7f5/0xa00 [ 1275.818103] ext4_find_extent+0x7f5/0xa00 [ 1275.818132] ext4_ext_map_blocks+0x1cc/0x5f30 [ 1275.818161] ? perf_trace_lock+0xb5/0x5d0 [ 1275.818192] ? __pfx_perf_trace_lock+0x10/0x10 [ 1275.818215] ? unwind_next_frame+0xb9/0x2540 [ 1275.818236] ? lock_acquire+0x15e/0x2f0 [ 1275.818260] ? unwind_next_frame+0xb9/0x2540 [ 1275.818276] ? find_held_lock+0x2b/0x80 [ 1275.818295] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1275.818319] ? lock_release+0xc8/0x290 [ 1275.818346] ? unwind_next_frame+0x3bc/0x2540 [ 1275.818361] ? do_syscall_64+0xbf/0x430 [ 1275.818379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.818402] ? __lock_acquire+0xc65/0x1b70 [ 1275.818437] ? lock_acquire+0x15e/0x2f0 [ 1275.818460] ? ext4_map_blocks+0x4a8/0x1510 [ 1275.818482] ext4_map_query_blocks+0x110/0x900 [ 1275.818511] ? __pfx_ext4_map_query_blocks+0x10/0x10 [ 1275.818535] ? do_raw_read_unlock+0x44/0xe0 [ 1275.818552] ? __pfx_down_read+0x10/0x10 [ 1275.818569] ? ext4_es_lookup_extent+0xcd/0xbb0 [ 1275.818593] ext4_map_blocks+0x4bc/0x1510 [ 1275.818614] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1275.818630] ? kmem_cache_alloc_noprof+0x270/0x690 [ 1275.818653] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1275.818676] ? jbd2__journal_start+0xf6/0x6b0 [ 1275.818707] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1275.818727] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1275.818745] ? ext4_iomap_begin+0x5b0/0xe80 [ 1275.818763] ? ext4_meta_trans_blocks+0x256/0x310 [ 1275.818787] ext4_iomap_begin+0xa5e/0xe80 [ 1275.818806] ? __pfx_perf_trace_lock+0x10/0x10 [ 1275.818842] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1275.818862] ? mark_held_locks+0x49/0x80 [ 1275.818889] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1275.818922] ? __create_object+0x59/0x80 [ 1275.818948] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1275.818967] iomap_iter+0x55a/0x1020 [ 1275.818999] __iomap_dio_rw+0x6dd/0x1c90 [ 1275.819025] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1275.819059] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1275.819083] ? kasan_quarantine_put+0x84/0x1e0 [ 1275.819118] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1275.819145] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1275.819162] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1275.819192] iomap_dio_rw+0x40/0xa0 [ 1275.819212] ext4_file_write_iter+0xe0e/0x19f0 [ 1275.819242] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1275.819260] ? trace_kmalloc+0x1f/0xb0 [ 1275.819274] ? __kmalloc_noprof+0x274/0x680 [ 1275.819296] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1275.819327] iter_file_splice_write+0xa3a/0x11f0 [ 1275.819366] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1275.819413] ? lock_is_held_type+0x9e/0x120 [ 1275.819438] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1275.819465] direct_splice_actor+0x192/0x7b0 [ 1275.819492] splice_direct_to_actor+0x347/0x9d0 [ 1275.819518] ? __pfx_direct_splice_actor+0x10/0x10 [ 1275.819547] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1275.819574] ? lock_acquire+0x15e/0x2f0 [ 1275.819602] do_splice_direct+0x179/0x250 [ 1275.819625] ? __pfx_do_splice_direct+0x10/0x10 [ 1275.819649] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1275.819676] ? security_file_permission+0x22/0x90 [ 1275.819703] do_sendfile+0xa8e/0xdc0 [ 1275.819735] ? __pfx_do_sendfile+0x10/0x10 [ 1275.819761] ? __fget_files+0x20d/0x3b0 [ 1275.819797] __x64_sys_sendfile64+0x1d3/0x210 [ 1275.819818] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1275.819839] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1275.819871] do_syscall_64+0xbf/0x430 [ 1275.819890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.819906] RIP: 0033:0x7f7a32465b19 [ 1275.819920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1275.819937] RSP: 002b:00007f7a2f9db188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1275.819954] RAX: ffffffffffffffda RBX: 00007f7a32578f60 RCX: 00007f7a32465b19 [ 1275.819966] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1275.819977] RBP: 00007f7a2f9db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1275.819987] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1275.819998] R13: 00007ffe0bebc99f R14: 00007f7a2f9db300 R15: 0000000000022000 [ 1275.820024] 23:12:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x2, 0x0) 23:12:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xf9fdffff, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:12:46 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) accept4$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14, 0x80800) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) [ 1275.971943] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1275.976859] No source specified [ 1275.980137] No source specified [ 1275.991713] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1276.001244] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1276.020630] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1276.225934] serio: Serial port ptm0 23:12:57 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 30) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:12:57 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x541b, 0x0) 23:12:57 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 15) 23:12:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xffffe000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:12:57 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) getsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000040), &(0x7f0000000080)=0x10) 23:12:57 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x121240, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:12:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x4b47, 0x0) 23:12:57 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000011c0)={0x0, 0x4, 0x9}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000015c0)={r1, 0x400, 0x3d}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) openat2(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x482801, 0x8}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/button', 0x2000, 0x0) fcntl$notify(r2, 0x402, 0x2571fc6deb7a34c0) getdents(r2, &(0x7f00000001c0)=""/4096, 0x1000) [ 1286.896901] serio: Serial port ptm0 [ 1286.901872] FAULT_INJECTION: forcing a failure. [ 1286.901872] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.902943] CPU: 0 UID: 0 PID: 10223 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1286.902964] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1286.902972] Call Trace: [ 1286.902977] [ 1286.902982] dump_stack_lvl+0xfa/0x120 [ 1286.903016] should_fail_ex+0x4d7/0x5e0 [ 1286.903032] ? jbd2__journal_start+0x193/0x6b0 [ 1286.903052] should_failslab+0xc2/0x120 [ 1286.903068] kmem_cache_alloc_noprof+0x80/0x690 [ 1286.903086] ? lock_is_held_type+0x9e/0x120 [ 1286.903110] ? jbd2__journal_start+0x193/0x6b0 [ 1286.903128] jbd2__journal_start+0x193/0x6b0 [ 1286.903158] __ext4_journal_start_sb+0x325/0x5d0 [ 1286.903175] ? ext4_iomap_begin+0x5b0/0xe80 [ 1286.903191] ? ext4_meta_trans_blocks+0x256/0x310 [ 1286.903208] ext4_iomap_begin+0x5b0/0xe80 [ 1286.903230] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1286.903245] ? iomap_iter_advance+0x177/0x1f0 [ 1286.903266] ? iomap_dio_bio_iter+0x8ac/0x1310 [ 1286.903281] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1286.903295] iomap_iter+0x55a/0x1020 [ 1286.903317] __iomap_dio_rw+0x6dd/0x1c90 [ 1286.903335] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1286.903360] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1286.903377] ? kasan_quarantine_put+0x84/0x1e0 [ 1286.903402] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1286.903421] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1286.903433] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1286.903454] iomap_dio_rw+0x40/0xa0 [ 1286.903468] ext4_file_write_iter+0xe0e/0x19f0 [ 1286.903490] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1286.903503] ? trace_kmalloc+0x1f/0xb0 [ 1286.903513] ? __kmalloc_noprof+0x274/0x680 [ 1286.903529] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1286.903552] iter_file_splice_write+0xa3a/0x11f0 [ 1286.903579] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1286.903612] ? lock_is_held_type+0x9e/0x120 [ 1286.903630] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1286.903648] direct_splice_actor+0x192/0x7b0 [ 1286.903667] splice_direct_to_actor+0x347/0x9d0 [ 1286.903685] ? __pfx_direct_splice_actor+0x10/0x10 [ 1286.903706] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1286.903724] ? lock_acquire+0x15e/0x2f0 [ 1286.903746] do_splice_direct+0x179/0x250 [ 1286.903763] ? __pfx_do_splice_direct+0x10/0x10 [ 1286.903780] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1286.903798] ? security_file_permission+0x22/0x90 [ 1286.903817] do_sendfile+0xa8e/0xdc0 [ 1286.903841] ? __pfx_do_sendfile+0x10/0x10 [ 1286.903859] ? __fget_files+0x20d/0x3b0 [ 1286.903884] __x64_sys_sendfile64+0x1d3/0x210 [ 1286.903899] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1286.903914] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1286.903936] do_syscall_64+0xbf/0x430 [ 1286.903950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.903963] RIP: 0033:0x7fb59c6b8b19 [ 1286.903973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1286.903986] RSP: 002b:00007fb599c2e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1286.903997] RAX: ffffffffffffffda RBX: 00007fb59c7cbf60 RCX: 00007fb59c6b8b19 [ 1286.904006] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1286.904013] RBP: 00007fb599c2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1286.904021] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1286.904028] R13: 00007fff3932da4f R14: 00007fb599c2e300 R15: 0000000000022000 [ 1286.904046] 23:12:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x4b49, 0x0) [ 1286.953402] No source specified [ 1286.971086] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1286.974915] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1286.977265] No source specified [ 1286.996780] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1287.000408] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:12:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffdf9, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:12:57 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @local}, 0x10) 23:12:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5409, 0x0) 23:12:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) r1 = dup(r0) ioctl$FIONCLEX(r1, 0x5450) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r4) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v3={0x3000000, [{0x4, 0x2a7}, {0x1f, 0xd7}], r4}, 0x18, 0x3) write$binfmt_elf64(r0, &(0x7f00000011c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xd5, 0x2, 0x2, 0x7ff, 0x3, 0x3, 0x5, 0x5, 0x40, 0x285, 0xd9, 0x80, 0x38, 0x1, 0x8, 0xd3, 0x4dda}, [{0x6474e551, 0xfffff1c2, 0xc2e, 0x0, 0xffffffffffffff81, 0x5, 0xd3, 0x3}], "262f5339f2aa4b31d05490aca4a274b53d5e28caf016248d2ec9b2c9fea656c8ed7a7fd9a6bf21f8a804a73631c1e14ea3f0b67bfcc193123c2ca9f69d4933f3c31b87df5cafd8daf2d43ede81ebb63811201a45a037caf4d3acce38f755ee659a8675f3c6a10646f9577f72a0a46621b152c8c082c3e72d8c6edb91a239b88bab11d625be1638dbb60825cab4cadc68c8df00de7269f1da91eb649028cb14ad3b9a25dadb41a7ae49aef7fe752ebad50e768c55657ff3d21366c240a6a41686e02be4ba1d6c32148c62eb781caa614ee0a38978", ['\x00']}, 0x24c) [ 1287.126575] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1287.131218] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1287.135032] No source specified [ 1287.137179] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1287.140747] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1287.144206] No source specified 23:12:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x540b, 0x0) 23:12:57 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth0_virt_wifi\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) 23:12:57 executing program 2: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/rpc\x00') fcntl$notify(r1, 0x402, 0x2571fc6deb7a34c0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f00000011c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff8001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fff}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x440c1) getdents(r1, &(0x7f00000001c0)=""/4096, 0x1000) [ 1287.726257] serio: Serial port ptm1 23:13:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xffffff8c, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:13:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x540c, 0x0) 23:13:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000001080)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) close_range(r1, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000001040)='net/vlan/vlan0\x00') getdents(r0, &(0x7f0000000040)=""/4090, 0xffa) 23:13:07 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 16) 23:13:07 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x541d, 0x0) 23:13:07 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r3 = accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000a004e2000000007fc010000000000000000000000000001008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000020000000a004e200000000900000000000000000000ffffac1414aa02000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400000007fc02000000000000000000000000000100e0ff00"/400], 0x190) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x22, r4}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) 23:13:07 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x121240, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:13:07 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 31) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1297.429782] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1297.458497] No source specified [ 1297.463333] serio: Serial port ptm0 [ 1297.473434] No source specified 23:13:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x540d, 0x0) 23:13:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffff6, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1297.588652] FAULT_INJECTION: forcing a failure. [ 1297.588652] name failslab, interval 1, probability 0, space 0, times 0 [ 1297.590687] CPU: 1 UID: 0 PID: 10294 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1297.590718] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1297.590733] Call Trace: [ 1297.590741] [ 1297.590750] dump_stack_lvl+0xfa/0x120 [ 1297.590796] should_fail_ex+0x4d7/0x5e0 [ 1297.590825] should_failslab+0xc2/0x120 [ 1297.590850] __kmalloc_noprof+0xcd/0x680 [ 1297.590881] ? ext4_find_extent+0x7f5/0xa00 [ 1297.590918] ext4_find_extent+0x7f5/0xa00 [ 1297.590964] ext4_ext_map_blocks+0x1cc/0x5f30 [ 1297.591004] ? lock_release+0xc8/0x290 [ 1297.591042] ? unwind_next_frame+0x3bc/0x2540 [ 1297.591064] ? do_syscall_64+0xbf/0x430 [ 1297.591088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.591112] ? kernel_text_address+0x11/0xc0 [ 1297.591150] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1297.591190] ? __pfx_perf_trace_lock+0x10/0x10 [ 1297.591228] ? lock_acquire+0x15e/0x2f0 [ 1297.591259] ? ext4_map_blocks+0x564/0x1510 [ 1297.591296] ? down_write+0x119/0x1f0 [ 1297.591319] ? __pfx_down_write+0x10/0x10 [ 1297.591352] ext4_map_blocks+0x62d/0x1510 [ 1297.591391] ? kmem_cache_alloc_noprof+0x270/0x690 [ 1297.591421] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1297.591452] ? jbd2__journal_start+0xf6/0x6b0 [ 1297.591493] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1297.591519] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1297.591544] ? ext4_iomap_begin+0x5b0/0xe80 [ 1297.591568] ? ext4_meta_trans_blocks+0x256/0x310 [ 1297.591599] ext4_iomap_begin+0xa5e/0xe80 [ 1297.591640] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1297.591667] ? mark_held_locks+0x49/0x80 [ 1297.591702] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1297.591733] ? __create_object+0x59/0x80 [ 1297.591767] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1297.591791] iomap_iter+0x55a/0x1020 [ 1297.591834] __iomap_dio_rw+0x6dd/0x1c90 [ 1297.591876] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1297.591936] ? ext4_dirty_inode+0xf1/0x130 [ 1297.591965] ? __mark_inode_dirty+0x254/0x1470 [ 1297.592002] iomap_dio_rw+0x40/0xa0 [ 1297.592028] ext4_file_write_iter+0x11eb/0x19f0 [ 1297.592067] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1297.592097] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1297.592136] iter_file_splice_write+0xa3a/0x11f0 [ 1297.592187] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1297.592248] ? lock_is_held_type+0x9e/0x120 [ 1297.592282] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1297.592316] direct_splice_actor+0x192/0x7b0 [ 1297.592352] splice_direct_to_actor+0x347/0x9d0 [ 1297.592385] ? __pfx_direct_splice_actor+0x10/0x10 [ 1297.592424] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1297.592459] ? lock_acquire+0x15e/0x2f0 [ 1297.592496] do_splice_direct+0x179/0x250 [ 1297.592527] ? __pfx_do_splice_direct+0x10/0x10 [ 1297.592559] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1297.592594] ? security_file_permission+0x22/0x90 [ 1297.592628] do_sendfile+0xa8e/0xdc0 [ 1297.592671] ? __pfx_do_sendfile+0x10/0x10 [ 1297.592705] ? __fget_files+0x20d/0x3b0 [ 1297.592751] __x64_sys_sendfile64+0x1d3/0x210 [ 1297.592779] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1297.592806] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1297.592848] do_syscall_64+0xbf/0x430 [ 1297.592873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.592895] RIP: 0033:0x7f7a32465b19 [ 1297.592913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1297.592935] RSP: 002b:00007f7a2f9ba188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1297.592958] RAX: ffffffffffffffda RBX: 00007f7a32579020 RCX: 00007f7a32465b19 [ 1297.592974] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1297.592988] RBP: 00007f7a2f9ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1297.593002] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1297.593016] R13: 00007ffe0bebc99f R14: 00007f7a2f9ba300 R15: 0000000000022000 [ 1297.593050] [ 1297.624488] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:13:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5412, 0x0) 23:13:08 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) fcntl$notify(r0, 0x402, 0x80000000) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x46) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x158) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) getdents(r2, &(0x7f0000000100)=""/57, 0x39) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) [ 1297.692323] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1297.743120] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1297.752595] No source specified [ 1297.761708] No source specified 23:13:08 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) fcntl$setsig(r1, 0xa, 0x2a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r3, 0x1, 0x6, @multicast}, 0x10) 23:13:08 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 17) 23:13:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xedc000000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:13:08 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 32) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:13:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5413, 0x0) [ 1297.896126] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1297.899653] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:13:08 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) [ 1297.918487] No source specified [ 1297.919721] No source specified [ 1297.932478] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1297.937563] FAULT_INJECTION: forcing a failure. [ 1297.937563] name failslab, interval 1, probability 0, space 0, times 0 [ 1297.938531] CPU: 0 UID: 0 PID: 10322 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1297.938548] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1297.938556] Call Trace: [ 1297.938560] [ 1297.938565] dump_stack_lvl+0xfa/0x120 [ 1297.938592] should_fail_ex+0x4d7/0x5e0 [ 1297.938607] ? ext4_mb_new_blocks+0x64e/0x4580 [ 1297.938621] should_failslab+0xc2/0x120 [ 1297.938636] kmem_cache_alloc_noprof+0x80/0x690 [ 1297.938653] ? ext4_dirty_inode+0xf1/0x130 [ 1297.938670] ? __mark_inode_dirty+0x254/0x1470 [ 1297.938687] ? ext4_mb_new_blocks+0x64e/0x4580 [ 1297.938699] ext4_mb_new_blocks+0x64e/0x4580 [ 1297.938719] ? perf_trace_lock+0xb5/0x5d0 23:13:08 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x121240, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1297.938740] ? ext4_ind_map_blocks+0x263/0x2330 [ 1297.938758] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 1297.938772] ? __pfx_perf_trace_lock+0x10/0x10 [ 1297.938789] ? ext4_get_branch+0x588/0x740 [ 1297.938812] ext4_ind_map_blocks+0x1850/0x2330 [ 1297.938834] ? unwind_next_frame+0x3bc/0x2540 [ 1297.938852] ? __pfx_ext4_ind_map_blocks+0x10/0x10 [ 1297.938877] ? lock_acquire+0x15e/0x2f0 [ 1297.938894] ? ext4_map_blocks+0x564/0x1510 [ 1297.938913] ? down_write+0x119/0x1f0 [ 1297.938926] ? __pfx_down_write+0x10/0x10 [ 1297.938938] ? lock_release+0xc8/0x290 [ 1297.938963] ext4_map_blocks+0xaf1/0x1510 [ 1297.938978] ? kmem_cache_alloc_noprof+0x270/0x690 [ 1297.938994] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1297.939011] ? jbd2__journal_start+0xf6/0x6b0 [ 1297.939033] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1297.939047] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1297.939061] ? ext4_iomap_begin+0x5b0/0xe80 [ 1297.939073] ? ext4_meta_trans_blocks+0x256/0x310 [ 1297.939090] ext4_iomap_begin+0xa5e/0xe80 [ 1297.939112] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1297.939127] ? iomap_iter_advance+0x177/0x1f0 [ 1297.939147] ? iomap_dio_bio_iter+0x8ac/0x1310 [ 1297.939162] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1297.939175] iomap_iter+0x55a/0x1020 [ 1297.939197] __iomap_dio_rw+0x6dd/0x1c90 [ 1297.939215] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1297.939239] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1297.939256] ? kasan_quarantine_put+0x84/0x1e0 [ 1297.939281] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1297.939299] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1297.939311] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1297.939332] iomap_dio_rw+0x40/0xa0 [ 1297.939345] ext4_file_write_iter+0xe0e/0x19f0 [ 1297.939366] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1297.939388] ? trace_kmalloc+0x1f/0xb0 [ 1297.939398] ? __kmalloc_noprof+0x274/0x680 [ 1297.939412] ? __pfx_perf_trace_lock+0x10/0x10 [ 1297.939429] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1297.939450] iter_file_splice_write+0xa3a/0x11f0 [ 1297.939477] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1297.939510] ? lock_is_held_type+0x9e/0x120 [ 1297.939528] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1297.939547] direct_splice_actor+0x192/0x7b0 [ 1297.939566] splice_direct_to_actor+0x347/0x9d0 [ 1297.939584] ? __pfx_direct_splice_actor+0x10/0x10 [ 1297.939604] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1297.939623] ? lock_acquire+0x15e/0x2f0 [ 1297.939642] do_splice_direct+0x179/0x250 [ 1297.939659] ? __pfx_do_splice_direct+0x10/0x10 [ 1297.939676] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1297.939694] ? security_file_permission+0x22/0x90 [ 1297.939713] do_sendfile+0xa8e/0xdc0 [ 1297.939736] ? __pfx_do_sendfile+0x10/0x10 [ 1297.939754] ? __fget_files+0x20d/0x3b0 [ 1297.939779] __x64_sys_sendfile64+0x1d3/0x210 [ 1297.939793] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1297.939808] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1297.939830] do_syscall_64+0xbf/0x430 [ 1297.939844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.939857] RIP: 0033:0x7fb59c6b8b19 [ 1297.939867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1297.939879] RSP: 002b:00007fb599c2e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 23:13:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x8000000000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1297.939892] RAX: ffffffffffffffda RBX: 00007fb59c7cbf60 RCX: 00007fb59c6b8b19 [ 1297.939900] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1297.939907] RBP: 00007fb599c2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1297.939915] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1297.939922] R13: 00007fff3932da4f R14: 00007fb599c2e300 R15: 0000000000022000 [ 1297.939940] [ 1297.942556] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1298.078419] No source specified [ 1298.087914] No source specified 23:13:17 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 18) 23:13:17 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x541e, 0x0) 23:13:17 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:13:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xe0ffff00000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:13:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)=0x40000) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x42a00, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000000c0)) close_range(r0, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r2, 0x4b4b, 0x0) ppoll(&(0x7f0000000100)=[{r1, 0x8105}, {r0, 0x8026}, {r2, 0x10}], 0x3, &(0x7f0000000140), &(0x7f0000000180)={[0x40]}, 0x8) 23:13:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5414, 0x0) 23:13:17 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) bind$packet(r0, &(0x7f0000000000)={0x11, 0x16, r2, 0x1, 0x3b, 0x6, @local}, 0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) 23:13:17 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 33) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1306.732855] No source specified [ 1306.738049] No source specified [ 1306.781564] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1306.785380] serio: Serial port ptm0 23:13:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x100000000000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:13:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5415, 0x0) [ 1306.800419] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1306.810799] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1306.817756] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1306.861602] FAULT_INJECTION: forcing a failure. [ 1306.861602] name failslab, interval 1, probability 0, space 0, times 0 [ 1306.862698] CPU: 0 UID: 0 PID: 10359 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1306.862737] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1306.862757] Call Trace: [ 1306.862765] [ 1306.862771] dump_stack_lvl+0xfa/0x120 [ 1306.862802] should_fail_ex+0x4d7/0x5e0 [ 1306.862819] should_failslab+0xc2/0x120 [ 1306.862834] __kmalloc_noprof+0xcd/0x680 [ 1306.862851] ? __is_insn_slot_addr+0x140/0x290 [ 1306.862869] ? ext4_find_extent+0x7f5/0xa00 [ 1306.862891] ext4_find_extent+0x7f5/0xa00 [ 1306.862912] ext4_ext_map_blocks+0x1cc/0x5f30 [ 1306.862934] ? perf_trace_lock+0xb5/0x5d0 [ 1306.862962] ? __pfx_perf_trace_lock+0x10/0x10 [ 1306.862978] ? unwind_next_frame+0xb9/0x2540 [ 1306.862995] ? lock_acquire+0x15e/0x2f0 [ 1306.863012] ? unwind_next_frame+0xb9/0x2540 [ 1306.863023] ? find_held_lock+0x2b/0x80 [ 1306.863037] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1306.863054] ? lock_release+0xc8/0x290 [ 1306.863074] ? unwind_next_frame+0x3bc/0x2540 [ 1306.863084] ? do_syscall_64+0xbf/0x430 [ 1306.863098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1306.863115] ? __lock_acquire+0xc65/0x1b70 [ 1306.863140] ? lock_acquire+0x15e/0x2f0 [ 1306.863156] ? ext4_map_blocks+0x4a8/0x1510 [ 1306.863173] ext4_map_query_blocks+0x110/0x900 [ 1306.863194] ? __pfx_ext4_map_query_blocks+0x10/0x10 [ 1306.863211] ? do_raw_read_unlock+0x44/0xe0 [ 1306.863223] ? __pfx_down_read+0x10/0x10 [ 1306.863237] ? ext4_es_lookup_extent+0xcd/0xbb0 [ 1306.863254] ext4_map_blocks+0x4bc/0x1510 [ 1306.863269] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1306.863281] ? kmem_cache_alloc_noprof+0x270/0x690 [ 1306.863297] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1306.863314] ? jbd2__journal_start+0xf6/0x6b0 [ 1306.863337] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1306.863352] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1306.863365] ? ext4_iomap_begin+0x5b0/0xe80 [ 1306.863378] ? ext4_meta_trans_blocks+0x256/0x310 [ 1306.863395] ext4_iomap_begin+0xa5e/0xe80 [ 1306.863408] ? __pfx_perf_trace_lock+0x10/0x10 [ 1306.863434] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1306.863448] ? mark_held_locks+0x49/0x80 [ 1306.863467] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1306.863485] ? __create_object+0x59/0x80 [ 1306.863504] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1306.863518] iomap_iter+0x55a/0x1020 [ 1306.863542] __iomap_dio_rw+0x6dd/0x1c90 [ 1306.863560] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1306.863596] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1306.863614] ? kasan_quarantine_put+0x84/0x1e0 [ 1306.863639] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1306.863658] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1306.863670] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1306.863692] iomap_dio_rw+0x40/0xa0 [ 1306.863707] ext4_file_write_iter+0xe0e/0x19f0 [ 1306.863728] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1306.863741] ? trace_kmalloc+0x1f/0xb0 [ 1306.863751] ? __kmalloc_noprof+0x274/0x680 [ 1306.863767] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1306.863790] iter_file_splice_write+0xa3a/0x11f0 [ 1306.863817] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1306.863851] ? lock_is_held_type+0x9e/0x120 [ 1306.863870] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1306.863888] direct_splice_actor+0x192/0x7b0 [ 1306.863908] splice_direct_to_actor+0x347/0x9d0 [ 1306.863926] ? __pfx_direct_splice_actor+0x10/0x10 [ 1306.863947] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1306.863966] ? lock_acquire+0x15e/0x2f0 [ 1306.863986] do_splice_direct+0x179/0x250 [ 1306.864003] ? __pfx_do_splice_direct+0x10/0x10 [ 1306.864021] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1306.864040] ? security_file_permission+0x22/0x90 [ 1306.864060] do_sendfile+0xa8e/0xdc0 [ 1306.864084] ? __pfx_do_sendfile+0x10/0x10 [ 1306.864102] ? __fget_files+0x20d/0x3b0 [ 1306.864129] __x64_sys_sendfile64+0x1d3/0x210 [ 1306.864144] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1306.864159] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1306.864182] do_syscall_64+0xbf/0x430 [ 1306.864195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1306.864207] RIP: 0033:0x7f7a32465b19 [ 1306.864218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1306.864231] RSP: 002b:00007f7a2f9ba188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1306.864244] RAX: ffffffffffffffda RBX: 00007f7a32579020 RCX: 00007f7a32465b19 [ 1306.864252] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1306.864260] RBP: 00007f7a2f9ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1306.864267] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1306.864275] R13: 00007ffe0bebc99f R14: 00007f7a2f9ba300 R15: 0000000000022000 [ 1306.864294] [ 1306.907175] No source specified [ 1306.912880] No source specified 23:13:17 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) [ 1307.015446] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1307.020881] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1307.030255] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1307.033025] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1307.587493] serio: Serial port ptm1 23:13:27 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x541e, 0x0) [ 1317.353559] serio: Serial port ptm0 23:13:27 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:13:27 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 34) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:13:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x200000000000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:13:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5416, 0x0) 23:13:27 executing program 2: shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000004f00)=""/73) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f0000001000), 0x6e, &(0x7f0000001240)=[{&(0x7f0000001080)=""/190, 0xbe}, {&(0x7f0000001140)=""/194, 0xc2}], 0x2}}, {{&(0x7f0000001280), 0x6e, &(0x7f0000001740)=[{&(0x7f0000001300)=""/249, 0xf9}, {&(0x7f0000001400)=""/39, 0x27}, {&(0x7f0000001440)=""/51, 0x33}, {&(0x7f0000001480)=""/87, 0x57}, {&(0x7f0000001500)=""/24, 0x18}, {&(0x7f0000001540)=""/57, 0x39}, {&(0x7f0000001580)=""/163, 0xa3}, {&(0x7f0000001640)=""/12, 0xc}, {&(0x7f0000001680)=""/139, 0x8b}], 0x9, &(0x7f0000001800)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/114, 0x72}, {&(0x7f0000002980)=""/246, 0xf6}, {&(0x7f0000002a80)=""/207, 0xcf}, {&(0x7f0000002b80)=""/121, 0x79}, {&(0x7f0000002c00)=""/4096, 0x1000}], 0x6, &(0x7f0000003c80)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}}], 0x3, 0x40010002, &(0x7f0000003e80)) mq_timedsend(r0, &(0x7f0000003ec0)="2550d7838aff2cbc88898743c48e3d1403721c5c156c85837cc90fe9d7b62b9aaf4d341a0eb5c541d271c5554a02396ebb87a9611417aac20aa58e02b1efd6c0e97c186c8b85b31d42e6bf9785b3ef608ed271fa580de40c0c4d9af3ecbd7e74ce62352428e1cfda2b0384ecb23979b7cf36c3bf5584176a56c1e53fb21816b03504a5ba8e13a2a891fa184e14a760ca31a153382323c244189e85b5b53e01a00b0466804dd624857ee7042317291f68a1dccb4cbe82dd219246fd7c7b296337745b18ea87fa7063e5b905c44b300c1c6cf6be7572b05460a9a45271a5a1ce3b825fca65a41f0f75ab0250e727c74d552ee2e9ce688710cea753f8ee208d48989d2f834732ddae2ea79c6d64bf36d9d47ebaf7ffd1f6d83503b26f1f6b077a8e28f6f266a26d74f7aa066038284168b761ce34561e65b3420ace5104d074314fb1b7b44566f25cef0a8f80ec564a124b3b7e4c7a5bc2f17e95a4f8438f264da636f7edca7639e52eef1f9a45a69fa5a9e906b274fd2ed87a197618a7c29e3c7e1c40659cb5664c2a234ce3b57349e0c7c781115f2cb8ffeb86e597d450f31e202ae3b10f50d98fd9575fdaf4e01ee1e959155eb7c56613d9ee67c34128a5348ca21386c9058506afcec83210705e40ba9e744d963a91153dc97c155c63a156ef3736426c89e8228a3ac53eddfc09443fec95ba88d522e1924bd9627183b18b4696cf096c919c449a25a1811082e7c7c5d14002d8539b09390ca1c9776f5e740edf77707c06df6deb00b63a4591622371e779c616c11ccf1ae4ea74881141ba6ad1fab373309432c0c30eafc80e0e825084308e873a60ad7b0e612ff381fa10379b1202d67a887e79081ce8bcd2cc3a511853540337fcbd61f8fe0972fbd13a54f71e20c029c36fabebdfcb62a9fc0df706c5a27ab45f2957cfb24f94a54909ca44dfee9de4dfd541d2467d1c873f54acf29bdd0a1d35e59c27f252c6b15f93b04b8f3a879994403edd7354767aa15d04c365d2dc4d1cef5d71b308e529860f76be442edba9dc3aa638e1cb2904c46b88918a6e658f4b2d3a29bf7af31cfeaa4f445315085ffaa75f794ffc7a9aa3192c23621cc8ef6ebdd7e1231dfc3ae51e3c21ea2b89d2c4ffeef3116615a87c7be0059eede32d5a40168f5327dfe7609da6d0b1de6b35d0917a1c35d19c4f5f97e84dbac91bfa4062da13bbfccf5657a61f800778c165e98e55187bc5ef2a5bce8ef29312d4cd52be822c783b53c44d5b62480ab9f671acf46868583632b364899c232b753f25dd057a793ce39cd7da4bbeafba0a096c114f34e6509ea5dfb7954548905a495fd55e6ae6ca890d42d5e68ba4e06654440264d4bcc137f96656087db6fe0337b5720e5ab5f51a1614b61f7945280288429a4712aa54687c2e094ed6f7d0a35a94a9c8c08ccfb61b1d22e4966b439abf3f1f25859a03b45b12fde70365a20ada6f73d396c73c91241fcf30bc40a92b214df61e8b9f13338e5b7a9fbdb06e81651be702c86b086ec9b6ff6cb216470a76cc4fe57adcce3024e92ba08a3b8b3ab48d1662dc537fa7554ddba52db856275ab73fdb887b95cc7eb71e1d786083dfcb5d6f239bf7e1f3354d9e6aae06631018b43a3dbe3866bdcdb5e8be42dc0e207a1340c6d952dde147736dcf5b96d69ea5d4589dc9882805f2ab592bcfef3d4245691a8c5d95164320a0efef31584b67d4d2de4f6787cf865cd97c26fedef8e49d5001635cd3c53333caa1abff9cd7be2cfb251dfa398158c41221ae253fe7a2b7e76cf117c5f9e90ec638d393b5e66e883a69eb9a0709ec3e5b71cfd631494db7f425bc4c77ecca65baa5ae33939f29a46fafb2b1091bb30bc67dd3f3221286793e3d538f3fa8f95d146af05e01df4a2b42558e3baa3632728e2287fd3d85ad9ac2fa8a0e3a56c14c22937be4dd509499af3476dc2c50f941f96707c990d41f16c97517bcab98920664d55a3e638b0cb1905c5d16ac5df69bb1c97e6f4cf3463d73f451cd125f45a42d538e8ff4ba79554aa4bbe20e247930a70a561c1560f199e63732b18485f85c4a5179acd667fea72ef86fa4d95a056e7b6e7ee1c46a1f342790607be0c3234ba935df6e0997ef55494569ccb50af7e697543dce2a1117e40a009f97371d1d2f9f5ee05de049f00fc837a0d867639fc8c55b7e1c231030cd5e99d4d16491162e1341fc73b7989d92b959f9780eaee530bcc222653196d7de167e0a67a62432c7c2e5f6191c249ac9138550fde4a72428666340e82ea53aded40a161a0b61524f9572b8f340d844ecbae77f2412efb1d44a0a97e186e82b030c83ca3d18be74181129234773bbf66d0ce700b7d0df26ed8004930bade4f128999325c91f1a27ac9b1d7b95b6576a138c596f2e9c42832fd0cdddc91b2e6f066cad810f61b67ac60b4c380e733dbba9d8c1bfad465104af7a67cad92fb6335b1651936786cc90530ce61c8445d483d36f654f98e19d90d9336878bc7d291103960f1ebca996526b5466afd4a4c9b6eb3ca7ca27bf3c0fc889ca2dcf9a228f5a29559535eeab833fb8b58cd6678be402acad015ca1ebedf0ab3a40da6c9b35ee931db6cc3d41e1b0d167c1be3cf0c3d204337843e8ffe945e9700b3501bfdc8235059c15f7cdb5ea613af6f6ce9c2d7548bfa41d23f79fadc16449e93c8e8f39117634f611dc546b79f83d2a80b08c9ab3bf34d459ccca3a95e41d455af93434aa60773f5fc93c3b57716295eaf70f337d27cecf00518db5ce221bb91b64f12c0d1668aa845e8ea5c34bb2bb1aafc81e3be289ae5f5bf7732d1316c8e29253841ef07e6a46d8576885d4a62d643c68c4b774683fc47c68411c8b5569788c12f6c8c13261f82742be2cc1f76c77f67f5ca751f22de022c7f976aa82c53496629c226f584eacb8985a1a0276043798cabd5299f96e90f319ffad3697504187bf0c920c28e11fc43696258ba949725cf17e34fdea6bd7352879050f35ecd054d4cdd3a3caaf60062e88a3c9cdec7ff1cea4bad5dd047996967b45df571a06fe6a8b0e1d9109ae3925b3efbdd80181da2149920bef42a5f60d102e9c5d6fc1588fa219bd26daf88c948c208cfd396af5c248bafb5d5be783f2a39e9859913a24d6e33d9441d93052a1222886155c915f51ac138c3a7a993632d8b05a2d38a345b2d4a10520a26cd474089d505b8984d8ff606c1fa74e4a6dc5d86c18df531156640157dc3d885aec29035f97210cc0e29f9e4f37efcea37b56128c0a8b129ae6fdec09296054e35ae9d346afb8f602ef403a5ee11d9e9fb16712c1e5dba6ba6bf4e10fe6007f3b204625e6cabbdc25c45b2f71e1a50a7fb09e69ff9d472673835f878e52b9930229a07ce0b4e3dab5873f10759dcb8aec70cfb853d099670e0f4cf8f9500accaffcd64e31d1b6bfa5eb001639107932f49c2ad1ed2f98459cb7c8b46648d82d8487a7df78f05b9a5f852b93d691000fdae1d17dfd2cc2fef94678f74e561155299d6d53dd958e282e679a1fa2e2b265d1d0006287727052ea2098622347834b57eda2acd1ed85ade82fe06694d5da796e370f0aedbb96b583b90daac0e35f061886a91d49cfadca4b2189e22826ac3edae8a2f8257a513c71b20eacb5b8e1742c3221195e3ec6a5c2620538ce92d8c0afdbce16e75c779b8856745e2adc4c6477f719ede7681240e2222fac557826c5fca36162b13b33336838ba23f1a3429d31c16ecb2bf60abf1df3df07d881809ab6c9221727637a187117236280cdec784285cae9bacad5d100d9cd9e92f3be9abfc8fc8485c822f74665f7922362f199f72b334f5c96780ba18e36fcb250b3af62ac00aceeaedc2bef3352ff37a0416115086a7447cb1842f0c7ea32cd2b5b8aebbf19b23235af952699f3a83c34eb609ff683ef205f73f22c0c6a2b6e128a284264fed0482f5d470678d2f923bab0d30502c33096ebf500ab4501c7a51e3e478a0a2947b5a360e7ef2105c6766a00dd907b0bca7f3bd6e29cc25e2238f0327aab5f0bd1748b7669eb7537a73eee34459424e46c6742e6fc7488b7e07ed22a96d13dcf8605c7bb249646238789930080b225a6c1fad348f31508d60a5be172e51888d4fad6b609a4a51adfe93139d664f59f9c68c6df597d08b15282449d6c8c29aa988ccf95708f3cf5badc849373faba06eee24e40a548bba2956874c86c7049959432eda4bdeb8e0115c44f6ce4b5d80329e061d28892b22e44c79c022b2ed2e4c0bd45e13227513dc0e482d7f70a87c10e4a83e8f4558027af2cb9b666e0fdc9c8711fb9a510a9f4c1d173463f0eafea4377c1a4cabccc310ba88b24ca8ab4d780c15c59eaee46233d4f1eb67368e4f75d07dd44cb8f4f8940a8a928cfd1ad90de933cef8dc1033425816abb3c89684e0bdcbffa395f99cbdbcb7c1868a37ca32ed227fef869b5813278c4ddd8431d7a5a1955b39106451f284cad35d1da69541ecc3b4c0fb9a624b48bc23d559f1839a232389c5ccb07ab53ad7b09f9863fc4b683c43e7ae1d47c107d5e9001e38343987ff4e1d652b16ca11054aa586f9e1c699f1e81730d8076c5860cb6659e32b760bf28f763dadf6e09ee46d0079a7ffa1a5044dceafaa9d690c595897b6eb39dce7b871ab233011edb52d74172b7d283459313a6e03bbb78bad38eaa4f5e0b3018250898c4469ee0f1732227f6a2bab09732259dcfb9f01f304249cc86df931f4bc78c759bdbb531550b7b79415f27feaa903c8cd9f22843327cdc94896ec73180fff2b0e2bacd6d5f9394f4e47eee671f530c1c4140d76bc5fe862deb6ea540d3c5bd1cfea3afb749d7970324624d46c210bcb69b81284ae69fb7ad136255751e9d08112eac7c0546ed7cf5b801ff230b16beaf0547403f52929cb04e8daa24311ec6aa3aef698b5d8e4f8927d32052c99d47b0066d98d5f32aa4542b0b9544de647367758915578121677f9c7e2706b23676329c09f5be573b281c34fc3a1c62e0309d59f2abfc58d5620115a4194b2a9d11f7aaef28bbfa60e54a3b2dbec06694d3b8ee9cdd50e12e9bfb1b99f4a06206c9c5845348b4a541e006ddcea5e491f904ae2f82e835e7cd4574fa58c454dc91a8bf9dec187615d8e27383c82135492e7830e25a19d770eb334275863890a29fb898c08caf8e3ed3dad402946932dee0f7d6d90e72e314502250b8a0452501301ea80a45c7ed07688e0a6b095aaa4d9f548845eb0a68f28fc8877ec1f234085b8d96d331e1a186b1a9b87f204f0a00ca11f80f9e131b0bcfaa0553ca31d8f6581cbf14f0719c04216c28cc444d7b6c1f51d9b74c8dc122a15f762f955fb31119b082201cadcae3445ebd1fb4b8c939ebd3d2fda4b4496bd24422a274c1f0a0271eab7f2e6fbc79b66564e599e7b1ca1f7fe7495b5bcacc4f0b3ebad9492760841647c66e13a3d6ede4019a4d5155608bfe2da063c152a3eb11e7a15cc9c035d5d5efa8d95879fa7c57c0e3aef692d063ab5bf39e0af4c8ed19542b564c67c85cd4596c9dd2d3abfe9682a081b651b5ab377dde5f6ca00260fad076bd450064037dc790ca2ea2265d1da9304cbf91ed8ea5b983c0761df883e2cf6a9208043b8a2c2d7a6d2e3ce5ce2451f646f27333fb0c6f50a09e40341ba58d376d886e5e0ce65338e70ad81a92fc9673f90b059db4751a63c3a7ba749b24918a198b108b28d5ec5adf977361da4e73d8850a7d511a2bde2f9c21f4b75f3a16be1ed7c3dff79bd8193ee406db088393af4d98f20e66d1599ae8", 0x1000, 0x3, &(0x7f0000004ec0)={0x77359400}) fcntl$notify(0xffffffffffffffff, 0x402, 0x2571fc6deb7a34c0) getdents(0xffffffffffffffff, &(0x7f0000000000)=""/4085, 0xff5) 23:13:27 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 19) 23:13:27 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @random="b3fe2de2b282"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x1}, 0x4) [ 1317.397350] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1317.406402] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1317.411093] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1317.417420] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:13:27 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 20) [ 1317.445442] No source specified [ 1317.452606] No source specified 23:13:27 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000001700)={r5, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x1, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) 23:13:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = getpid() pidfd_open(r1, 0x0) r2 = getpid() pidfd_open(r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) kcmp(r1, r2, 0x0, r0, r3) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:13:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5418, 0x0) 23:13:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x300000000000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1317.548743] FAULT_INJECTION: forcing a failure. [ 1317.548743] name failslab, interval 1, probability 0, space 0, times 0 [ 1317.549749] CPU: 1 UID: 0 PID: 10402 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1317.549771] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1317.549780] Call Trace: [ 1317.549785] [ 1317.549791] dump_stack_lvl+0xfa/0x120 [ 1317.549822] should_fail_ex+0x4d7/0x5e0 [ 1317.549840] should_failslab+0xc2/0x120 [ 1317.549856] __kmalloc_noprof+0xcd/0x680 [ 1317.549874] ? ext4_find_extent+0x7f5/0xa00 [ 1317.549898] ext4_find_extent+0x7f5/0xa00 [ 1317.549920] ext4_ext_map_blocks+0x1cc/0x5f30 [ 1317.549946] ? mark_held_locks+0x49/0x80 [ 1317.549969] ? finish_task_switch.isra.0+0x206/0x840 [ 1317.549994] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1317.550021] ? lock_acquire+0x15e/0x2f0 [ 1317.550038] ? ext4_map_blocks+0x564/0x1510 [ 1317.550060] ? down_write+0x119/0x1f0 [ 1317.550074] ? __pfx_down_write+0x10/0x10 [ 1317.550087] ? lock_release+0xc8/0x290 [ 1317.550109] ext4_map_blocks+0x62d/0x1510 [ 1317.550125] ? kmem_cache_alloc_noprof+0x270/0x690 [ 1317.550143] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1317.550161] ? jbd2__journal_start+0xf6/0x6b0 [ 1317.550185] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1317.550201] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1317.550215] ? ext4_iomap_begin+0x5b0/0xe80 [ 1317.550230] ? ext4_meta_trans_blocks+0x256/0x310 [ 1317.550248] ext4_iomap_begin+0xa5e/0xe80 [ 1317.550262] ? __pfx_perf_trace_lock+0x10/0x10 [ 1317.550290] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1317.550305] ? mark_held_locks+0x49/0x80 [ 1317.550326] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1317.550345] ? __create_object+0x59/0x80 [ 1317.550365] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1317.550379] iomap_iter+0x55a/0x1020 [ 1317.550404] __iomap_dio_rw+0x6dd/0x1c90 [ 1317.550424] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1317.550450] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1317.550468] ? kasan_quarantine_put+0x84/0x1e0 [ 1317.550494] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1317.550514] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1317.550527] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1317.550550] iomap_dio_rw+0x40/0xa0 [ 1317.550565] ext4_file_write_iter+0xe0e/0x19f0 [ 1317.550587] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1317.550601] ? trace_kmalloc+0x1f/0xb0 [ 1317.550613] ? __kmalloc_noprof+0x274/0x680 [ 1317.550629] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1317.550653] iter_file_splice_write+0xa3a/0x11f0 [ 1317.550682] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1317.550717] ? lock_is_held_type+0x9e/0x120 [ 1317.550737] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1317.550757] direct_splice_actor+0x192/0x7b0 [ 1317.550778] splice_direct_to_actor+0x347/0x9d0 [ 1317.550797] ? __pfx_direct_splice_actor+0x10/0x10 [ 1317.550820] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1317.550840] ? lock_acquire+0x15e/0x2f0 [ 1317.550861] do_splice_direct+0x179/0x250 [ 1317.550879] ? __pfx_do_splice_direct+0x10/0x10 [ 1317.550898] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1317.550918] ? security_file_permission+0x22/0x90 [ 1317.550939] do_sendfile+0xa8e/0xdc0 [ 1317.550964] ? __pfx_do_sendfile+0x10/0x10 [ 1317.550984] ? __fget_files+0x20d/0x3b0 [ 1317.551011] __x64_sys_sendfile64+0x1d3/0x210 [ 1317.551027] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1317.551043] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1317.551067] do_syscall_64+0xbf/0x430 [ 1317.551082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.551097] RIP: 0033:0x7f7a32465b19 [ 1317.551107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1317.551121] RSP: 002b:00007f7a2f9ba188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1317.551135] RAX: ffffffffffffffda RBX: 00007f7a32579020 RCX: 00007f7a32465b19 [ 1317.551144] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1317.551152] RBP: 00007f7a2f9ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1317.551161] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1317.551169] R13: 00007ffe0bebc99f R14: 00007f7a2f9ba300 R15: 0000000000022000 [ 1317.551188] [ 1317.601558] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1317.625835] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:13:28 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1317.665806] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1317.679005] No source specified [ 1317.681615] No source specified 23:13:28 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 21) [ 1317.695224] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:13:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x541b, 0x0) [ 1318.182710] serio: Serial port ptm1 23:13:38 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 35) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:13:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x400000000000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:13:38 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="1f68a19b5920b7651250f6215cf34547f35e27ba9409baa067bd10bbee0ebc14550bacff2d49f9290f696ee3bd8f3607c957c74c49a0d9447fd22b217460827710c4bdced97e7c02493a5cbfb45d6f7b9a55e2a8c19a894c436211b1b647", 0x5e, r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001700)={r3, 0x1, 0x6, @multicast}, 0x10) 23:13:38 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5421, 0x0) 23:13:38 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 22) 23:13:38 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:13:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x541d, 0x0) 23:13:38 executing program 2: fcntl$notify(0xffffffffffffffff, 0x402, 0x2571fc6deb7a34c0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={r1, 0x1, 0x6, @multicast}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001200)={'team0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000001700)={r5, 0x1, 0x6, @multicast}, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000001700)={r8, 0x1, 0x6, @multicast}, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001400)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="08002cbd7000fddbdf25090000006000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f3000000800030003000000080003000000000014000200626f6e645f736c6176655f300000000014000200677265300000000000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200626f6e643000000000000000000000000c000180080003000100000014000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=r1, @ANYBLOB="2c0001801400020065727370616e30000000000000000000140002006c6f00000000000000000000000000002000018014000200626f6e6430000000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="1400018008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="fcf57a76ce4570e7a0c9ce2ec09fb4565ea4363c182406c6fcf96a03f6447b00a97c0f82cd78e9c0780ffed82f6ce7f59db0672ea9c401db7e06c94257f80ed3c15be101c5ff734a0208eb043b53afcb765d1549b4a3264b2c76e7fec3650ad97d1dead1ddea430fd2cc5407fe03cf3046bfba9edbf309552cf475d8a7760878938ddf072a1a0f7b"], 0x138}}, 0x4008004) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x1) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) getdents(0xffffffffffffffff, &(0x7f00000001c0)=""/4096, 0x1000) [ 1328.145948] serio: Serial port ptm0 [ 1328.198397] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 1328.205461] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 23:13:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x541e, 0x0) [ 1328.226304] No source specified [ 1328.227541] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 1328.231545] No source specified [ 1328.240807] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 23:13:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x500000000000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:13:38 executing program 2: sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb8, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x30}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x7c, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x39}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9e}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffff}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffffbe}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1fb}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4014) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) [ 1328.455714] No source specified 23:13:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x541e, 0x0) [ 1328.466373] No source specified 23:13:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x600000000000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:13:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@initdev, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000001700)={r4, 0x1, 0x6, @multicast}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000012c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44041}, 0x840) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:13:39 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 23) [ 1328.687433] No source specified [ 1328.700332] No source specified [ 1328.714503] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 1328.743650] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 23:13:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5421, 0x0) [ 1328.781491] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode 23:13:39 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 36) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1328.807507] mac80211_hwsim hwsim17 wlan1: left promiscuous mode 23:13:39 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl2\x00', r2, 0x2f, 0x5, 0x4, 0x1, 0x18, @dev={0xfe, 0x80, '\x00', 0x10}, @dev={0xfe, 0x80, '\x00', 0xc}, 0x1, 0x8000, 0x3ff, 0x3}}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000001700)={r6, 0x1, 0x6, @multicast}, 0x10) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r7, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000380)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x10) accept$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xc4, 0x0, 0x3, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xc4}}, 0x8800) 23:13:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x700000000000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1328.913833] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1328.931615] No source specified [ 1328.934755] No source specified [ 1328.942467] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1328.945596] FAULT_INJECTION: forcing a failure. [ 1328.945596] name failslab, interval 1, probability 0, space 0, times 0 [ 1328.947323] CPU: 0 UID: 0 PID: 10485 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1328.947356] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1328.947372] Call Trace: [ 1328.947381] [ 1328.947391] dump_stack_lvl+0xfa/0x120 [ 1328.947440] should_fail_ex+0x4d7/0x5e0 [ 1328.947469] ? jbd2__journal_start+0x193/0x6b0 [ 1328.947507] should_failslab+0xc2/0x120 [ 1328.947534] kmem_cache_alloc_noprof+0x80/0x690 [ 1328.947569] ? lock_is_held_type+0x9e/0x120 [ 1328.947612] ? jbd2__journal_start+0x193/0x6b0 [ 1328.947648] jbd2__journal_start+0x193/0x6b0 [ 1328.947691] __ext4_journal_start_sb+0x325/0x5d0 [ 1328.947721] ? ext4_iomap_begin+0x5b0/0xe80 [ 1328.947747] ? ext4_meta_trans_blocks+0x256/0x310 [ 1328.947780] ext4_iomap_begin+0x5b0/0xe80 [ 1328.947822] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1328.947853] ? iomap_iter_advance+0x177/0x1f0 [ 1328.947892] ? iomap_dio_bio_iter+0x8ac/0x1310 [ 1328.947921] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1328.947947] iomap_iter+0x55a/0x1020 [ 1328.947998] __iomap_dio_rw+0x6dd/0x1c90 [ 1328.948043] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1328.948090] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1328.948124] ? kasan_quarantine_put+0x84/0x1e0 [ 1328.948170] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1328.948207] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1328.948231] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1328.948272] iomap_dio_rw+0x40/0xa0 [ 1328.948298] ext4_file_write_iter+0xe0e/0x19f0 [ 1328.948339] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1328.948364] ? trace_kmalloc+0x1f/0xb0 [ 1328.948384] ? __kmalloc_noprof+0x274/0x680 [ 1328.948412] ? __pfx_perf_trace_lock+0x10/0x10 [ 1328.948448] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1328.948491] iter_file_splice_write+0xa3a/0x11f0 [ 1328.948544] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1328.948606] ? lock_is_held_type+0x9e/0x120 [ 1328.948642] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1328.948679] direct_splice_actor+0x192/0x7b0 [ 1328.948716] splice_direct_to_actor+0x347/0x9d0 [ 1328.948751] ? __pfx_direct_splice_actor+0x10/0x10 [ 1328.948792] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1328.948828] ? lock_acquire+0x15e/0x2f0 [ 1328.948868] do_splice_direct+0x179/0x250 [ 1328.948900] ? __pfx_do_splice_direct+0x10/0x10 [ 1328.948934] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1328.948971] ? security_file_permission+0x22/0x90 [ 1328.949006] do_sendfile+0xa8e/0xdc0 [ 1328.949051] ? __pfx_do_sendfile+0x10/0x10 [ 1328.949087] ? __fget_files+0x20d/0x3b0 [ 1328.949136] __x64_sys_sendfile64+0x1d3/0x210 [ 1328.949165] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1328.949194] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1328.949238] do_syscall_64+0xbf/0x430 [ 1328.949264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.949289] RIP: 0033:0x7fb59c6b8b19 [ 1328.949308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1328.949332] RSP: 002b:00007fb599c2e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1328.949355] RAX: ffffffffffffffda RBX: 00007fb59c7cbf60 RCX: 00007fb59c6b8b19 [ 1328.949372] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1328.949386] RBP: 00007fb599c2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1328.949401] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1328.949416] R13: 00007fff3932da4f R14: 00007fb599c2e300 R15: 0000000000022000 [ 1328.949450] [ 1329.029603] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1329.053428] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:13:39 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5423, 0x0) 23:13:39 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:13:39 executing program 2: r0 = fork() r1 = syz_open_procfs(r0, &(0x7f0000000000)='fd\x00') fcntl$notify(r1, 0x402, 0x2571fc6deb7a34c3) getdents(r1, &(0x7f00000001c0)=""/4096, 0x1000) 23:13:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5423, 0x0) 23:13:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x800000000000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1329.206780] No source specified [ 1329.215898] No source specified [ 1329.248556] serio: Serial port ptm1 [ 1330.069745] serio: Serial port ptm0 23:13:49 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5424, 0x0) 23:13:49 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 24) 23:13:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5424, 0x0) 23:13:49 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:13:49 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000001700)={r6, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x5a, r6}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) 23:13:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x900000000000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:13:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f00000012c0)=ANY=[@ANYBLOB="0800000000b3000000060000000000e69a4bc3ab4fcaaa4600"]) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) ioctl$KDADDIO(r3, 0x4b34, 0x1429) io_submit(0x0, 0x2, &(0x7f0000001280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x100, r1, &(0x7f0000000080)="f648349df17ddc4f7dbc6d407d57022bbe2cb35f0b14efa114afa149b5c5d13a9c0c0b0c38bd5e6eab7e559fe59fd161e4e8826d894a65869faf549811cc66ccb5cd9602609937538bc6c0d4c64019e30b062d24cd61835341d785c92217e326f1adc0115a602dec3170dd774771cdef511eec3efb1ce1cf92f566be234de50f9e55a99c01db9dc95637bfbce6795bdb481e01ecfff49f1a4457c69c9205fbb175c2671e492cb1b994d8742dd3ee805ca19fb222d11464769ba8ad3b", 0xbc, 0x0, 0x0, 0x0, r0}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f00000011c0)="8907df10670750626236aa24d81cb2e0d01535ccc5af6e694036fff08328109408b218935a37091fe9a792cd1d6489d7e33d9506e9c6ab80954db95025dfd0a14e6fa1642510193d150fe428570968a88a31d4e1bbb460553370ecdc5f36cdf7acd1cc380d1f5c88c45d70f786ddc00299d4a1801d7d35c60d35eb570d466444849185837237b5fd2b9cab082aedbff535bfd28e003e2b4b827f037683569921e1c79a43c0542b957157ed6712d4c7d9f4d5e80fe8b1", 0xb6, 0x2, 0x0, 0x3, r3}]) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:13:49 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 37) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1339.124536] No source specified [ 1339.130314] No source specified [ 1339.135738] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1339.156349] serio: Serial port ptm1 [ 1339.174458] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1339.191260] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 23:13:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xa00000000000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:13:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5425, 0x0) [ 1339.246765] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1339.354869] No source specified [ 1339.366650] No source specified [ 1339.960628] serio: Serial port ptm0 23:14:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="d04dae998f98823d80272f5e29e38962395e9686a8c8b2e0", 0x18, 0x4}], 0xa0860, &(0x7f0000000140)={[], [{@measure}, {@appraise}, {@hash}]}) getdents(r1, &(0x7f0000000180)=""/4104, 0x104b) 23:14:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5427, 0x0) 23:14:02 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) 23:14:02 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5425, 0x0) 23:14:02 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:14:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xb00000000000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:14:02 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 25) 23:14:02 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 38) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1351.893141] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1351.897485] No source specified [ 1351.902654] serio: Serial port ptm0 [ 1351.902749] No source specified [ 1351.904305] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:14:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1000000000000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:14:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/sockcreate\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r1, 0x402, 0x2571fc6deb7a34c0) r2 = dup2(r0, r0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r2, 0x8001, 0x80000}) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e20, 0x3, @remote, 0x9}, {0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x44}, 0x7}, 0x9, [0x0, 0x0, 0xfffffff8, 0x800, 0x400, 0x7fff, 0xabf]}, 0x5c) getdents(r1, &(0x7f00000001c0)=""/4096, 0x1000) 23:14:02 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000001700)={r6, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@private1, 0x40, r6}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) 23:14:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5428, 0x0) [ 1352.149812] No source specified [ 1352.159315] No source specified [ 1352.192038] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1352.206462] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1352.232850] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1352.247551] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:14:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2000000000000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:14:02 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 39) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:14:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r1 = getpid() pidfd_open(r1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) kcmp(0xffffffffffffffff, r1, 0x0, r0, r2) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:14:02 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f0000000000)=""/104, &(0x7f0000000080)=0x68) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) 23:14:02 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:14:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5441, 0x0) 23:14:02 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 26) [ 1352.470934] FAULT_INJECTION: forcing a failure. [ 1352.470934] name failslab, interval 1, probability 0, space 0, times 0 [ 1352.473374] CPU: 1 UID: 0 PID: 10592 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1352.473408] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1352.473423] Call Trace: [ 1352.473432] [ 1352.473441] dump_stack_lvl+0xfa/0x120 [ 1352.473488] should_fail_ex+0x4d7/0x5e0 [ 1352.473517] ? ext4_mb_new_blocks+0x64e/0x4580 [ 1352.473543] should_failslab+0xc2/0x120 [ 1352.473570] kmem_cache_alloc_noprof+0x80/0x690 [ 1352.473600] ? ext4_dirty_inode+0xf1/0x130 [ 1352.473633] ? __mark_inode_dirty+0x254/0x1470 [ 1352.473666] ? ext4_mb_new_blocks+0x64e/0x4580 [ 1352.473691] ext4_mb_new_blocks+0x64e/0x4580 [ 1352.473730] ? perf_trace_lock+0xb5/0x5d0 [ 1352.473770] ? ext4_ind_map_blocks+0x263/0x2330 [ 1352.473806] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 1352.473834] ? __pfx_perf_trace_lock+0x10/0x10 [ 1352.473867] ? ext4_get_branch+0x588/0x740 [ 1352.473908] ext4_ind_map_blocks+0x1850/0x2330 [ 1352.473956] ? unwind_next_frame+0x3bc/0x2540 [ 1352.473990] ? __pfx_ext4_ind_map_blocks+0x10/0x10 [ 1352.474041] ? lock_acquire+0x15e/0x2f0 [ 1352.474074] ? ext4_map_blocks+0x564/0x1510 [ 1352.474112] ? down_write+0x119/0x1f0 [ 1352.474137] ? __pfx_down_write+0x10/0x10 [ 1352.474160] ? lock_release+0xc8/0x290 [ 1352.474201] ext4_map_blocks+0xaf1/0x1510 [ 1352.474232] ? kmem_cache_alloc_noprof+0x270/0x690 [ 1352.474264] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1352.474298] ? jbd2__journal_start+0xf6/0x6b0 [ 1352.474342] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1352.474369] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1352.474396] ? ext4_iomap_begin+0x5b0/0xe80 [ 1352.474422] ? ext4_meta_trans_blocks+0x256/0x310 [ 1352.474455] ext4_iomap_begin+0xa5e/0xe80 [ 1352.474499] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1352.474530] ? iomap_iter_advance+0x177/0x1f0 [ 1352.474569] ? iomap_dio_bio_iter+0x8ac/0x1310 [ 1352.474599] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1352.474625] iomap_iter+0x55a/0x1020 [ 1352.474669] __iomap_dio_rw+0x6dd/0x1c90 [ 1352.474705] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1352.474751] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1352.474786] ? kasan_quarantine_put+0x84/0x1e0 [ 1352.474834] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1352.474871] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1352.474895] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1352.474936] iomap_dio_rw+0x40/0xa0 [ 1352.474963] ext4_file_write_iter+0xe0e/0x19f0 [ 1352.475005] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1352.475031] ? trace_kmalloc+0x1f/0xb0 [ 1352.475051] ? __kmalloc_noprof+0x274/0x680 [ 1352.475081] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1352.475123] iter_file_splice_write+0xa3a/0x11f0 [ 1352.475177] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1352.475243] ? lock_is_held_type+0x9e/0x120 [ 1352.475278] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1352.475316] direct_splice_actor+0x192/0x7b0 [ 1352.475354] splice_direct_to_actor+0x347/0x9d0 [ 1352.475390] ? __pfx_direct_splice_actor+0x10/0x10 [ 1352.475431] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1352.475468] ? lock_acquire+0x15e/0x2f0 [ 1352.475507] do_splice_direct+0x179/0x250 [ 1352.475540] ? __pfx_do_splice_direct+0x10/0x10 [ 1352.475574] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1352.475611] ? security_file_permission+0x22/0x90 [ 1352.475647] do_sendfile+0xa8e/0xdc0 [ 1352.475692] ? __pfx_do_sendfile+0x10/0x10 [ 1352.475728] ? __fget_files+0x20d/0x3b0 [ 1352.475777] __x64_sys_sendfile64+0x1d3/0x210 [ 1352.475806] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1352.475835] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1352.475880] do_syscall_64+0xbf/0x430 [ 1352.475907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.475932] RIP: 0033:0x7fb59c6b8b19 [ 1352.475951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1352.475975] RSP: 002b:00007fb599c2e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1352.475999] RAX: ffffffffffffffda RBX: 00007fb59c7cbf60 RCX: 00007fb59c6b8b19 [ 1352.476016] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1352.476030] RBP: 00007fb599c2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1352.476045] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1352.476060] R13: 00007fff3932da4f R14: 00007fb599c2e300 R15: 0000000000022000 [ 1352.476097] [ 1352.530997] No source specified [ 1352.569612] No source specified 23:14:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2010000000000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:14:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5450, 0x0) 23:14:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) fcntl$notify(r1, 0x402, 0x0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:14:12 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 40) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:14:12 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5427, 0x0) 23:14:12 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r3, &(0x7f0000000180)={0x90000000}, r4, 0x3, 0x0, 0x1}, 0x700000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r6) mount$cgroup2(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB='memory_recursiveprot,nsdelegate,nsdelegate,nsdelegate,memory_recursiveprot,memory_localevents,rdma,euid<', @ANYRESDEC=r6, @ANYBLOB=',uid>', @ANYRESDEC=0xee01, @ANYBLOB=',hash,seclabel,euid=', @ANYRESDEC, @ANYBLOB='\x00'/10]) 23:14:12 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 27) 23:14:12 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) [ 1362.410609] No source specified [ 1362.412788] No source specified 23:14:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x4316000000000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1362.481645] serio: Serial port ptm0 [ 1362.486130] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1362.502729] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1362.511293] No source specified [ 1362.520166] No source specified 23:14:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5451, 0x0) 23:14:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x8cffffff00000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:14:13 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) recvmsg$unix(r1, &(0x7f00000012c0)={&(0x7f0000000040), 0x6e, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/191, 0xbf}], 0x1, &(0x7f0000001300)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000011c0), 0x101000, 0x0) r3 = dup(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r3, 0x0) r4 = signalfd4(r3, &(0x7f0000000080)={[0x8]}, 0x8, 0x0) r5 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x14, 0x0, r6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_STATX={0x15, 0x5, 0x0, r4, &(0x7f0000000440), &(0x7f0000000340)='./file1\x00', 0x8, 0x6000, 0x1, {0x0, r6}}, 0xa50) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001200)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x3) write$binfmt_elf64(r2, &(0x7f0000001400)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0xff, 0xa7, 0x81, 0x4, 0x3, 0x6, 0xb58, 0x21b, 0x40, 0x227, 0xf0, 0x65cd, 0x38, 0x1, 0x5, 0x401, 0x9}, [{0x6474e550, 0x1, 0x80, 0x4, 0x9, 0x5, 0x87, 0x3}], "b47358946f51c3c29d8ac8c8e9b7732a3dbbba61271aadd970afddcd781fac2e7b3a583ab38c16cb111c191ebb5f2a82627335c64ad5d5add291f52494b4785a15e5d5702d4f1c9269b925ce95962e3466a22130e41f6fb48186ba045770243ef4e43d1fecad32c7b16eeed286d8f80fa19830cc8fef92b76a8983fd34c8132bd74ba5ad36f98f93469b66c57e"}, 0x105) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r7, 0x402, 0x2571fc6deb7a34c0) getdents(r7, &(0x7f00000001c0)=""/4096, 0x1000) [ 1362.651571] No source specified 23:14:13 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_SIOCADDDLCI(r1, 0x8980, 0xfffffffffffffffe) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @broadcast}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = clone3(&(0x7f0000000440)={0x7431000, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280), {0xc}, &(0x7f00000002c0)=""/163, 0xa3, &(0x7f00000003c0)=""/53, &(0x7f0000000400)=[r2], 0x1}, 0x58) fcntl$lock(r1, 0x6, &(0x7f00000004c0)={0x2, 0x4, 0x4, 0x3, r7}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x38, r8, 0x1, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0xa}]}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r8, 0x828, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x15}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) [ 1362.660620] No source specified 23:14:13 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 28) 23:14:13 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 41) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:14:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xf6ffffff00000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:14:13 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) [ 1362.724624] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1362.737329] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 1362.742216] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1362.744855] No source specified [ 1362.746450] No source specified [ 1362.759027] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1362.782988] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 23:14:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xf9fdffff00000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1362.797671] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1362.905272] FAULT_INJECTION: forcing a failure. [ 1362.905272] name failslab, interval 1, probability 0, space 0, times 0 [ 1362.907335] CPU: 1 UID: 0 PID: 10663 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1362.907369] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1362.907384] Call Trace: [ 1362.907392] [ 1362.907402] dump_stack_lvl+0xfa/0x120 [ 1362.907448] should_fail_ex+0x4d7/0x5e0 [ 1362.907476] ? jbd2__journal_start+0x193/0x6b0 [ 1362.907513] should_failslab+0xc2/0x120 [ 1362.907540] kmem_cache_alloc_noprof+0x80/0x690 [ 1362.907583] ? jbd2__journal_start+0x193/0x6b0 [ 1362.907619] jbd2__journal_start+0x193/0x6b0 [ 1362.907661] __ext4_journal_start_sb+0x325/0x5d0 [ 1362.907690] ? ext4_dio_write_end_io+0x2ba/0x710 [ 1362.907713] ? lock_is_held_type+0x9e/0x120 [ 1362.907753] ext4_dio_write_end_io+0x2ba/0x710 [ 1362.907777] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1362.907812] ? __pfx_ext4_dio_write_end_io+0x10/0x10 [ 1362.907840] iomap_dio_complete+0x14d/0x9e0 [ 1362.907873] iomap_dio_rw+0x73/0xa0 [ 1362.907899] ext4_file_write_iter+0xe0e/0x19f0 [ 1362.907940] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1362.907974] ? trace_kmalloc+0x1f/0xb0 [ 1362.907995] ? __kmalloc_noprof+0x274/0x680 [ 1362.908025] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1362.908068] iter_file_splice_write+0xa3a/0x11f0 [ 1362.908121] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1362.908186] ? lock_is_held_type+0x9e/0x120 [ 1362.908222] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1362.908258] direct_splice_actor+0x192/0x7b0 [ 1362.908296] splice_direct_to_actor+0x347/0x9d0 [ 1362.908332] ? __pfx_direct_splice_actor+0x10/0x10 [ 1362.908373] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1362.908409] ? lock_acquire+0x15e/0x2f0 [ 1362.908450] do_splice_direct+0x179/0x250 [ 1362.908483] ? __pfx_do_splice_direct+0x10/0x10 [ 1362.908517] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1362.908554] ? security_file_permission+0x22/0x90 [ 1362.908590] do_sendfile+0xa8e/0xdc0 [ 1362.908635] ? __pfx_do_sendfile+0x10/0x10 [ 1362.908671] ? __fget_files+0x20d/0x3b0 [ 1362.908720] __x64_sys_sendfile64+0x1d3/0x210 [ 1362.908764] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1362.908805] do_syscall_64+0xbf/0x430 [ 1362.908831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.908856] RIP: 0033:0x7f7a32465b19 [ 1362.908876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1362.908900] RSP: 002b:00007f7a2f9db188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1362.908923] RAX: ffffffffffffffda RBX: 00007f7a32578f60 RCX: 00007f7a32465b19 [ 1362.908940] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1362.908955] RBP: 00007f7a2f9db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1362.908970] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1362.908985] R13: 00007ffe0bebc99f R14: 00007f7a2f9db300 R15: 0000000000022000 [ 1362.909021] [ 1362.931207] No source specified [ 1362.998807] No source specified 23:14:24 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5428, 0x0) 23:14:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5452, 0x0) 23:14:24 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 42) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:14:24 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000000)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)="f8a5510beb6fcc38978a5f2bbccedd4c5077efcaa294d5109369af5df0bd9d2f8f0b6a98606ca12e70999095d77bdc94916f022e87bd37e17b904ee635095254dbf4eaca7a2c688ed4", 0x49}, {&(0x7f0000000140)="15e17bd321a88ec07aafc198660c7f957f223048dbc1776932f253f7736995209eaab3d24d059e15114cfef3c7cf5c2e76023be54a36074af90f4c3c9c47eb504ace4a5eb660f1c4e5e8135c9f498719d4e4f66ae7aa2657c56f65a40f713898e1842055b7b6856f521983194139c8ae38967fd8b9ea7509a174907377a5d6d510e281761c79094693728c1ddb29b291fc738d578b45ec3354ce2e449a546668897ca2ba7c748dcb", 0xa8}, {&(0x7f0000000240)="c07a2f429c9cef1ff987e090855b16fa7235f6a396cde08e723c83d781d2eaccd7e7c976027b6c0c2061988c436b0de52d29058fe447a902f23ff6353824a75c80", 0x41}], 0x3, &(0x7f0000000700)=[{0xe0, 0x113, 0x4b, "9efbb22a84c7638bb222ad9ccf0500714f3830ab928d106ed8644275a9151ca24d5fac5fee5843724399a15638cb30e35c579d8c28c4024e7d71a56bcb79a057bebbdba3055aa01a97c4e5127aef899417ce11c2132726f10794bfe447ae3bdca02821b0b0013b5f1f1cfc32ffa025bf4afdf34ef21cb1d95dcb1251efe62ad9983de3fa25ad122645ed8677230b722656151814665e5c304052e85a78126730d75698cd05483551a87a070ccd0174e123cdf2671b8aeddf790f14c11c44d6ef05695b30f61c4e5dcc234a6f4d89"}, {0xe8, 0x11, 0x8, "4f39a07c100ee61c19974f116fa8c8df769dff4afd6d693f8e90ec7204d91b0a5684f0422eb3fb966278522a1a58e263aeb02dbabebf30d87de58042d24461938ab036fd63295aec4eed969492e4d817f7cbef8f125d4ce42e0a1c64e0dfab4702c06b947207f7113a494cd0531765dcd0a960e949138fe03da48583239c8f3e1bd706dc13b9208fbb159f40ab4d13df70cb9f3d64be283625776c2bf1b5ba1afc1075ca05306df8a2a7f0029c395d105a79b57f2e3f978b7b0dc677c93e99d08db60867d9ab144d9829f4dd0511f44329d21e7341dafa"}, {0x100, 0x3a, 0xffff, "fdd12703d36ecb9294baa86179d466ab389d0c070df8e305ff397af817853d7ecc003d1d16f0b28e09054f6aa205c0d33112e78ac2b0aa075140f666ffc0f12d4d303377bb946985d63c7f0684992b28f7ea4395766a8321e1ea9408a3fb15bdac503de1602059a6f7ac0536b48bfd19cb1e02d30dbe9bf334a9a330d60abe9a4bbd885f87c9794023aed9eff8839e0757e5bdd64170f0aa3e953800783870f3e8031ef7864b244fabdbe80cf4e22a483e74f43e40e573cb25affe6696f8b20568eb9c54a80ede61e23592294a8e74b64ba01513ee6ebf21fa4930abea2e36a368102ab224e20752b3ab1e0cc815"}, {0x98, 0x0, 0xfffffffb, "a8d1573604a3016110dec91917ba060edad09d4c00b12892939e079245aa4e69168d922d51bc30213b1879132e597b9143a587de45af430eb047e71f092fa8c34229f6c62343f36953a2acfc466979cc6f00e02e598a14cb480d584aa9d71842c8ea1bd5a5729c78301bef28037af1f9452c0ab2b818b70a0cc8ff03e2c0c695f5ad"}, {0x100, 0x10a, 0x3, "a50dad62dd7282a773090898b927c8ed17b5eb45fccae4457c74e1350be15438bac21ac597779caf28652ab1a733f6756bcb6722ef3c7c96a51828ac68cfe18c2e7b075d0a88155d62e74217c5388083b22a4342c2e0da2c0bfa09295397274d38bb8f7511ae0d7c938f20ed7ba00bf0c9688b75503b5d289f1b031d28f0f2e3cca75549cfbbb0c701a4e1651f3914ee9084e6f7c494eb9a5d757c2ec20196aa3a36adeba3739eeca6073c5e60d2a4f520f4d145cfdd7614944d171cb9c5947f48fd0caed5366d1f9842b634434dc0df22c5beed52c18e5c614887e5f34ce0c6153b6cd3ea2963f03c50aa3a85"}], 0x460}, 0x8040000) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) 23:14:24 executing program 2: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000000c0)={{}, {0x9}, 0x5, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000011c0)="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", 0x1c2, 0x0, &(0x7f00000013c0)={0x2, 0xed, {0x0, 0xc, 0x74, "218dd4de05eb7e2fd7703830922b4330c023f844e79d9bf3d34541e233c6c58027519df13bd07500d0d60b422f18f05d4bd51cef80a310768dc5044e916759393d8e04b772ef6c0f5f9662d2c1425477c76cff9e00581a895cc5789de78eea40bcd88d7916cd361da3c151a3978668024f429ce2", 0x6c, "1216c844d0ea0bb94379a928019952b21d2c680b8e2dcb6a163bc8aee1d4740e41c89c47f8b542be176a235ee2fd7784965589d491b1f1fcab64f2659a8fde68ef256ec52aa4e411c20439fabded228e4f9b76d8219d6b832c1072a8831ebceea0d78fbb83eccb08cb937a27"}, 0x70, "4136ccb8fdb3947f0249428a632217fbe781c623ed59c46bccf714bff36c26f5f676af3ba1e0fa6ad900342b00e56db2521368a450f417a9fe99d58654887f45d80a847cafdbeefd5f72bf523465580550aff6077d6c5d4a2d13c9137a234647b0d9f07a06fd3764c1a86f5bd5e6dfc0"}, 0x169}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:14:24 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 29) 23:14:24 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 23:14:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffff00000000, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1374.544793] FAULT_INJECTION: forcing a failure. [ 1374.544793] name failslab, interval 1, probability 0, space 0, times 0 [ 1374.546559] CPU: 0 UID: 0 PID: 10677 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1374.546591] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1374.546605] Call Trace: [ 1374.546614] [ 1374.546622] dump_stack_lvl+0xfa/0x120 [ 1374.546668] should_fail_ex+0x4d7/0x5e0 [ 1374.546695] ? jbd2__journal_start+0x193/0x6b0 [ 1374.546730] should_failslab+0xc2/0x120 [ 1374.546755] kmem_cache_alloc_noprof+0x80/0x690 [ 1374.546788] ? lock_is_held_type+0x9e/0x120 [ 1374.546828] ? jbd2__journal_start+0x193/0x6b0 [ 1374.546862] jbd2__journal_start+0x193/0x6b0 [ 1374.546901] __ext4_journal_start_sb+0x325/0x5d0 [ 1374.546929] ? ext4_iomap_begin+0x5b0/0xe80 [ 1374.546962] ? ext4_meta_trans_blocks+0x256/0x310 [ 1374.546993] ext4_iomap_begin+0x5b0/0xe80 [ 1374.547034] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1374.547062] ? iomap_iter_advance+0x177/0x1f0 [ 1374.547099] ? iomap_dio_bio_iter+0x8ac/0x1310 [ 1374.547126] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1374.547151] iomap_iter+0x55a/0x1020 [ 1374.547191] __iomap_dio_rw+0x6dd/0x1c90 [ 1374.547224] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1374.547267] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1374.547300] ? kasan_quarantine_put+0x84/0x1e0 [ 1374.547344] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1374.547380] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1374.547402] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1374.547441] iomap_dio_rw+0x40/0xa0 [ 1374.547466] ext4_file_write_iter+0xe0e/0x19f0 [ 1374.547506] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1374.547530] ? trace_kmalloc+0x1f/0xb0 [ 1374.547549] ? __kmalloc_noprof+0x274/0x680 [ 1374.547578] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1374.547619] iter_file_splice_write+0xa3a/0x11f0 [ 1374.547669] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1374.547729] ? lock_is_held_type+0x9e/0x120 [ 1374.547762] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1374.547797] direct_splice_actor+0x192/0x7b0 [ 1374.547833] splice_direct_to_actor+0x347/0x9d0 [ 1374.547866] ? __pfx_direct_splice_actor+0x10/0x10 [ 1374.547904] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1374.547938] ? lock_acquire+0x15e/0x2f0 [ 1374.547976] do_splice_direct+0x179/0x250 [ 1374.548007] ? __pfx_do_splice_direct+0x10/0x10 [ 1374.548039] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1374.548074] ? security_file_permission+0x22/0x90 [ 1374.548108] do_sendfile+0xa8e/0xdc0 [ 1374.548150] ? __pfx_do_sendfile+0x10/0x10 [ 1374.548184] ? __fget_files+0x20d/0x3b0 [ 1374.548233] __x64_sys_sendfile64+0x1d3/0x210 [ 1374.548260] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1374.548288] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1374.548329] do_syscall_64+0xbf/0x430 [ 1374.548360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.548383] RIP: 0033:0x7fb59c6b8b19 [ 1374.548401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1374.548423] RSP: 002b:00007fb599c2e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1374.548445] RAX: ffffffffffffffda RBX: 00007fb59c7cbf60 RCX: 00007fb59c6b8b19 [ 1374.548460] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1374.548474] RBP: 00007fb599c2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1374.548487] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1374.548501] R13: 00007fff3932da4f R14: 00007fb599c2e300 R15: 0000000000022000 [ 1374.548535] [ 1374.578881] serio: Serial port ptm0 [ 1374.616714] No source specified [ 1374.636841] No source specified [ 1374.648256] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1374.661363] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1374.679731] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1374.691865] mac80211_hwsim hwsim12 wlan1: left promiscuous mode 23:14:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x545d, 0x0) [ 1375.405070] serio: Serial port ptm1 23:14:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80c000, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000100)={0x0, 0x40, [0xc, 0xfffffffbfffffffd, 0xcb, 0xfffffffffffffffe, 0x400, 0x7f]}) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000040), &(0x7f0000000080)=0x4) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:14:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:14:44 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5441, 0x0) 23:14:44 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 43) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:14:44 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000001700)={r5, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @random="27deddaa8aab"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10) 23:14:44 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 30) 23:14:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5460, 0x0) 23:14:44 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) [ 1394.093815] No source specified [ 1394.107103] No source specified [ 1394.112450] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 1394.122851] serio: Serial port ptm0 [ 1394.138578] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1394.162558] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode 23:14:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1394.193403] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 1394.196470] FAULT_INJECTION: forcing a failure. [ 1394.196470] name failslab, interval 1, probability 0, space 0, times 0 [ 1394.198377] CPU: 1 UID: 0 PID: 10724 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1394.198411] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1394.198427] Call Trace: [ 1394.198435] [ 1394.198445] dump_stack_lvl+0xfa/0x120 [ 1394.198495] should_fail_ex+0x4d7/0x5e0 [ 1394.198518] ? __es_remove_extent+0x53f/0x1570 [ 1394.198561] ? __es_insert_extent+0xed2/0x1370 [ 1394.198596] should_failslab+0xc2/0x120 [ 1394.198623] kmem_cache_alloc_noprof+0x80/0x690 [ 1394.198658] ? __pfx___es_remove_extent+0x10/0x10 [ 1394.198702] ? __es_insert_extent+0xed2/0x1370 [ 1394.198739] __es_insert_extent+0xed2/0x1370 [ 1394.198793] ext4_es_insert_extent+0x438/0x1090 [ 1394.198829] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 1394.198853] ? lock_acquire+0x15e/0x2f0 [ 1394.198888] ? ext4_map_blocks+0x564/0x1510 [ 1394.198927] ? down_write+0x119/0x1f0 [ 1394.198959] ? __pfx_down_write+0x10/0x10 [ 1394.198993] ext4_map_blocks+0x808/0x1510 [ 1394.199025] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1394.199047] ? kmem_cache_alloc_noprof+0x270/0x690 [ 1394.199078] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1394.199112] ? jbd2__journal_start+0xf6/0x6b0 [ 1394.199156] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1394.199183] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1394.199210] ? ext4_convert_unwritten_extents+0x189/0x570 [ 1394.199245] ? ext4_meta_trans_blocks+0x256/0x310 [ 1394.199279] ext4_convert_unwritten_extents+0x1c3/0x570 [ 1394.199320] ? __pfx_ext4_convert_unwritten_extents+0x10/0x10 [ 1394.199373] ext4_dio_write_end_io+0x13a/0x710 [ 1394.199398] ? __pfx_ext4_dio_write_end_io+0x10/0x10 [ 1394.199426] iomap_dio_complete+0x14d/0x9e0 [ 1394.199459] iomap_dio_rw+0x73/0xa0 [ 1394.199485] ext4_file_write_iter+0x11eb/0x19f0 [ 1394.199526] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1394.199558] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1394.199602] iter_file_splice_write+0xa3a/0x11f0 [ 1394.199656] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1394.199720] ? lock_is_held_type+0x9e/0x120 [ 1394.199757] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1394.199794] direct_splice_actor+0x192/0x7b0 [ 1394.199832] splice_direct_to_actor+0x347/0x9d0 [ 1394.199868] ? __pfx_direct_splice_actor+0x10/0x10 [ 1394.199909] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1394.199947] ? lock_acquire+0x15e/0x2f0 [ 1394.199986] do_splice_direct+0x179/0x250 [ 1394.200019] ? __pfx_do_splice_direct+0x10/0x10 [ 1394.200054] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1394.200092] ? security_file_permission+0x22/0x90 [ 1394.200128] do_sendfile+0xa8e/0xdc0 [ 1394.200174] ? __pfx_do_sendfile+0x10/0x10 [ 1394.200211] ? __fget_files+0x20d/0x3b0 [ 1394.200260] __x64_sys_sendfile64+0x1d3/0x210 [ 1394.200290] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1394.200319] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1394.200364] do_syscall_64+0xbf/0x430 [ 1394.200391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1394.200416] RIP: 0033:0x7f7a32465b19 [ 1394.200435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1394.200460] RSP: 002b:00007f7a2f9ba188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1394.200483] RAX: ffffffffffffffda RBX: 00007f7a32579020 RCX: 00007f7a32465b19 [ 1394.200500] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1394.200515] RBP: 00007f7a2f9ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1394.200530] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1394.200545] R13: 00007ffe0bebc99f R14: 00007f7a2f9ba300 R15: 0000000000022000 [ 1394.200581] 23:14:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x40049409, 0x0) 23:14:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:14:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5425, 0x0) [ 1394.378429] No source specified [ 1394.413567] No source specified 23:14:44 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 31) 23:14:44 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 23:14:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:14:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x40086602, 0x0) 23:14:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) (fail_nth: 1) 23:14:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000011c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c653000872bf6c19fb262142e13bf20fcaa321f0fc68afe046edcbd8368977285be0520b014ff0a0d7467abe26e800deb43c3deeb7a4510888708cc5ba5afc0233b17e9d136dc1ea45da17e90b6b30da58a1701d6041c91e8a9c4e5aba8b578db963aff7050a924b3fc9b860c34a2284d7ea710ea644c29e4dfabfa28d4ff0b561fc02a4f17f02a8ac3850972a0ec880f00000000165fc35d8c83c9628ca3169e3958492bfaa9ba41bf6d881d"]) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) [ 1394.684597] serio: Serial port ptm2 [ 1394.685442] No source specified [ 1394.690710] No source specified [ 1394.740640] FAULT_INJECTION: forcing a failure. [ 1394.740640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1394.742418] CPU: 0 UID: 0 PID: 10756 Comm: syz-executor.5 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1394.742449] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1394.742463] Call Trace: [ 1394.742472] [ 1394.742481] dump_stack_lvl+0xfa/0x120 [ 1394.742528] should_fail_ex+0x4d7/0x5e0 [ 1394.742557] _copy_to_user+0x32/0xd0 [ 1394.742583] simple_read_from_buffer+0xe0/0x180 [ 1394.742621] proc_fail_nth_read+0x18a/0x240 [ 1394.742649] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1394.742676] ? security_file_permission+0x22/0x90 [ 1394.742705] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1394.742731] vfs_read+0x1eb/0xc70 [ 1394.742759] ? __pfx_vfs_read+0x10/0x10 [ 1394.742782] ? lock_release+0xc8/0x290 [ 1394.742819] ? __fget_files+0x20d/0x3b0 [ 1394.742866] ksys_read+0x121/0x240 [ 1394.742886] ? __pfx_ksys_read+0x10/0x10 [ 1394.742907] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1394.742956] do_syscall_64+0xbf/0x430 [ 1394.742982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1394.743006] RIP: 0033:0x7f0aa0b3e69c [ 1394.743023] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1394.743047] RSP: 002b:00007f0a9e0e0170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1394.743069] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f0aa0b3e69c [ 1394.743085] RDX: 000000000000000f RSI: 00007f0a9e0e01e0 RDI: 0000000000000004 [ 1394.743099] RBP: 00007f0a9e0e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1394.743114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1394.743127] R13: 00007ffc207d382f R14: 00007f0a9e0e0300 R15: 0000000000022000 [ 1394.743161] [ 1394.948138] serio: Serial port ptm1 23:14:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x5, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:14:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x40087602, 0x0) 23:14:54 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5450, 0x0) 23:14:54 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 23:14:54 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 44) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:14:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) 23:14:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x5, 0x4) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x3, r2, 0x675}) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:14:54 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 32) [ 1403.693976] No source specified [ 1403.694246] serio: Serial port ptm1 [ 1403.699700] serio: Serial port ptm2 [ 1403.704831] FAULT_INJECTION: forcing a failure. [ 1403.704831] name failslab, interval 1, probability 0, space 0, times 0 [ 1403.706364] CPU: 0 UID: 0 PID: 10781 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1403.706393] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1403.706405] Call Trace: [ 1403.706415] [ 1403.706423] dump_stack_lvl+0xfa/0x120 [ 1403.706465] should_fail_ex+0x4d7/0x5e0 [ 1403.706491] ? ext4_mb_new_blocks+0x64e/0x4580 [ 1403.706513] should_failslab+0xc2/0x120 [ 1403.706536] kmem_cache_alloc_noprof+0x80/0x690 [ 1403.706562] ? ext4_dirty_inode+0xf1/0x130 [ 1403.706589] ? __mark_inode_dirty+0x254/0x1470 [ 1403.706617] ? ext4_mb_new_blocks+0x64e/0x4580 [ 1403.706637] ext4_mb_new_blocks+0x64e/0x4580 [ 1403.706669] ? perf_trace_lock+0xb5/0x5d0 [ 1403.706703] ? ext4_ind_map_blocks+0x263/0x2330 [ 1403.706733] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 1403.706756] ? __pfx_perf_trace_lock+0x10/0x10 [ 1403.706783] ? ext4_get_branch+0x588/0x740 [ 1403.706817] ext4_ind_map_blocks+0x1850/0x2330 [ 1403.706851] ? unwind_next_frame+0x3bc/0x2540 [ 1403.706879] ? __pfx_ext4_ind_map_blocks+0x10/0x10 [ 1403.706927] ? lock_acquire+0x15e/0x2f0 [ 1403.706975] ? ext4_map_blocks+0x564/0x1510 [ 1403.707007] ? down_write+0x119/0x1f0 [ 1403.707027] ? __pfx_down_write+0x10/0x10 [ 1403.707047] ? lock_release+0xc8/0x290 [ 1403.707080] ext4_map_blocks+0xaf1/0x1510 [ 1403.707106] ? kmem_cache_alloc_noprof+0x270/0x690 [ 1403.707132] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1403.707160] ? jbd2__journal_start+0xf6/0x6b0 [ 1403.707196] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1403.707219] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1403.707241] ? ext4_iomap_begin+0x5b0/0xe80 [ 1403.707262] ? ext4_meta_trans_blocks+0x256/0x310 [ 1403.707290] ext4_iomap_begin+0xa5e/0xe80 [ 1403.707326] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1403.707351] ? iomap_iter_advance+0x177/0x1f0 [ 1403.707384] ? iomap_dio_bio_iter+0x8ac/0x1310 [ 1403.707408] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1403.707430] iomap_iter+0x55a/0x1020 [ 1403.707466] __iomap_dio_rw+0x6dd/0x1c90 [ 1403.707496] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1403.707535] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1403.707563] ? kasan_quarantine_put+0x84/0x1e0 [ 1403.707603] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1403.707634] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1403.707654] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1403.707688] iomap_dio_rw+0x40/0xa0 [ 1403.707711] ext4_file_write_iter+0xe0e/0x19f0 [ 1403.707745] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1403.707766] ? trace_kmalloc+0x1f/0xb0 [ 1403.707783] ? __kmalloc_noprof+0x274/0x680 [ 1403.707808] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1403.707845] iter_file_splice_write+0xa3a/0x11f0 [ 1403.707902] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1403.707983] ? lock_is_held_type+0x9e/0x120 [ 1403.708025] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1403.708067] direct_splice_actor+0x192/0x7b0 [ 1403.708116] splice_direct_to_actor+0x347/0x9d0 [ 1403.708160] ? __pfx_direct_splice_actor+0x10/0x10 [ 1403.708220] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1403.708268] ? lock_acquire+0x15e/0x2f0 [ 1403.708319] do_splice_direct+0x179/0x250 [ 1403.708363] ? __pfx_do_splice_direct+0x10/0x10 [ 1403.708406] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1403.708450] ? security_file_permission+0x22/0x90 [ 1403.708496] do_sendfile+0xa8e/0xdc0 [ 1403.708557] ? __pfx_do_sendfile+0x10/0x10 [ 1403.708606] ? __fget_files+0x20d/0x3b0 [ 1403.708674] __x64_sys_sendfile64+0x1d3/0x210 [ 1403.708713] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1403.708752] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1403.708813] do_syscall_64+0xbf/0x430 [ 1403.708849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.708882] RIP: 0033:0x7fb59c6b8b19 [ 1403.708905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1403.708934] RSP: 002b:00007fb599c2e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1403.708963] RAX: ffffffffffffffda RBX: 00007fb59c7cbf60 RCX: 00007fb59c6b8b19 [ 1403.708984] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1403.709002] RBP: 00007fb599c2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1403.709020] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1403.709038] R13: 00007fff3932da4f R14: 00007fb599c2e300 R15: 0000000000022000 [ 1403.709088] [ 1403.730041] No source specified 23:14:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x401c5820, 0x0) 23:14:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x4020940d, 0x0) 23:14:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x6, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:14:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00') r1 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) fcntl$setlease(r1, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0xffffffff}, 0x8) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) [ 1403.954365] No source specified [ 1403.956256] No source specified 23:14:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x7, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1404.051420] No source specified [ 1404.054306] No source specified [ 1404.062224] audit: type=1326 audit(1762816494.518:136): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10797 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdede60db19 code=0x0 23:14:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x80045432, 0x0) [ 1404.522890] serio: Serial port ptm0 [ 1404.863803] audit: type=1326 audit(1762816495.321:137): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10797 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdede60db19 code=0x0 23:15:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) getdents(r0, &(0x7f00000001c0)=""/4089, 0xff9) 23:15:05 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x8, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:15:05 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5451, 0x0) 23:15:05 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 45) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:15:05 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 33) 23:15:05 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 23:15:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x80045440, 0x0) 23:15:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) read(r0, 0x0, 0x5) [ 1414.864115] No source specified [ 1414.867409] No source specified [ 1414.877401] serio: Serial port ptm0 23:15:05 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x9, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1414.902602] serio: Serial port ptm1 [ 1414.937240] FAULT_INJECTION: forcing a failure. [ 1414.937240] name failslab, interval 1, probability 0, space 0, times 0 [ 1414.938199] CPU: 1 UID: 0 PID: 10821 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1414.938216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1414.938224] Call Trace: [ 1414.938229] [ 1414.938234] dump_stack_lvl+0xfa/0x120 [ 1414.938261] should_fail_ex+0x4d7/0x5e0 [ 1414.938277] should_failslab+0xc2/0x120 [ 1414.938293] __kmalloc_noprof+0xcd/0x680 [ 1414.938309] ? iter_file_splice_write+0x1cd/0x11f0 [ 1414.938332] iter_file_splice_write+0x1cd/0x11f0 [ 1414.938351] ? kfree+0x284/0x550 [ 1414.938364] ? read_iter_zero+0x120/0x310 [ 1414.938382] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1414.938400] ? __lock_acquire+0xc65/0x1b70 [ 1414.938432] ? lock_is_held_type+0x9e/0x120 [ 1414.938451] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1414.938469] direct_splice_actor+0x192/0x7b0 [ 1414.938488] splice_direct_to_actor+0x347/0x9d0 [ 1414.938506] ? __pfx_direct_splice_actor+0x10/0x10 [ 1414.938526] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1414.938545] ? lock_acquire+0x15e/0x2f0 [ 1414.938564] do_splice_direct+0x179/0x250 [ 1414.938581] ? __pfx_do_splice_direct+0x10/0x10 [ 1414.938597] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1414.938616] ? security_file_permission+0x22/0x90 [ 1414.938635] do_sendfile+0xa8e/0xdc0 [ 1414.938657] ? __pfx_do_sendfile+0x10/0x10 [ 1414.938676] ? __fget_files+0x20d/0x3b0 [ 1414.938700] __x64_sys_sendfile64+0x1d3/0x210 [ 1414.938715] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1414.938729] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1414.938751] do_syscall_64+0xbf/0x430 [ 1414.938765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.938778] RIP: 0033:0x7f7a32465b19 [ 1414.938788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1414.938800] RSP: 002b:00007f7a2f9db188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1414.938812] RAX: ffffffffffffffda RBX: 00007f7a32578f60 RCX: 00007f7a32465b19 [ 1414.938820] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1414.938827] RBP: 00007f7a2f9db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1414.938835] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1414.938842] R13: 00007ffe0bebc99f R14: 00007f7a2f9db300 R15: 0000000000022000 [ 1414.938860] [ 1414.973288] No source specified [ 1414.977986] No source specified 23:15:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x80086601, 0x0) 23:15:05 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 34) 23:15:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r1 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x20, 0x9, &(0x7f0000002640)=[{&(0x7f00000000c0)="b837f4b60681a8c497ed6eae4cce3de9b0f0824e3429099182d631f0dfaeb7cb3eea2a14d052f796b92e7456d01d1cd18bbe4975d033736163c92eb333075daaf8e80c5d6c916229163c2de8167bf0574ee8f21bdd85c6a208c69645671767b0b8586a70414aaeb1ddf1d7f3da4738a3b2896a50da9a0f75ccd32bf510073ce50baa0eb25ca98208bfcde3bf43d7c7731265b0b65fc2b8265ead1620d19c2205e5f820582cf5e2e423fcef468d2854d6df37d3d16172acfb39e7d5a58857f1b100b79ac677fe402d10d7a69574eddf80abb461eeff20bf03", 0xd8, 0x9}, {&(0x7f00000011c0)="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", 0x1000, 0xffffffff}, {&(0x7f00000021c0)="15684a0cd9210ac98e39358c9bcf0d3957db168a7b8265e891dedfe9d17d8fcc4be7bf303feec751ad26b4752026bfc73799c8543c2692fc6cbc917c875eb44033f07248fc2ed161fab3bb47a043b5c9f63a98cd67350bae48673e4c0a46ea71807f38bb462eca7783779e7e3308559dc89be73e4dede4bed281f4faa6b2aaa57cda03c386f63aa3487d2d753cb3e4cfacd5b1321d0a35dd6bec688804a20df770e6ec231e05f9520254a6467a75e5c74952bef0d79d063cfd6075cf463741e2d1510637def46d2074fc31b1a3efe569f8b481c18fa15480c660166bca30c808a082454d6a09835c6bebaf03b48b902754145ca5afcdd2f500598cbbf8", 0xfd, 0xffffffffffffff2c}, {&(0x7f00000022c0)="7d0b666dca189e4042e3b3256e2c7d05ab6c249202746d437d07e493bb14f7a9df5b5ed689cb9cb946b7154a10c5f4fda27c39f5ee8bffcbb0a3b748421b9286738467bb071442f3c9b40cd2f7bc8eb095cc661b1eb1831b2f2609", 0x5b, 0x4}, {&(0x7f0000002340)="2687b3f333391af0798fccc4bde779fd30712b7656f75703fe48927922868aeeadbfc8f62e953e0eca727a08feec7cedfa1ae397756b5876810c042d532deaf47bd90fc12a060bc495bc7787ee88ec570acc1e8d490aac84bddf50eeb0d1e146c2d64d50a7b7210543021c8e1591edff", 0x70, 0x4}, {&(0x7f00000023c0)="409f2f9bf7701e38aff94c21061147d52bfa01af8e6834cd576db8aa44f1d6c2f76cbb6142c59b2817e64f877a60bfc7a6bbff51bc3c94d3dca99a19a023104c10c292e6fe1b1b6c0eae43e21a2f0d9676500c23edf2710400c6ddc11e6d6ca987850986603ccd2227e5b7eef7667504e6e797dc9e7422202f309f337b1d3f0831fe18ac19c7573ece02f3b6eebfbc720b3d94547544a75ee34f10593183ff8402afaa", 0xa3}, {&(0x7f0000002480)="a59151361e2ef1cb5385b90b1ef3477f2a4626aa6fc92f80126ea8da5fe630a942ba274c3e62920f4e743a3802765232c7e456ab9b868afd5003a552660c63f6880027e2e6d2486cfb2c3ed36ea3633bbc7cfffb4c33fb09068813c9b9da6a2ddc7c034f4a3c78f1d24ca52d4e8a25188150c31409b8bc171d1fb588ba3621feb4321f29b92015b65d92ff490299888db695bfbb429018adf3dd45295c08cf0d5a3e09858d080192832188539be1cd241a", 0xb1, 0x3}, {&(0x7f0000002540)="9d762c714edcefafca914caf95c0bde32ab9543331cd7bb3a1b03faac50ae9da265b70f9f12d869dfab8d1bb6023bc576d45291e73c46361056724313dc3579ff9a94b1f2302bcbad9dcf5eacab7994dc070c3b82e8bcd959f31911de7c1e5390e6f173f7fa35a02873f891a7423d60178cffd596f2c4d4cc7f43d427c656c6b032d33063d729cdae6bb178fc68c001aca15c08dcb633cd421ff571e39e9d091ff754fc45d5d512203b3ab953a5bfd6e830f87ff46a6d5851174f2", 0xbb, 0x1}, {&(0x7f0000002600), 0x0, 0x87}], 0x8020, &(0x7f0000002840)=ANY=[@ANYBLOB='dots,euid>', @ANYRESDEC, @ANYBLOB="2c6f626a5f747970653de664002c736d61636b6673666c6f6f723d2c646f6e745f686173682c009928cda8302d7a92a68b4adb1946201f5ab863a81a6a2cde613fa54aa85a0e8223718c2d79456d7ff05b49b4cb3b1b10ff716cc6e82be29705cdcdd621b69adce10870e54e3d6b60458b8172a6441f9732c7b31363c2e79bbc2424c9997cf8496294523ca3d320ac90db5570970721cda87d15ace33a60aed3f936025cc822a622efae919655983e2f4103b6b3fab587a300bf7971db6421c2ad33173f1714c83caa"]) getdents(r1, &(0x7f00000001c0)=""/4096, 0xffffffffffffffed) 23:15:05 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xa, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1415.096424] No source specified [ 1415.102861] No source specified 23:15:05 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xb, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:15:05 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 23:15:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x80087601, 0x0) [ 1415.197266] No source specified [ 1415.198193] No source specified 23:15:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:15:05 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1415.287093] No source specified [ 1415.291201] No source specified [ 1415.690803] serio: Serial port ptm2 [ 1415.707514] serio: Serial port ptm3 23:15:15 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 35) 23:15:15 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 23:15:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x80111500, 0x0) 23:15:15 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 46) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:15:15 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0xb488fbdd1d4485c1) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:15:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x300, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:15:15 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5452, 0x0) 23:15:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) read(r0, 0x0, 0x6) [ 1424.898429] serio: Serial port ptm0 [ 1424.900795] serio: Serial port ptm1 [ 1424.975908] No source specified [ 1424.990731] No source specified 23:15:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x500, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1425.107546] FAULT_INJECTION: forcing a failure. [ 1425.107546] name failslab, interval 1, probability 0, space 0, times 0 [ 1425.108804] CPU: 1 UID: 0 PID: 10884 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1425.108848] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1425.108868] Call Trace: [ 1425.108879] [ 1425.108892] dump_stack_lvl+0xfa/0x120 [ 1425.108951] should_fail_ex+0x4d7/0x5e0 [ 1425.108984] ? jbd2__journal_start+0x193/0x6b0 [ 1425.109036] should_failslab+0xc2/0x120 [ 1425.109072] kmem_cache_alloc_noprof+0x80/0x690 [ 1425.109121] ? jbd2__journal_start+0x193/0x6b0 [ 1425.109165] jbd2__journal_start+0x193/0x6b0 [ 1425.109220] __ext4_journal_start_sb+0x325/0x5d0 [ 1425.109256] ? ext4_dirty_inode+0xa5/0x130 [ 1425.109304] ext4_dirty_inode+0xa5/0x130 [ 1425.109346] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1425.109388] __mark_inode_dirty+0x1b7/0x1470 [ 1425.109432] generic_update_time+0xcb/0xf0 [ 1425.109469] file_modified+0x1f0/0x230 [ 1425.109509] ext4_file_write_iter+0xca6/0x19f0 [ 1425.109558] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1425.109594] ? trace_kmalloc+0x1f/0xb0 [ 1425.109620] ? __kmalloc_noprof+0x274/0x680 [ 1425.109663] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1425.109717] iter_file_splice_write+0xa3a/0x11f0 [ 1425.109774] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1425.109846] ? lock_is_held_type+0x9e/0x120 [ 1425.109898] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1425.109946] direct_splice_actor+0x192/0x7b0 [ 1425.109999] splice_direct_to_actor+0x347/0x9d0 [ 1425.110043] ? __pfx_direct_splice_actor+0x10/0x10 [ 1425.110088] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1425.110121] ? lock_acquire+0x15e/0x2f0 [ 1425.110173] do_splice_direct+0x179/0x250 23:15:15 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000011c0)) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pread64(r2, &(0x7f0000000040)=""/246, 0xf6, 0x5) [ 1425.110213] ? __pfx_do_splice_direct+0x10/0x10 [ 1425.110251] ? __pfx_direct_file_splice_eof+0x10/0x10 23:15:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x801c581f, 0x0) [ 1425.110286] ? security_file_permission+0x22/0x90 [ 1425.110309] do_sendfile+0xa8e/0xdc0 [ 1425.110333] ? __pfx_do_sendfile+0x10/0x10 [ 1425.110353] ? __fget_files+0x20d/0x3b0 [ 1425.110380] __x64_sys_sendfile64+0x1d3/0x210 [ 1425.110397] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1425.110412] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1425.110436] do_syscall_64+0xbf/0x430 [ 1425.110451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.110464] RIP: 0033:0x7f7a32465b19 [ 1425.110475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1425.110489] RSP: 002b:00007f7a2f9db188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1425.110502] RAX: ffffffffffffffda RBX: 00007f7a32578f60 RCX: 00007f7a32465b19 [ 1425.110513] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1425.110521] RBP: 00007f7a2f9db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1425.110531] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1425.110541] R13: 00007ffe0bebc99f R14: 00007f7a2f9db300 R15: 0000000000022000 [ 1425.110560] [ 1425.122244] No source specified [ 1425.220805] No source specified 23:15:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x80811501, 0x0) 23:15:15 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) close_range(r1, r0, 0x2) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:15:15 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 47) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:15:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x600, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:15:15 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 36) 23:15:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0xc0045878, 0x0) [ 1425.428924] No source specified [ 1425.439356] No source specified [ 1425.730859] serio: Serial port ptm2 [ 1425.730990] serio: Serial port ptm3 23:15:25 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x545d, 0x0) 23:15:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) read(r0, 0x0, 0x500) 23:15:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x700, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:15:25 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 1) 23:15:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0xc0045878, 0x0) 23:15:25 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 37) 23:15:25 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 48) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:15:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r1 = getpid() pidfd_open(r1, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x81, 0x3, 0x52, 0xa9, 0x0, 0x0, 0x818, 0xd, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x42258, 0x5, 0x8f, 0x5, 0x800, 0xffff, 0x0, 0x0, 0xef8, 0x0, 0x140}, r1, 0x2, r0, 0x3) getdents(r0, &(0x7f00000001c0)=""/4091, 0xffb) [ 1435.601826] No source specified [ 1435.606597] serio: Serial port ptm0 [ 1435.613457] No source specified [ 1435.613521] serio: Serial port ptm1 [ 1435.621718] FAULT_INJECTION: forcing a failure. [ 1435.621718] name failslab, interval 1, probability 0, space 0, times 0 [ 1435.623578] CPU: 0 UID: 0 PID: 10928 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1435.623611] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1435.623625] Call Trace: [ 1435.623634] [ 1435.623644] dump_stack_lvl+0xfa/0x120 [ 1435.623691] should_fail_ex+0x4d7/0x5e0 [ 1435.623719] should_failslab+0xc2/0x120 [ 1435.623744] __kmalloc_cache_noprof+0x81/0x6b0 [ 1435.623775] ? __might_fault+0xe0/0x190 [ 1435.623807] ? alloc_pipe_info+0x10d/0x5a0 [ 1435.623832] ? find_held_lock+0x2b/0x80 [ 1435.623863] ? alloc_pipe_info+0x10d/0x5a0 [ 1435.623886] alloc_pipe_info+0x10d/0x5a0 [ 1435.623914] splice_direct_to_actor+0x78c/0x9d0 [ 1435.623955] ? __pfx_direct_splice_actor+0x10/0x10 [ 1435.623987] ? lock_acquire+0x132/0x2f0 [ 1435.624022] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1435.624057] ? lock_acquire+0x15e/0x2f0 [ 1435.624098] do_splice_direct+0x179/0x250 [ 1435.624128] ? __pfx_do_splice_direct+0x10/0x10 [ 1435.624160] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1435.624194] ? security_file_permission+0x22/0x90 [ 1435.624228] do_sendfile+0xa8e/0xdc0 [ 1435.624269] ? __pfx_do_sendfile+0x10/0x10 [ 1435.624303] ? __fget_files+0x20d/0x3b0 [ 1435.624348] __x64_sys_sendfile64+0x1d3/0x210 [ 1435.624375] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1435.624404] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1435.624445] do_syscall_64+0xbf/0x430 [ 1435.624470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.624494] RIP: 0033:0x7f20266ecb19 [ 1435.624511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1435.624533] RSP: 002b:00007f2023c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1435.624555] RAX: ffffffffffffffda RBX: 00007f2026800020 RCX: 00007f20266ecb19 [ 1435.624571] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1435.624590] RBP: 00007f2023c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1435.624610] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 1435.624625] R13: 00007ffcc2c01daf R14: 00007f2023c41300 R15: 0000000000022000 [ 1435.624658] 23:15:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0xc0189436, 0x0) 23:15:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x900, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:15:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) [ 1435.738712] No source specified [ 1435.744136] No source specified [ 1435.748041] FAULT_INJECTION: forcing a failure. [ 1435.748041] name failslab, interval 1, probability 0, space 0, times 0 [ 1435.749636] CPU: 1 UID: 0 PID: 10942 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1435.749666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1435.749680] Call Trace: [ 1435.749688] [ 1435.749698] dump_stack_lvl+0xfa/0x120 [ 1435.749744] should_fail_ex+0x4d7/0x5e0 [ 1435.749773] should_failslab+0xc2/0x120 [ 1435.749799] __kmalloc_noprof+0xcd/0x680 [ 1435.749829] ? iter_file_splice_write+0x1cd/0x11f0 [ 1435.749870] iter_file_splice_write+0x1cd/0x11f0 [ 1435.749906] ? kfree+0x284/0x550 [ 1435.749931] ? read_iter_zero+0x120/0x310 [ 1435.749970] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1435.750004] ? __lock_acquire+0xc65/0x1b70 [ 1435.750060] ? lock_is_held_type+0x9e/0x120 [ 1435.750098] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1435.750132] direct_splice_actor+0x192/0x7b0 [ 1435.750182] splice_direct_to_actor+0x347/0x9d0 [ 1435.750215] ? __pfx_direct_splice_actor+0x10/0x10 [ 1435.750253] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1435.750288] ? lock_acquire+0x15e/0x2f0 [ 1435.750325] do_splice_direct+0x179/0x250 [ 1435.750356] ? __pfx_do_splice_direct+0x10/0x10 [ 1435.750387] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1435.750422] ? security_file_permission+0x22/0x90 [ 1435.750456] do_sendfile+0xa8e/0xdc0 [ 1435.750498] ? __pfx_do_sendfile+0x10/0x10 [ 1435.750532] ? __fget_files+0x20d/0x3b0 [ 1435.750578] __x64_sys_sendfile64+0x1d3/0x210 [ 1435.750606] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1435.750633] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1435.750674] do_syscall_64+0xbf/0x430 [ 1435.750700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.750723] RIP: 0033:0x7f7a32465b19 [ 1435.750741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1435.750762] RSP: 002b:00007f7a2f9ba188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1435.750784] RAX: ffffffffffffffda RBX: 00007f7a32579020 RCX: 00007f7a32465b19 [ 1435.750800] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1435.750813] RBP: 00007f7a2f9ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1435.750827] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1435.750840] R13: 00007ffe0bebc99f R14: 00007f7a2f9ba300 R15: 0000000000022000 [ 1435.750873] 23:15:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xa00, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:15:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0xc020660b, 0x0) 23:15:26 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 38) [ 1435.947696] No source specified 23:15:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_bond\x00'}) fcntl$notify(r0, 0x402, 0x2571fc6d6b7a34d2) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) [ 1435.963090] No source specified 23:15:26 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 2) [ 1436.427622] serio: Serial port ptm2 [ 1436.432101] serio: Serial port ptm3 23:15:37 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5460, 0x0) 23:15:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xb00, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:15:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) read(r0, 0x0, 0x600) 23:15:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) r1 = getpid() pidfd_open(r1, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000100)=r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') fcntl$notify(r2, 0x402, 0x2571fc6deb7a34c0) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000040)) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x1000000000040, 0x600000) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f00000000c0)=0x6) getdents(r2, &(0x7f00000001c0)=""/4096, 0x1000) 23:15:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x8) 23:15:37 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 49) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:15:37 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 39) 23:15:37 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 3) [ 1446.893724] No source specified [ 1446.915467] No source specified [ 1446.917305] serio: Serial port ptm0 [ 1446.942324] serio: Serial port ptm2 23:15:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1020, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1446.987755] FAULT_INJECTION: forcing a failure. [ 1446.987755] name failslab, interval 1, probability 0, space 0, times 0 [ 1446.988846] CPU: 0 UID: 0 PID: 10991 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1446.988866] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1446.988875] Call Trace: [ 1446.988881] [ 1446.988886] dump_stack_lvl+0xfa/0x120 [ 1446.988918] should_fail_ex+0x4d7/0x5e0 [ 1446.988935] should_failslab+0xc2/0x120 [ 1446.988955] __kmalloc_cache_noprof+0x81/0x6b0 [ 1446.988972] ? __virt_addr_valid+0x1c6/0x5d0 [ 1446.988993] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1446.989016] ? __iomap_dio_rw+0x271/0x1c90 [ 1446.989031] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1446.989054] ? __iomap_dio_rw+0x271/0x1c90 [ 1446.989066] __iomap_dio_rw+0x271/0x1c90 [ 1446.989080] ? mark_held_locks+0x49/0x80 [ 1446.989102] ? kasan_quarantine_put+0x84/0x1e0 [ 1446.989117] ? kmem_cache_free+0x2a4/0x550 [ 1446.989137] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1446.989152] ? jbd2_journal_stop+0x184/0xe20 [ 1446.989181] ? ext4_dirty_inode+0xf1/0x130 [ 1446.989200] ? __mark_inode_dirty+0x254/0x1470 [ 1446.989220] iomap_dio_rw+0x40/0xa0 [ 1446.989235] ext4_file_write_iter+0x11eb/0x19f0 [ 1446.989258] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1446.989274] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1446.989298] iter_file_splice_write+0xa3a/0x11f0 [ 1446.989326] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1446.989361] ? lock_is_held_type+0x9e/0x120 [ 1446.989398] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1446.989418] direct_splice_actor+0x192/0x7b0 [ 1446.989439] splice_direct_to_actor+0x347/0x9d0 [ 1446.989458] ? __pfx_direct_splice_actor+0x10/0x10 [ 1446.989480] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1446.989500] ? lock_acquire+0x15e/0x2f0 [ 1446.989521] do_splice_direct+0x179/0x250 [ 1446.989539] ? __pfx_do_splice_direct+0x10/0x10 [ 1446.989558] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1446.989578] ? security_file_permission+0x22/0x90 [ 1446.989598] do_sendfile+0xa8e/0xdc0 [ 1446.989623] ? __pfx_do_sendfile+0x10/0x10 [ 1446.989643] ? __fget_files+0x20d/0x3b0 [ 1446.989670] __x64_sys_sendfile64+0x1d3/0x210 [ 1446.989686] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1446.989702] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1446.989726] do_syscall_64+0xbf/0x430 [ 1446.989741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.989758] RIP: 0033:0x7f7a32465b19 [ 1446.989769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1446.989784] RSP: 002b:00007f7a2f9ba188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1446.989798] RAX: ffffffffffffffda RBX: 00007f7a32579020 RCX: 00007f7a32465b19 [ 1446.989808] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1446.989815] RBP: 00007f7a2f9ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1446.989824] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1446.989833] R13: 00007ffe0bebc99f R14: 00007f7a2f9ba300 R15: 0000000000022000 [ 1446.989852] [ 1447.016306] FAULT_INJECTION: forcing a failure. [ 1447.016306] name failslab, interval 1, probability 0, space 0, times 0 [ 1447.018325] CPU: 1 UID: 0 PID: 10992 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1447.018358] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1447.018372] Call Trace: [ 1447.018396] [ 1447.018405] dump_stack_lvl+0xfa/0x120 [ 1447.018449] should_fail_ex+0x4d7/0x5e0 [ 1447.018477] should_failslab+0xc2/0x120 23:15:37 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1447.018502] __kmalloc_noprof+0xcd/0x680 [ 1447.018532] ? alloc_pipe_info+0x1e8/0x5a0 [ 1447.018562] alloc_pipe_info+0x1e8/0x5a0 [ 1447.018589] splice_direct_to_actor+0x78c/0x9d0 [ 1447.018623] ? __pfx_direct_splice_actor+0x10/0x10 [ 1447.018654] ? lock_acquire+0x132/0x2f0 [ 1447.018691] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1447.018725] ? lock_acquire+0x15e/0x2f0 [ 1447.018761] do_splice_direct+0x179/0x250 [ 1447.018792] ? __pfx_do_splice_direct+0x10/0x10 [ 1447.018823] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1447.018857] ? security_file_permission+0x22/0x90 [ 1447.018891] do_sendfile+0xa8e/0xdc0 [ 1447.018931] ? __pfx_do_sendfile+0x10/0x10 [ 1447.018972] ? irqentry_exit+0x17b/0x650 [ 1447.019008] ? irqentry_exit+0x17b/0x650 [ 1447.019040] ? trace_irq_disable.constprop.0+0xc2/0x100 [ 1447.019081] __x64_sys_sendfile64+0x1d3/0x210 [ 1447.019109] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1447.019138] ? trace_irq_enable.constprop.0+0x26/0x100 [ 1447.019178] do_syscall_64+0xbf/0x430 [ 1447.019203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.019225] RIP: 0033:0x7f20266ecb19 [ 1447.019243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1447.019265] RSP: 002b:00007f2023c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1447.019287] RAX: ffffffffffffffda RBX: 00007f2026800020 RCX: 00007f20266ecb19 [ 1447.019303] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1447.019316] RBP: 00007f2023c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1447.019330] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 1447.019343] R13: 00007ffcc2c01daf R14: 00007f2023c41300 R15: 0000000000022000 [ 1447.019376] 23:15:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) fcntl$notify(r0, 0x402, 0x8) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040), 0x2) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:15:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x80000) 23:15:37 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 40) 23:15:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1643, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:15:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:15:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r2, 0x4b4b, 0x0) fcntl$notify(r2, 0x402, 0x80000031) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) r3 = pidfd_getfd(r0, r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f0000000040)) [ 1447.744761] serio: Serial port ptm0 23:15:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x1000000) 23:15:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2010, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:15:46 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x40049409, 0x0) 23:15:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) read(r0, 0x0, 0x5000000) 23:15:46 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 51) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:15:46 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 41) 23:15:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'veth0_to_hsr\x00'}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dns_resolver', 0x400, 0x30) r2 = fsopen(&(0x7f00000000c0)='btrfs\x00', 0x1) close_range(r1, r2, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x4b4b, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_io_uring_complete(0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002500), 0x482240, 0x0) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r7, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) io_submit(0x0, 0x7, &(0x7f0000002700)=[&(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f0000000140)="e6aeb68f5c34e22ab8c6754a9a48db4d7918245f162fe430bae64e0adc2bc956add871acb79a53a0e76372e4806ba90b23d33b0fab7ae4228e88901717609d6c6e287c05c5650ede13f77094c056466b80548fdb0e34d7c07d4814eba060b324724df27cf8e7484f87ddd3135017b090db1a9e90", 0x74, 0xffffffff, 0x0, 0x2, r3}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x8, 0x7, r2, &(0x7f0000001200)="24aa1e8b0e71d5867d9a27408ae105eb58de63189f4a73e1be3b4384568861818796830fa9e43b6eb25923e836feb776664927e10e2762064431d8dd0076d5b169ba95c48f1d36c08bb2ebb19afb41edeb0a137a96fa664e2386e645028daa35f0e21e20e9c1dbd273a16242a63e7ff78e371442a3cabecdd9b4fa571ba6862fd437978e0640fae9a32b7e02e79a9137d7f6ec375956893c35368eb26985036c690f534fd3dc3cd4753bc7c338b362b66251cd47a6d127587dd60b860acb249b9c680906ed9a4453ba39a3db975da9500ee64febe46a0703416ce4d1212b2b3d0eabe5178ccf9ed87d255c39c9d55ba074d70c3f1fc9eb5e8ca270f0fdba8df381601773dbf184061285897589c4d8eb8bc6dfdf7310eb41738501a77ee912fd90fb5d8c82ef9808034bccc072e19bec694aa502568c148d5c333ed6bab30b9253f452ea957d09217fa535c30fde1b8eab460d89340524d88bbe51f71da801d48f389ea25732c296041bf916c52ed24d5f174503f6517ea55b2ebe785e8058153d881abe581700f1203b6d755183af0d4b0a428d416399561a14c0f7423158fd9195ba750dea2b8a803ae53e31224800ef6be61eb72f8c5de999c051e3c673f198f1ecc414383b363b3b5d9241ecb43fa84cce14537c907b1d028b4b2a6c643ad126b3cbee7a763cdbf4736f3499b83531250240ffa4b08613664b76833ea7176b0031f4d473a7bd4e39219eb5be02a024c55dce4e4fc2ffcf702c8fdc05d6c16aa61ea1795449a981c1d58e217850c354f7e98ecb18681b40a3b366121cc4f2eb271f1ddc9bb63bffe7fd76c19c7f24756a3ec203d29c202955fd982a9c304039cad21bfb0a8ca272b2ffdbd8229459b2f3513deccb1480d247a04f9e26b059e4e326efe732c031ff7f17f57715f6bf5e656928e6bb1d4523f8196deb263518c8e0ced1aa7724240805c55af2831f4308a40f516f74384e106680e8cbdc5739e20d8bcfdf9302ffff4cdb678f62be0229ad33908fd20514eb35937838c71b89763fdbd5554e6634a79b0573e6bba33b31bd5e0d2178b6ab7369a7dcf5370622448575d51c3c7825c1db2a8329e6f409683948d7c5fbcb24945ac02b69da5a9f092ecb4a6892a27c38734cc4ec8556e4a7b991020c81578a156592f7ba4db55e6f3a0f755d6af1e6419ddd7c3b6dbc38caf7663ee6c7f942de6fd7fa314f8f00848cde19b387d9aea6b2cb875d0387bb0718a9462be64c0028735a7dc5ea2024551080d32d85d317cc9e071230391319a389e57c7cfcbf1d653d55d2a982a74ab3b14ffea6efdd9dea58bc284c07b4e05fd56a03d7cf4fafe25afce203f457ae7ca6476784320b3c6a097d45169d2ab750281182215e395e2ebec439e7e878fb8a436b8ca78fc4254f58abe4fce8d56693b9cc1c38eea48048689247a43eb934d1eb326cf84d0237e659a8d9fe3d37f68d2aa32c05a99a62bf822c0e499dd88dfb54fd5c0f00320760f1ec01171e1902ebd8431fc7f90ec07fc4be773051c0270b5b857f7c82be337f89d4c7907282e784717a0e190df0054c8d1361bbe3842839fbec3ab18d85487cff0d8db934f0b4c5e25b2c697687a91fd242a78c33c4f16125ba239a7590cdc1fe027bf615ae751c3e9e4bec95a114bb7f051a2ff52cff41c2a6c1183237be0462b4176e28a71cb5f17453d1421006f2e8f1e6c57c48eeaa31f1660d6472c162e236d505974d0aa2cde4343398b3dd830a591b6cc6f70e9a7717f9b4e19038dd46b33c4fdea7d761f36c5247c5d5e81e69c5960b31009d46628b77935c13ad850ec285cbc482c2d9e03ca2e0309b129e664173b556771a0418f983bf08a999ae9beabc70079f013a2ee58c2f15151d3cf36a24c932a79042c7ae986d2d2eb65b8537a533d48df1e56969a6f8332e319d2765c9fe9794c66cf947974b9233b2e077103d48afeced6181d2b1367db219a23c2b776713d3fae3912dc4bf0bf3bf1c6b962e2de3186babf228c6a4f2ffa63254f5bcc8ac741eaf2bb4fbb5dd7be2b199fb4187ec2ef6f6a7018d891275152edc5de666fe292ba9930b27dbabf1b6b9be6f4fe94c374f0653771d4d5a649a35bc60fcc025bca21b22a011b906b07f7b8b1d8a557fe09b9780f393f573fef57633195dbef6285a89b1f213422462c041da91119ec0125f73b1656247e20bf60882f1c6792273fe692048c0d4eb6d061c1bac5711e00ec742169a1ae2f966d85773d5d1a4e9032945a6ba8d1cf43b6575e7d8670d9f993b490ee3e68712ad761eeeccdce3ec095edc18d561f4fa6b158b45016407368e22f110264d40e5f5f3350d855adb203de7415fdee2b26884120b8e3e42958116bfd226b0f4bdcecc7284dbe2c780ed0b23c63072a44963257f2f071b862f4a93f890293ace09a6e2c86fc5fbb6240c1568f1e2e2b21b0e5af1143c69161a56b2ef0e04bf749e62541089fc65fc83ad3e9974c1771192dd282698373856116f9ad9e1b96d8da75a1b6cfe81a54d80817e215d3e410cc52c3203582b4a87866512dd4cfd05c456522b55a832c1568ee6aebc91641873c7b9a46ed83f58f65dc72d15cc4d557b5987c8f1117637181e09eea93e5a0f4efc7231441e0aaf24b04cc1651db1f80252f1dc59ce3b7ee3990d3cdf9dd48677439abf3385e17398a065afe23f19bab6928f0d097cccb9b7bb7e51923beb94e555e97ea48f1fc9f6617a21781626eb0ef8c786c10675b307753d12588681bf1e22eb8427f7bc80159b0ddff08d2fd76bd87895c3a795d01a1dc41100f2d7c185613d59c3408003436611f977eac4941830cd28fd2e3fb3d12aee5195803bc87e809122707b202a92df9b19e98b9c871b0492845b7a8df40102858d4a0496b5236a233dcd06fac22d39ae7875c95ecccb1e3b4260e0b511b185af91bc715825e06f4709e5131782aba3c535b510088165cd2b53d92b383b181c1a6948376d5f0e820a06447d2e018c98ffa4862932ed04c2fb68a87738686e1ad9a74a1710c53a27b5b11d345f4d1ca4ab6db0910237cd594f90c8b676a7ecbb1364180387da8ea2ff962a242824ca97c94693a8d60676dfbbc2d51764f16edf65a4671ed1b30702332cfba9deddc0a70e785b676a674630cf62a315c4986302a46bbc086391cb65438d2008a8f9d850ace603101825016b56308ed0c5dade63a4f83bd6c9a64781b5df338c6c82495340ad24bc3130864c4c04a64c5ee7ab80eabfe019fe41d17f2912b3629513234c957e1d743f64bfca4debad9301b1e6394e166958ab11e7da792c569d49cb2c08389ea0c130ccc342c35792e179140558e15eaa76871a1343f552ec11638e4c87b7f34b02a5fa06699e7605c6227b810e172002c56b3eb331f4ffc0d3c2c0eed42db7f3481cd41b8d530a5a50f5b6db025268fe14a975fe87fdbd68070e6d05b3e8283065580234166bf1a7a15c4142d3867285edb82502e910ffe1e0c788a2baa0cac21917d406f9de8dfa3727c276cee4ee1530ede1abe1f003e884895d39c9b186aad5c219235b734d09ecc15fb557a13e21eea5fe7aebe9fabfae99bb3c58851c0f62c1d79e0e0776e5a93f74f886659834a57b4f5271d174fc63cc7483b85fdb4c0ff1691a4914edb94833b031e85e9670f535c5c5fc23102b2e964418f733c5012dedc342b402765b96511bf61a59ce1fdb8aaf4d556534d3b30c0bf3a172caea47fea31ea5c750cc79066591d21401f8e1b8c8642aa76b7c008850b52f868de96191365cee7355df75e574459e66ea284c6dfc446296381e72d3a159a038087907950f432adbd7e8a14327891f1d30609dc567853e1cb06ed6a2e8da41780c9cb7dbbde7fe51b977194836a37b61ebe2d2de52fbbbaafcc15a844366223c94801767bb3afb72b8ba5e2c75184d2dca8a32b051bb23f19e7132108cf67f9d35e7f8f41cdd36aebe12249f079ba1fdec3be116c9d9d23b031fc486001b07fec1ff9e0dc28022d4748ac0fc307627241be3afa1bccf5ed634f561420b00dece61a6891a37301c2db2e1f10874a8bcf06f9ccad43444f8943503c8199a6f36c87d8a510b10fb99590c80329ab78cde6052e4e989cf2348b77bb3628d2ab22751327537467793b21654fe7eb16e8a0446efe595737910d61bcaf22941117c7e3d06ab5918313f08b9291a9786d8fa3affe27f0121a952397cc7e94c3090ae401268330597ccd023b52276905224f6f1627ad207f68feedcfd128c3ad9370bd1335533fea7f9e04ec6054db7115f46b98a3aa82a8d664338b8dbc0c8cc312900755d2fe235e46727149940ce7353607cf12323a01df705ee368f9edaad41c13c6cbf0653b51cc2b85f363a4786fdcf00f514f1ed7fb8a47025bcf9131e35f928aecef1a6c9c41743abdf21b7c0f762a21df04f4c8795231916ec607aad45cc2dd900d15da173434c6e7ade423d1121d4cefd2205a15d82cd0e556f4da61d70ecb9ad62d552a319373571c4e612bf1210bdc227aafd0c74b6c3428394c3ca66bdca471dd358b52e124c76614344382cd64c5ce235086686a53c8ddc27a37a7a6c05e9297ea5404f198a4941efb2c162c3420a4aebcdfcf6788f3222fee007537c7e4cdb633d537d6231dc8872ae1fd571bb5ba1a0fbec5b7687e57720586aff7ec103423d39d0901e10a17c03f056514631d6fbf54aba2284d7826fe3b64d94d8898ddaff5d04f557a7ada8e71050bd23274e92e4a5b0d86db52191be8bec1f0b94762b59a9bab31629e01b2689368227f23801a2f785e709e21d113143b77600d804e8446864cbd1d82910008248e7c91a14e1e7277a457f4f8e3e654359181f96ce9b2fc8217f564198166b7d1d4594079d5c03912202ef6c2bd206f2139de171644b41e12d28a169a4338c086b87572c6612f2079dadc2484f3e7addb36ef553d6aded4603ffdfb1bcbf77de2f58dbbfe9d3b34ec88807953daccf1964e9b4f5b742916361af0ccd8db0d46d6a0c9a6c64e14edd4d29992d2305ca842a9d137866b4bad23af415a0a17cfdf952a5ff61410564e78b0a0de5f9eead939e9764af64db92c11bded7a64d13c107ad3ff7525b95d18e4ce1f26a34e7821f1c21f0785a4d3add85fe9f7202d9a21dd1a6a9463ca0b9bfecf36cf2e9a9e758b236f884221b36865facfba222eb8585a4346823fca5063b6e5202607703be424485538920679604e933a5b689d6c46212590e3387bc1be86c92a5133bab34a17645f362f94326c7a965adcf8de293fe55b6bbd2c1b0d2d704473f8eca1fe1d1d5996057fec4b3664be91c3d27927b8bfe883df276dc4e4bc8d00d35210966954e1b128821bf25566700be785923bf8e2b74a6761c613f9dd717724f5022739ed328d6e28a383a040b6075108e674a02b101ea6f5a9cbd2058df30a37cc8207773bfabe98bbfaaa436a5945727e8a06ef661d96ffa50a98fb7936d0ac94cf4c95b2abe442dbfd2240caf12cff2a696a1f58ddd4c1afb482639fc8684e923320d1d5067ad887ada8a500b030d6eed993da9f868ce801765f0a9e3837e1105a2d2197cbdf6fefb020b30c5f9af085f140eff67aca21b050d46dd57e8c6474761b1821ded855fe165d69b83bb862e61346a239d382c639b3babafb247cae1bf264a75558fc0ba051936a2d520699fcaa229b89fb47438e6eb2eabca39ab7b8cd6d4a41e1e0c8ea6a470cb1f12a64b8c8783dae323b0e525504859576de94a6016d32c0de60bc15e436dc678811782dc2bde262a553df47d", 0x1000, 0xffffffffffff0000, 0x0, 0x3, r0}, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x3, 0x6, r0, &(0x7f0000002240)="b30a3ec460fbba9db95fd5f59722267c9c204da5dc36d5bc2ac13e08064401d4ce821a4e9c2701e71c85b21db2a9b3ec6165945ef0fdfc1c8037d50da8cca912d880cf818ad191d30d4f1211ce198bcf8a4eec222f2d978a7e3130f0e007ef55e293457cc9ea9fe96533572c63292519a151ca0875a52f16bae7a11c225a479a229b57aa556ab66644ca7f", 0x8b, 0x7, 0x0, 0x2}, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x5, 0x400, r1, &(0x7f0000002340)="e82db352a6c8a98e110271334e517f2dfdc9ce451df30bedfaad0626fbcbde5e6b89e7dfa8bb933548b506064b3664ad007886825301a7e38bc2ce0bd058ca944387ae99cb9d6c94ab912e6db2f7c989f66be3d8a053e2957573ecb594f5c3852e7afe2074f2f1298a22b013b01d2e3c8d88acd8225b6080a781c3b56a9d20bedcc2297861e0bef526624bf219f0215f90445e063d695d91970b28b618e69d8a7699ae7ca21d52a190133c8b531e859d687ad055fcd85ef396fdfef222d42d2c73bf0d3cfa03377c1b90cb01b30dd2f68383bfd9eca3ffa3f25ccd16e492c85463e009eaa272ac8bcb7edb28677058", 0xef, 0x9, 0x0, 0x2, r0}, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x7, 0x40, r4, &(0x7f0000002480)="1b38b1872d80", 0x6, 0x7e, 0x0, 0x2, r5}, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x1, 0x800, r6, &(0x7f0000002540)="a4d4b93e7e4c64d98f93bec5a42aeecce0d500f40b96b23b6109e1d3355ff003a3c7968c490d63b8dde9cc9f9b39317529880473e21e2f8217e995aac37f155ff338550d97712fdfc3f2c27c77d0bfd446faba0ee8a2e320f13e2e2ed15cdf54733746f1d8e5735e11f37b78757e413cda35c7deffee6b7bc5523ecfd1ba966a2df3029a2a57a9a035688dd8046537504dcb120013ff297188d694b54a2d5a4d08adba3a7da84b701555604711b6b8947cb0ecca75b39cfc2f639e9abc7d5b44f634b7b170154a9d6a445e", 0xcb, 0x5, 0x0, 0x0, r7}, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x5, 0x2c, r8, &(0x7f0000002680)="b640f0a7798b263ddb", 0x9, 0x2, 0x0, 0x1}]) r9 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) getdents(r0, &(0x7f00000001c0)=""/4078, 0xfee) 23:15:46 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 4) 23:15:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0xfdfdffff) [ 1456.541390] serio: Serial port ptm0 [ 1456.548381] serio: Serial port ptm1 23:15:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4316, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1456.607411] FAULT_INJECTION: forcing a failure. [ 1456.607411] name failslab, interval 1, probability 0, space 0, times 0 [ 1456.609127] CPU: 1 UID: 0 PID: 11043 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1456.609158] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1456.609172] Call Trace: [ 1456.609180] [ 1456.609189] dump_stack_lvl+0xfa/0x120 [ 1456.609235] should_fail_ex+0x4d7/0x5e0 [ 1456.609262] ? jbd2__journal_start+0x193/0x6b0 [ 1456.609302] should_failslab+0xc2/0x120 [ 1456.609327] kmem_cache_alloc_noprof+0x80/0x690 [ 1456.609360] ? lock_is_held_type+0x9e/0x120 [ 1456.609400] ? jbd2__journal_start+0x193/0x6b0 [ 1456.609434] jbd2__journal_start+0x193/0x6b0 [ 1456.609474] __ext4_journal_start_sb+0x325/0x5d0 [ 1456.609502] ? ext4_iomap_begin+0x5b0/0xe80 [ 1456.609527] ? ext4_meta_trans_blocks+0x256/0x310 [ 1456.609557] ext4_iomap_begin+0x5b0/0xe80 [ 1456.609598] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1456.609625] ? mark_held_locks+0x49/0x80 [ 1456.609662] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1456.609695] ? __create_object+0x59/0x80 [ 1456.609728] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1456.609753] iomap_iter+0x55a/0x1020 [ 1456.609795] __iomap_dio_rw+0x6dd/0x1c90 [ 1456.609836] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1456.609894] ? ext4_dirty_inode+0xf1/0x130 [ 1456.609923] ? __mark_inode_dirty+0x254/0x1470 [ 1456.609964] iomap_dio_rw+0x40/0xa0 [ 1456.609990] ext4_file_write_iter+0x11eb/0x19f0 [ 1456.610029] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1456.610059] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1456.610099] iter_file_splice_write+0xa3a/0x11f0 [ 1456.610149] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1456.610209] ? lock_is_held_type+0x9e/0x120 [ 1456.610242] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1456.610277] direct_splice_actor+0x192/0x7b0 [ 1456.610312] splice_direct_to_actor+0x347/0x9d0 [ 1456.610345] ? __pfx_direct_splice_actor+0x10/0x10 [ 1456.610383] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1456.610417] ? lock_acquire+0x15e/0x2f0 [ 1456.610454] do_splice_direct+0x179/0x250 [ 1456.610484] ? __pfx_do_splice_direct+0x10/0x10 [ 1456.610516] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1456.610551] ? security_file_permission+0x22/0x90 [ 1456.610598] do_sendfile+0xa8e/0xdc0 [ 1456.610643] ? __pfx_do_sendfile+0x10/0x10 [ 1456.610676] ? __fget_files+0x20d/0x3b0 [ 1456.610722] __x64_sys_sendfile64+0x1d3/0x210 [ 1456.610749] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1456.610776] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1456.610817] do_syscall_64+0xbf/0x430 [ 1456.610842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1456.610866] RIP: 0033:0x7f7a32465b19 [ 1456.610884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1456.610905] RSP: 002b:00007f7a2f9ba188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1456.610927] RAX: ffffffffffffffda RBX: 00007f7a32579020 RCX: 00007f7a32465b19 [ 1456.610943] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1456.610957] RBP: 00007f7a2f9ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1456.610970] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1456.610984] R13: 00007ffe0bebc99f R14: 00007f7a2f9ba300 R15: 0000000000022000 [ 1456.611018] [ 1456.651732] No source specified [ 1456.677447] No source specified 23:15:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xedc0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:15:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0xfffffdfd) 23:15:47 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 42) 23:15:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) fcntl$notify(r1, 0x402, 0x15) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 23:15:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:15:47 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 52) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1457.365399] serio: Serial port ptm2 [ 1457.371859] serio: Serial port ptm3 23:15:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) read(r0, 0x0, 0x6000000) 23:15:56 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x40086602, 0x0) 23:15:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x2571fc6deb7a34c0) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x1}, 0xb) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) close_range(r1, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x80000001}}, './file0\x00'}) sendmsg$nl_xfrm(r3, &(0x7f00000011c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@delpolicy={0x68, 0x14, 0x200, 0x70bd25, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0x4e23, 0x7, 0x4e22, 0x8001, 0xa, 0xa0, 0x90, 0x3c, 0x0, r2}, 0x6e6bbd, 0x2}, [@extra_flags={0x8, 0x18, 0x84}, @tfcpad={0x8, 0x16, 0x906}, @XFRMA_IF_ID={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20040041) 23:15:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x8000000000000) 23:15:56 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 5) 23:15:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xe0ffff, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:15:56 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 43) 23:15:56 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 53) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1466.443779] FAULT_INJECTION: forcing a failure. [ 1466.443779] name failslab, interval 1, probability 0, space 0, times 0 [ 1466.444799] CPU: 1 UID: 0 PID: 11080 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1466.444816] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1466.444824] Call Trace: [ 1466.444829] [ 1466.444834] dump_stack_lvl+0xfa/0x120 [ 1466.444863] should_fail_ex+0x4d7/0x5e0 [ 1466.444879] should_failslab+0xc2/0x120 [ 1466.444894] __kmalloc_noprof+0xcd/0x680 [ 1466.444911] ? ext4_find_extent+0x7f5/0xa00 [ 1466.444932] ext4_find_extent+0x7f5/0xa00 [ 1466.444957] ext4_ext_map_blocks+0x1cc/0x5f30 [ 1466.444979] ? lock_release+0xc8/0x290 [ 1466.445005] ? unwind_next_frame+0x3bc/0x2540 [ 1466.445018] ? do_syscall_64+0xbf/0x430 [ 1466.445031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1466.445045] ? kernel_text_address+0x11/0xc0 [ 1466.445067] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1466.445088] ? __pfx_perf_trace_lock+0x10/0x10 [ 1466.445109] ? lock_acquire+0x15e/0x2f0 [ 1466.445126] ? ext4_map_blocks+0x564/0x1510 [ 1466.445146] ? down_write+0x119/0x1f0 [ 1466.445159] ? __pfx_down_write+0x10/0x10 [ 1466.445176] ext4_map_blocks+0x62d/0x1510 [ 1466.445192] ? kmem_cache_alloc_noprof+0x270/0x690 [ 1466.445208] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1466.445225] ? jbd2__journal_start+0xf6/0x6b0 [ 1466.445248] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1466.445262] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1466.445276] ? ext4_iomap_begin+0x5b0/0xe80 [ 1466.445289] ? ext4_meta_trans_blocks+0x256/0x310 [ 1466.445306] ext4_iomap_begin+0xa5e/0xe80 [ 1466.445319] ? __pfx_perf_trace_lock+0x10/0x10 [ 1466.445344] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1466.445358] ? mark_held_locks+0x49/0x80 [ 1466.445377] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1466.445394] ? __create_object+0x59/0x80 [ 1466.445413] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1466.445426] iomap_iter+0x55a/0x1020 [ 1466.445450] __iomap_dio_rw+0x6dd/0x1c90 [ 1466.445468] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1466.445493] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1466.445510] ? kasan_quarantine_put+0x84/0x1e0 [ 1466.445535] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1466.445554] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1466.445566] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1466.445587] iomap_dio_rw+0x40/0xa0 [ 1466.445601] ext4_file_write_iter+0xe0e/0x19f0 [ 1466.445622] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1466.445635] ? trace_kmalloc+0x1f/0xb0 [ 1466.445646] ? __kmalloc_noprof+0x274/0x680 [ 1466.445661] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1466.445684] iter_file_splice_write+0xa3a/0x11f0 [ 1466.445711] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1466.445744] ? lock_is_held_type+0x9e/0x120 [ 1466.445762] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1466.445781] direct_splice_actor+0x192/0x7b0 [ 1466.445800] splice_direct_to_actor+0x347/0x9d0 [ 1466.445818] ? __pfx_direct_splice_actor+0x10/0x10 [ 1466.445839] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1466.445857] ? lock_acquire+0x15e/0x2f0 [ 1466.445877] do_splice_direct+0x179/0x250 [ 1466.445893] ? __pfx_do_splice_direct+0x10/0x10 [ 1466.445911] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1466.445930] ? security_file_permission+0x22/0x90 [ 1466.445949] do_sendfile+0xa8e/0xdc0 [ 1466.445973] ? __pfx_do_sendfile+0x10/0x10 [ 1466.445991] ? __fget_files+0x20d/0x3b0 [ 1466.446017] __x64_sys_sendfile64+0x1d3/0x210 [ 1466.446032] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1466.446047] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1466.446069] do_syscall_64+0xbf/0x430 [ 1466.446082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1466.446095] RIP: 0033:0x7f7a32465b19 [ 1466.446104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1466.446117] RSP: 002b:00007f7a2f9db188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1466.446129] RAX: ffffffffffffffda RBX: 00007f7a32578f60 RCX: 00007f7a32465b19 [ 1466.446138] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1466.446145] RBP: 00007f7a2f9db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1466.446153] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1466.446161] R13: 00007ffe0bebc99f R14: 00007f7a2f9db300 R15: 0000000000022000 [ 1466.446179] 23:15:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1466.529412] serio: Serial port ptm0 [ 1466.539774] serio: Serial port ptm1 [ 1466.556250] No source specified [ 1466.557626] No source specified 23:15:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1466.579701] FAULT_INJECTION: forcing a failure. [ 1466.579701] name failslab, interval 1, probability 0, space 0, times 0 [ 1466.580704] CPU: 1 UID: 0 PID: 11096 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1466.580721] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1466.580729] Call Trace: [ 1466.580734] [ 1466.580738] dump_stack_lvl+0xfa/0x120 [ 1466.580764] should_fail_ex+0x4d7/0x5e0 [ 1466.580779] should_failslab+0xc2/0x120 [ 1466.580793] __kmalloc_noprof+0xcd/0x680 [ 1466.580808] ? __pfx_perf_trace_lock+0x10/0x10 [ 1466.580826] ? obj_cgroup_charge_account+0x11a/0x6e0 [ 1466.580845] ? copy_splice_read+0x15b/0xc00 [ 1466.580864] copy_splice_read+0x15b/0xc00 [ 1466.580880] ? __memcg_slab_post_alloc_hook+0x4a2/0x9e0 [ 1466.580902] ? __pfx_copy_splice_read+0x10/0x10 [ 1466.580917] ? __memcg_slab_post_alloc_hook+0x4ac/0x9e0 [ 1466.580938] ? look_up_lock_class+0x56/0x150 [ 1466.580962] ? register_lock_class+0x41/0x560 [ 1466.580983] ? lockdep_init_map_type+0x4b/0x240 [ 1466.581002] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1466.581022] ? __pfx_copy_splice_read+0x10/0x10 [ 1466.581039] do_splice_read+0x1f8/0x2a0 [ 1466.581057] splice_direct_to_actor+0x2a8/0x9d0 [ 1466.581075] ? __pfx_direct_splice_actor+0x10/0x10 [ 1466.581095] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1466.581114] ? lock_acquire+0x15e/0x2f0 [ 1466.581134] do_splice_direct+0x179/0x250 [ 1466.581150] ? __pfx_do_splice_direct+0x10/0x10 [ 1466.581167] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1466.581185] ? security_file_permission+0x22/0x90 [ 1466.581203] do_sendfile+0xa8e/0xdc0 [ 1466.581226] ? __pfx_do_sendfile+0x10/0x10 [ 1466.581244] ? __fget_files+0x20d/0x3b0 [ 1466.581268] __x64_sys_sendfile64+0x1d3/0x210 [ 1466.581283] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1466.581298] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1466.581320] do_syscall_64+0xbf/0x430 [ 1466.581333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1466.581346] RIP: 0033:0x7f20266ecb19 [ 1466.581355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1466.581367] RSP: 002b:00007f2023c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1466.581380] RAX: ffffffffffffffda RBX: 00007f2026800020 RCX: 00007f20266ecb19 [ 1466.581389] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1466.581396] RBP: 00007f2023c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1466.581404] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 1466.581412] R13: 00007ffcc2c01daf R14: 00007f2023c41300 R15: 0000000000022000 [ 1466.581429] [ 1466.621603] No source specified [ 1466.622452] No source specified 23:15:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:15:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x100000000000000) 23:15:57 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 44) 23:15:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) (fail_nth: 1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1466.697786] No source specified [ 1466.706331] No source specified 23:15:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:15:57 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 6) [ 1466.787877] No source specified [ 1466.792257] No source specified [ 1466.833840] FAULT_INJECTION: forcing a failure. [ 1466.833840] name failslab, interval 1, probability 0, space 0, times 0 [ 1466.834983] CPU: 1 UID: 0 PID: 11118 Comm: syz-executor.2 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1466.835000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1466.835009] Call Trace: [ 1466.835014] [ 1466.835020] dump_stack_lvl+0xfa/0x120 [ 1466.835050] should_fail_ex+0x4d7/0x5e0 [ 1466.835067] should_failslab+0xc2/0x120 [ 1466.835082] __kmalloc_cache_noprof+0x81/0x6b0 [ 1466.835098] ? _kstrtoull+0x13e/0x200 [ 1466.835115] ? __pfx__kstrtoull+0x10/0x10 [ 1466.835129] ? serport_ldisc_read+0x10d/0x650 [ 1466.835147] ? serport_ldisc_read+0x10d/0x650 [ 1466.835159] serport_ldisc_read+0x10d/0x650 [ 1466.835171] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 1466.835186] ? __pfx_serport_ldisc_read+0x10/0x10 [ 1466.835203] ? __pfx_perf_trace_lock+0x10/0x10 [ 1466.835227] tty_read+0x2e8/0x5b0 [ 1466.835248] ? __pfx_tty_read+0x10/0x10 [ 1466.835266] ? avc_policy_seqno+0x9/0x20 [ 1466.835281] ? selinux_file_permission+0x99/0x600 [ 1466.835298] ? security_file_permission+0x22/0x90 [ 1466.835316] vfs_read+0x868/0xc70 [ 1466.835331] ? __fget_files+0x34/0x3b0 [ 1466.835350] ? __pfx_vfs_read+0x10/0x10 [ 1466.835375] ksys_read+0x121/0x240 [ 1466.835386] ? __pfx_ksys_read+0x10/0x10 [ 1466.835397] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1466.835420] do_syscall_64+0xbf/0x430 [ 1466.835435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1466.835448] RIP: 0033:0x7fdede60db19 [ 1466.835459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1466.835471] RSP: 002b:00007fdedbb83188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1466.835483] RAX: ffffffffffffffda RBX: 00007fdede720f60 RCX: 00007fdede60db19 [ 1466.835492] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1466.835499] RBP: 00007fdedbb831d0 R08: 0000000000000000 R09: 0000000000000000 [ 1466.835507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1466.835514] R13: 00007ffccaccba8f R14: 00007fdedbb83300 R15: 0000000000022000 [ 1466.835532] [ 1466.954605] FAULT_INJECTION: forcing a failure. [ 1466.954605] name failslab, interval 1, probability 0, space 0, times 0 [ 1466.955873] CPU: 1 UID: 0 PID: 11121 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1466.955891] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1466.955901] Call Trace: [ 1466.955905] [ 1466.955911] dump_stack_lvl+0xfa/0x120 [ 1466.955943] should_fail_ex+0x4d7/0x5e0 [ 1466.955960] ? jbd2__journal_start+0x193/0x6b0 [ 1466.955982] should_failslab+0xc2/0x120 [ 1466.955997] kmem_cache_alloc_noprof+0x80/0x690 [ 1466.956025] ? jbd2__journal_start+0x193/0x6b0 [ 1466.956044] jbd2__journal_start+0x193/0x6b0 [ 1466.956067] __ext4_journal_start_sb+0x325/0x5d0 [ 1466.956084] ? ext4_dirty_inode+0xa5/0x130 [ 1466.956105] ext4_dirty_inode+0xa5/0x130 [ 1466.956122] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1466.956137] __mark_inode_dirty+0x1b7/0x1470 [ 1466.956157] generic_update_time+0xcb/0xf0 [ 1466.956173] file_modified+0x1f0/0x230 [ 1466.956188] ext4_file_write_iter+0xca6/0x19f0 [ 1466.956211] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1466.956225] ? trace_kmalloc+0x1f/0xb0 [ 1466.956236] ? __kmalloc_noprof+0x274/0x680 [ 1466.956252] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1466.956275] iter_file_splice_write+0xa3a/0x11f0 [ 1466.956304] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1466.956338] ? lock_is_held_type+0x9e/0x120 [ 1466.956359] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1466.956379] direct_splice_actor+0x192/0x7b0 [ 1466.956399] splice_direct_to_actor+0x347/0x9d0 [ 1466.956418] ? __pfx_direct_splice_actor+0x10/0x10 [ 1466.956440] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1466.956460] ? lock_acquire+0x15e/0x2f0 [ 1466.956483] do_splice_direct+0x179/0x250 [ 1466.956501] ? __pfx_do_splice_direct+0x10/0x10 [ 1466.956519] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1466.956539] ? security_file_permission+0x22/0x90 [ 1466.956559] do_sendfile+0xa8e/0xdc0 [ 1466.956583] ? __pfx_do_sendfile+0x10/0x10 [ 1466.956603] ? __fget_files+0x20d/0x3b0 [ 1466.956629] __x64_sys_sendfile64+0x1d3/0x210 [ 1466.956645] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1466.956661] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1466.956685] do_syscall_64+0xbf/0x430 [ 1466.956699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1466.956713] RIP: 0033:0x7f20266ecb19 [ 1466.956723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1466.956736] RSP: 002b:00007f2023c62188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1466.956749] RAX: ffffffffffffffda RBX: 00007f20267fff60 RCX: 00007f20266ecb19 [ 1466.956758] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1466.956766] RBP: 00007f2023c621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1466.956774] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 1466.956782] R13: 00007ffcc2c01daf R14: 00007f2023c62300 R15: 0000000000022000 [ 1466.956801] [ 1467.348170] serio: Serial port ptm2 [ 1467.358155] serio: Serial port ptm3 23:16:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0xfdfdffff00000000) 23:16:09 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x40087602, 0x0) 23:16:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) read(r0, 0x0, 0x7ffffffff000) 23:16:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x5000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:16:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) (fail_nth: 2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:16:09 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 54) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:16:09 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 45) 23:16:09 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 7) [ 1479.264618] serio: Serial port ptm1 [ 1479.287610] No source specified [ 1479.292203] No source specified [ 1479.309575] serio: Serial port ptm0 [ 1479.322663] FAULT_INJECTION: forcing a failure. [ 1479.322663] name failslab, interval 1, probability 0, space 0, times 0 [ 1479.324422] CPU: 0 UID: 0 PID: 11143 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1479.324454] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1479.324468] Call Trace: [ 1479.324477] [ 1479.324486] dump_stack_lvl+0xfa/0x120 [ 1479.324532] should_fail_ex+0x4d7/0x5e0 [ 1479.324560] ? jbd2__journal_start+0x193/0x6b0 [ 1479.324594] should_failslab+0xc2/0x120 23:16:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x1014c0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x3e, 0x400202) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000000c0)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000140)=0x0) fcntl$lock(r1, 0x24, &(0x7f0000000180)={0x1, 0x1, 0x2, 0x1, r2}) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r4, 0x4b4b, 0x0) syz_open_pts(r4, 0x40840) ioctl$TIOCSLCKTRMIOS(r3, 0x4b4b, 0x0) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000000)) [ 1479.324620] kmem_cache_alloc_noprof+0x80/0x690 [ 1479.324652] ? lock_is_held_type+0x9e/0x120 [ 1479.324692] ? jbd2__journal_start+0x193/0x6b0 [ 1479.324730] jbd2__journal_start+0x193/0x6b0 [ 1479.324769] __ext4_journal_start_sb+0x325/0x5d0 [ 1479.324797] ? ext4_iomap_begin+0x5b0/0xe80 [ 1479.324821] ? ext4_meta_trans_blocks+0x256/0x310 [ 1479.324851] ext4_iomap_begin+0x5b0/0xe80 [ 1479.324892] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1479.324920] ? iomap_iter_advance+0x177/0x1f0 [ 1479.324964] ? iomap_dio_bio_iter+0x8ac/0x1310 [ 1479.324992] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1479.325016] iomap_iter+0x55a/0x1020 [ 1479.325056] __iomap_dio_rw+0x6dd/0x1c90 [ 1479.325089] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1479.325133] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1479.325165] ? kasan_quarantine_put+0x84/0x1e0 [ 1479.325209] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1479.325244] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1479.325266] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1479.325305] iomap_dio_rw+0x40/0xa0 [ 1479.325330] ext4_file_write_iter+0xe0e/0x19f0 [ 1479.325369] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1479.325393] ? trace_kmalloc+0x1f/0xb0 [ 1479.325412] ? __kmalloc_noprof+0x274/0x680 [ 1479.325439] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1479.325480] iter_file_splice_write+0xa3a/0x11f0 [ 1479.325529] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1479.325590] ? lock_is_held_type+0x9e/0x120 [ 1479.325622] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1479.325657] direct_splice_actor+0x192/0x7b0 [ 1479.325692] splice_direct_to_actor+0x347/0x9d0 [ 1479.325725] ? __pfx_direct_splice_actor+0x10/0x10 [ 1479.325763] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1479.325798] ? lock_acquire+0x15e/0x2f0 [ 1479.325835] do_splice_direct+0x179/0x250 [ 1479.325866] ? __pfx_do_splice_direct+0x10/0x10 [ 1479.325898] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1479.325932] ? security_file_permission+0x22/0x90 [ 1479.325966] do_sendfile+0xa8e/0xdc0 [ 1479.326008] ? __pfx_do_sendfile+0x10/0x10 [ 1479.326042] ? __fget_files+0x20d/0x3b0 [ 1479.326088] __x64_sys_sendfile64+0x1d3/0x210 [ 1479.326115] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1479.326142] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1479.326183] do_syscall_64+0xbf/0x430 [ 1479.326208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.326231] RIP: 0033:0x7fb59c6b8b19 [ 1479.326248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1479.326270] RSP: 002b:00007fb599c2e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1479.326292] RAX: ffffffffffffffda RBX: 00007fb59c7cbf60 RCX: 00007fb59c6b8b19 [ 1479.326307] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1479.326320] RBP: 00007fb599c2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1479.326334] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1479.326347] R13: 00007fff3932da4f R14: 00007fb599c2e300 R15: 0000000000022000 [ 1479.326381] [ 1479.381482] serio: Serial port ptm2 [ 1479.382285] FAULT_INJECTION: forcing a failure. [ 1479.382285] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1479.383396] CPU: 1 UID: 0 PID: 11146 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1479.383415] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1479.383424] Call Trace: [ 1479.383429] [ 1479.383434] dump_stack_lvl+0xfa/0x120 [ 1479.383466] should_fail_ex+0x4d7/0x5e0 [ 1479.383483] should_fail_alloc_page+0xe0/0x110 [ 1479.383499] prepare_alloc_pages+0x1eb/0x550 [ 1479.383520] ? __pfx_perf_trace_lock+0x10/0x10 [ 1479.383543] alloc_pages_bulk_noprof+0x148/0xc30 [ 1479.383560] ? find_held_lock+0x2b/0x80 [ 1479.383577] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1479.383597] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1479.383616] ? trace_kmalloc+0x1f/0xb0 [ 1479.383628] ? __kmalloc_noprof+0x274/0x680 [ 1479.383642] ? __pfx_perf_trace_lock+0x10/0x10 [ 1479.383660] ? obj_cgroup_charge_account+0x11a/0x6e0 [ 1479.383679] ? copy_splice_read+0x15b/0xc00 [ 1479.383700] copy_splice_read+0x192/0xc00 [ 1479.383720] ? __pfx_copy_splice_read+0x10/0x10 [ 1479.383736] ? __memcg_slab_post_alloc_hook+0x4ac/0x9e0 [ 1479.383757] ? look_up_lock_class+0x56/0x150 [ 1479.383780] ? register_lock_class+0x41/0x560 [ 1479.383798] ? lockdep_init_map_type+0x4b/0x240 [ 1479.383818] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1479.383839] ? __pfx_copy_splice_read+0x10/0x10 [ 1479.383856] do_splice_read+0x1f8/0x2a0 [ 1479.383874] splice_direct_to_actor+0x2a8/0x9d0 [ 1479.383892] ? __pfx_direct_splice_actor+0x10/0x10 [ 1479.383913] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1479.383931] ? lock_acquire+0x15e/0x2f0 [ 1479.383956] do_splice_direct+0x179/0x250 [ 1479.383973] ? __pfx_do_splice_direct+0x10/0x10 [ 1479.383990] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1479.384008] ? security_file_permission+0x22/0x90 [ 1479.384027] do_sendfile+0xa8e/0xdc0 [ 1479.384050] ? __pfx_do_sendfile+0x10/0x10 [ 1479.384069] ? __fget_files+0x20d/0x3b0 [ 1479.384094] __x64_sys_sendfile64+0x1d3/0x210 [ 1479.384109] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1479.384124] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1479.384146] do_syscall_64+0xbf/0x430 [ 1479.384160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.384174] RIP: 0033:0x7f20266ecb19 [ 1479.384184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1479.384197] RSP: 002b:00007f2023c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1479.384209] RAX: ffffffffffffffda RBX: 00007f2026800020 RCX: 00007f20266ecb19 [ 1479.384218] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1479.384226] RBP: 00007f2023c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1479.384233] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 1479.384241] R13: 00007ffcc2c01daf R14: 00007f2023c41300 R15: 0000000000022000 [ 1479.384259] 23:16:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x6000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1479.478724] FAULT_INJECTION: forcing a failure. [ 1479.478724] name failslab, interval 1, probability 0, space 0, times 0 [ 1479.481013] CPU: 0 UID: 0 PID: 11144 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1479.481051] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1479.481067] Call Trace: [ 1479.481077] [ 1479.481087] dump_stack_lvl+0xfa/0x120 [ 1479.481138] should_fail_ex+0x4d7/0x5e0 [ 1479.481170] ? ext4_mb_new_blocks+0x64e/0x4580 [ 1479.481200] should_failslab+0xc2/0x120 [ 1479.481229] kmem_cache_alloc_noprof+0x80/0x690 [ 1479.481263] ? ext4_dirty_inode+0xf1/0x130 [ 1479.481298] ? __mark_inode_dirty+0x254/0x1470 [ 1479.481336] ? ext4_mb_new_blocks+0x64e/0x4580 [ 1479.481364] ext4_mb_new_blocks+0x64e/0x4580 [ 1479.481407] ? kasan_save_track+0x14/0x30 [ 1479.481435] ? __kasan_kmalloc+0x7f/0x90 [ 1479.481472] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 1479.481504] ? ext4_ext_search_right+0x2e8/0xbd0 [ 1479.481553] ext4_ext_map_blocks+0x1c55/0x5f30 [ 1479.481609] ? unwind_next_frame+0x3bc/0x2540 [ 1479.481634] ? do_syscall_64+0xbf/0x430 [ 1479.481662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.481690] ? kernel_text_address+0x11/0xc0 [ 1479.481735] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1479.481782] ? __pfx_perf_trace_lock+0x10/0x10 [ 1479.481827] ? lock_acquire+0x15e/0x2f0 [ 1479.481864] ? ext4_map_blocks+0x564/0x1510 [ 1479.481910] ? __pfx_down_write+0x10/0x10 [ 1479.481959] ext4_map_blocks+0x62d/0x1510 [ 1479.481993] ? kmem_cache_alloc_noprof+0x270/0x690 [ 1479.482029] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1479.482066] ? jbd2__journal_start+0xf6/0x6b0 [ 1479.482114] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1479.482143] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1479.482173] ? ext4_iomap_begin+0x5b0/0xe80 [ 1479.482201] ? ext4_meta_trans_blocks+0x256/0x310 [ 1479.482238] ext4_iomap_begin+0xa5e/0xe80 [ 1479.482267] ? __pfx_perf_trace_lock+0x10/0x10 [ 1479.482322] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1479.482354] ? mark_held_locks+0x49/0x80 [ 1479.482395] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1479.482433] ? __create_object+0x59/0x80 [ 1479.482473] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1479.482502] iomap_iter+0x55a/0x1020 [ 1479.482552] __iomap_dio_rw+0x6dd/0x1c90 [ 1479.482592] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1479.482644] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1479.482683] ? kasan_quarantine_put+0x84/0x1e0 [ 1479.482736] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1479.482778] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1479.482804] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1479.482851] iomap_dio_rw+0x40/0xa0 [ 1479.482881] ext4_file_write_iter+0xe0e/0x19f0 [ 1479.482927] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1479.482956] ? trace_kmalloc+0x1f/0xb0 [ 1479.482979] ? __kmalloc_noprof+0x274/0x680 [ 1479.483026] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1479.483074] iter_file_splice_write+0xa3a/0x11f0 [ 1479.483134] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1479.483206] ? lock_is_held_type+0x9e/0x120 [ 1479.483246] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1479.483287] direct_splice_actor+0x192/0x7b0 [ 1479.483329] splice_direct_to_actor+0x347/0x9d0 [ 1479.483369] ? __pfx_direct_splice_actor+0x10/0x10 [ 1479.483415] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1479.483456] ? lock_acquire+0x15e/0x2f0 [ 1479.483499] do_splice_direct+0x179/0x250 [ 1479.483536] ? __pfx_do_splice_direct+0x10/0x10 [ 1479.483573] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1479.483615] ? security_file_permission+0x22/0x90 [ 1479.483655] do_sendfile+0xa8e/0xdc0 [ 1479.483705] ? __pfx_do_sendfile+0x10/0x10 [ 1479.483746] ? __fget_files+0x20d/0x3b0 [ 1479.483800] __x64_sys_sendfile64+0x1d3/0x210 [ 1479.483833] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1479.483865] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1479.483915] do_syscall_64+0xbf/0x430 [ 1479.483944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.483970] RIP: 0033:0x7f7a32465b19 [ 1479.483992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1479.484017] RSP: 002b:00007f7a2f9db188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1479.484043] RAX: ffffffffffffffda RBX: 00007f7a32578f60 RCX: 00007f7a32465b19 [ 1479.484062] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1479.484078] RBP: 00007f7a2f9db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1479.484094] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1479.484110] R13: 00007ffe0bebc99f R14: 00007f7a2f9db300 R15: 0000000000022000 [ 1479.484151] 23:16:10 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 8) 23:16:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) (fail_nth: 3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1479.616365] FAULT_INJECTION: forcing a failure. [ 1479.616365] name failslab, interval 1, probability 0, space 0, times 0 [ 1479.617439] CPU: 1 UID: 0 PID: 11160 Comm: syz-executor.2 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1479.617458] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1479.617467] Call Trace: [ 1479.617472] [ 1479.617478] dump_stack_lvl+0xfa/0x120 [ 1479.617509] should_fail_ex+0x4d7/0x5e0 [ 1479.617527] should_failslab+0xc2/0x120 [ 1479.617542] __kmalloc_node_track_caller_noprof+0xc6/0x690 [ 1479.617565] ? look_up_lock_class+0x56/0x150 [ 1479.617586] ? kvasprintf_const+0x64/0x1a0 [ 1479.617601] ? register_lock_class+0x41/0x560 [ 1479.617626] kvasprintf+0xbd/0x160 [ 1479.617639] ? __pfx_kvasprintf+0x10/0x10 [ 1479.617654] ? perf_trace_lock+0xb5/0x5d0 [ 1479.617679] kvasprintf_const+0x64/0x1a0 [ 1479.617694] kobject_set_name_vargs+0x5a/0x150 [ 1479.617713] dev_set_name+0xbe/0x100 [ 1479.617730] ? __pfx_dev_set_name+0x10/0x10 [ 1479.617747] ? lockdep_init_map_type+0x4b/0x240 [ 1479.617767] ? __init_waitqueue_head+0xca/0x150 [ 1479.617787] ? __serio_register_port+0x171/0x540 [ 1479.617810] __serio_register_port+0x193/0x540 [ 1479.617830] serport_ldisc_read+0x328/0x650 [ 1479.617846] ? __pfx_serport_ldisc_read+0x10/0x10 [ 1479.617864] ? __pfx_perf_trace_lock+0x10/0x10 [ 1479.617888] tty_read+0x2e8/0x5b0 [ 1479.617910] ? __pfx_tty_read+0x10/0x10 [ 1479.617929] ? avc_policy_seqno+0x9/0x20 [ 1479.617949] ? selinux_file_permission+0x99/0x600 [ 1479.617967] ? security_file_permission+0x22/0x90 [ 1479.617987] vfs_read+0x868/0xc70 [ 1479.618003] ? __fget_files+0x34/0x3b0 [ 1479.618023] ? __pfx_vfs_read+0x10/0x10 [ 1479.618048] ksys_read+0x121/0x240 [ 1479.618060] ? __pfx_ksys_read+0x10/0x10 [ 1479.618073] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1479.618096] do_syscall_64+0xbf/0x430 [ 1479.618112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.618126] RIP: 0033:0x7fdede60db19 [ 1479.618136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1479.618150] RSP: 002b:00007fdedbb83188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1479.618163] RAX: ffffffffffffffda RBX: 00007fdede720f60 RCX: 00007fdede60db19 [ 1479.618172] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1479.618181] RBP: 00007fdedbb831d0 R08: 0000000000000000 R09: 0000000000000000 [ 1479.618189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1479.618197] R13: 00007ffccaccba8f R14: 00007fdedbb83300 R15: 0000000000022000 [ 1479.618217] [ 1479.637322] serio: Serial port ptm2 [ 1479.638799] No source specified [ 1479.647085] serio (null): device_add() failed for ptm2/serio0 (Serial port), error: -22 [ 1479.673268] No source specified [ 1479.684920] FAULT_INJECTION: forcing a failure. [ 1479.684920] name failslab, interval 1, probability 0, space 0, times 0 [ 1479.686785] CPU: 0 UID: 0 PID: 11163 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1479.686819] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1479.686839] Call Trace: [ 1479.686851] [ 1479.686864] dump_stack_lvl+0xfa/0x120 [ 1479.686926] should_fail_ex+0x4d7/0x5e0 [ 1479.686973] should_failslab+0xc2/0x120 23:16:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x7000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1479.687017] __kmalloc_noprof+0xcd/0x680 [ 1479.687050] ? iter_file_splice_write+0x1cd/0x11f0 [ 1479.687093] iter_file_splice_write+0x1cd/0x11f0 [ 1479.687132] ? kfree+0x284/0x550 [ 1479.687159] ? read_iter_zero+0x120/0x310 [ 1479.687192] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1479.687228] ? __lock_acquire+0xc65/0x1b70 [ 1479.687288] ? lock_is_held_type+0x9e/0x120 [ 1479.687326] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1479.687364] direct_splice_actor+0x192/0x7b0 [ 1479.687402] splice_direct_to_actor+0x347/0x9d0 [ 1479.687438] ? __pfx_direct_splice_actor+0x10/0x10 [ 1479.687479] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1479.687515] ? lock_acquire+0x15e/0x2f0 [ 1479.687554] do_splice_direct+0x179/0x250 [ 1479.687587] ? __pfx_do_splice_direct+0x10/0x10 [ 1479.687622] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1479.687659] ? security_file_permission+0x22/0x90 [ 1479.687695] do_sendfile+0xa8e/0xdc0 [ 1479.687740] ? __pfx_do_sendfile+0x10/0x10 [ 1479.687777] ? __fget_files+0x20d/0x3b0 [ 1479.687826] __x64_sys_sendfile64+0x1d3/0x210 [ 1479.687855] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1479.687884] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1479.687929] do_syscall_64+0xbf/0x430 [ 1479.687955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.687980] RIP: 0033:0x7f20266ecb19 [ 1479.688000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1479.688024] RSP: 002b:00007f2023c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1479.688047] RAX: ffffffffffffffda RBX: 00007f2026800020 RCX: 00007f20266ecb19 [ 1479.688064] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1479.688078] RBP: 00007f2023c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1479.688093] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 1479.688107] R13: 00007ffcc2c01daf R14: 00007f2023c41300 R15: 0000000000022000 [ 1479.688141] [ 1479.712030] No source specified [ 1479.732358] No source specified 23:16:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file0', [{0x20, '/dev/ptmx\x00'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/dev/ptmx\x00'}], 0xa, "80fd1d350db3fc29340d2d132e285b9fa2022439021930c4630e0e5ba4e1b8dfe6623e5758d4b08f5eb8fafb2e06eb6415b2b68368854134446eedb12d20de607a7252162dd19136d25ca5a35c97f9ba0216143939df24170ea9ce2b4b8a3a7078562ed4e1b3c497a43c8cc92c3302369a4a42ec05ca2c1a5407a03ab90a71db100b356df68dce73a9c3b61059817e7ac578feefc2820233e97954527a0539aad0305e9c"}, 0xd0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r3, 0x4b4b, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000005f00)='./file0/file0\x00', 0x24000, 0x8) r5 = syz_open_dev$evdev(&(0x7f0000005f40), 0x200, 0x2000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r6, 0x4b4b, 0x0) r7 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) socketpair(0x2a, 0x4, 0xffffff02, &(0x7f0000006280)={0xffffffffffffffff}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r10, 0x4b4b, 0x0) sendmmsg$unix(r2, &(0x7f0000006400)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000002c0)="c46b95d4e6c142c85572646363fd3113485c58aee243d10357daf4714254009b85fbf040e9855a6e1bfcd2ed29d7d16e61411c1a4c525560c47ef998b6b885ecb449883db7504e3ddf780e468a142da2c85da8ece4871e3bf2f415bdf8dc08e929c89d1414ef0529b09626", 0x6b}, {&(0x7f0000000340)="cff06a54bd21a6466e1316bec350d50b8aa495e1265efd3313a7c11fbac01dd55d99986c553bf6d361bcb97f7c955afa49f87136a3d8603aa3db396d58011cbeac5ab29d1c29d7f745f589764080d7904124dc7b08f84931dccb1dfd6be7d0723a5e67dcb8b1e0209f0a123c232ecd98cb648c4977c3853a4265c18209ece0f105382a9daab7abcaac9f8242f7bad40048f134245c923b57247b40ca79419b381e74fcc6803cef8e98b6ce", 0xab}, {&(0x7f0000000400)="258cd2f13b7d59579b7d20c9c0678de20d434a78f4203917089761de4ace0f404a62f7d8bc27d835f23569a3a31a64ed3a9cab3405ea17aa6bc6f3497c60fcfcc4124c910927a5fba391dd37c94306d17b805b1830dcacf460ff8629f7113aa6a528e1dda4677df12fd3599d3b715e6653fa448dbdc6a68a6c0b8fb8887afea1225b2cb66d48fcb4f3f1cf8fc3a5e39248107db17eb26ae8464debd0fc18ced2736fd4da2b44d4ef867d", 0xaa}, {&(0x7f00000004c0)="82304296ecc97a04009316a2175c2856586ee33dff461b122b745ced6deacb3e1473be781084d02fb863cccb2574fc6f325e19f8165ffcc6f810537a62da062000bcbc33d2f00a733658450b90a99f817a754972fad4cfe856620333873a9ff45a3cf34cb6940ec770a8062b83e888282108aad63b826aa9328ea0c1a5c5cb3ec8e6a3d4ae217896b29e5796", 0x8c}], 0x4, 0x0, 0x0, 0x800}}, {{&(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)="60faf62694ee62d6873f74953412bdb549257b1ce013211d9679ba6da226c9fe637e7697421ec182c94485341e1b3509151fd8e7f9d746035ddaba496f3197c089b650fdf4131635e03b122dc183d963dc6e50faa67a1bc77fd74b779c6622bfd97e42603e2ee9667a35f591b06050d3064e21915f5c2a5e904ab6bf1d4710188cb99b98de8867666b2f4e2aa34bbaaacdb8c109f506d290c4066e01ae6ac8337ad7a4701199e221e84bc058637c6080944d74f7cc857c2fa176e85bc79ded6146bbac", 0xc3}], 0x1, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000800)="406ee8aa0b310de99bdc74ac0753e93a6a6e44470d3582baa41c9f569cf245d9aebb6bdb9d5503269c3057043521", 0x2e}, {&(0x7f0000000840)="03645d65f98be9eccde7611247ba7104603e559c9f9fc28c70f311014c38262ddb99b770350949c6754e536af7f675ffad28d738802244b2cb0dece3eef06f24ce03c5cf2d94859c02e1071cb811d971184af60589aade5dc9692a83270f277e5e756eada0c96402601f04a6acda954e8f92cd22bfb7270093ae4e2502b4cb9cd96f489846b23be8e5510527", 0x8c}, {&(0x7f0000000900)="5dffdeed482e4df2dd367387a871bbd711f23efdc6399ba7eaab7e9c566dd1a866e662e5e6ada3178116effbcd1992d2b9d211b1200cd09f4502c86a6720fdf5b00f9dd0614ed6011a0fe94ad9bb0cff54b56a58dd694b05fffa", 0x5a}, {&(0x7f0000000980)="18a6649c45746547caf2b58d9427138df438516a585aed55129f762070003f5a98240b35c6a358b7a2ecd89f81dbaed2ba4de5f5ede86676a44976fe0eda9d438fedfacbf3a6d77f57d8def7e7eee406084e8c6599800599c4e43426ba3aae87a2eb5c1db317bfa6928d8e7bc297cf69f23f504e074d5cb4bbd2d05a79aa7c4ca1bd89e2ec019b37ac0348db99a33ec628761f1b82adae022cd4d700e78d8595295f8f85", 0xa4}, {&(0x7f0000000a40)="df58cf698be6da651c5d64576c8ac061c6ab0bbb43d7dceea270f19222888fa42085121ae94beaad85bce8079df797c335bab3f13913764b262caadd8978f058c238988a3bdde150d2cd8b2c44dbb2e88b0b1b8ec32405f01d6a80126d5563d42111e422aa700c721cc600f225f4a9f1c5c85f3f2a8561ad8fbc96af39c520f8dab6585b2379acace062db49ddc8137f7040ac77f0bba133ee07e88e53de97f3", 0xa0}, {&(0x7f0000000b00)="e55373bae2f02dc95868103ab30c02117dfb973d8bd74be2fd48d1751d5b9dea80647ebe70cf5f50776082107db8317b7a5c6224a917236444b08c5ce9fc547d5f404e8aabc985c7eb647ba472d041f6c9be2aed0d35bc9d76cc445ae52e247086a20dd470748598835e89ab18ce73dd6b6c6cedf61e2d36d670b681c6eb718a6985ac026016b29770f197f73c44", 0x8e}, {&(0x7f0000000bc0)="7a094f915a605236962fc4b982ede1b485e8629c4e", 0x15}, {&(0x7f0000000c00)="b7f8c1889e7574816f8de309d5ed27e82c22c8fb17d8fdf9c436abad61d8419105ab53290dbcb8cece290d62dfee6e67d887d9909e69dfe05619802ec6228f4f814a774105ab", 0x46}, {&(0x7f0000000c80)="ebe313cddd578c587b9974cd4641c787d9067aeffa063c43be37755de38a8ddf2cad5ffa9791669ddd76827dfeb89f1122aaca800f9c4d56a2beca30fb130bf065bd1908f46a853e03dbc81fa5091bfb3811f7636508593199f3d38e46", 0x5d}], 0x9, &(0x7f0000000dc0), 0x0, 0x4040840}}, {{&(0x7f0000000e00)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000e80)="60e1b536764851aa5c02592e033c56e95e7e85", 0x13}, {&(0x7f0000000ec0)="3581bd41e4e32f284f02d33b795df2322ee948", 0x13}, {&(0x7f0000000f00)="1e4815b9d07f6db943ddc7e557c5e19c126ef7c5ad6b7c2c0098a0e16ddeff6749f2ff663a449473ed848fa6239441d0a1254e1d536b641a945074af20d7a219b9d7921ec8f50b5f6f4a0f4a525b19f4cc65a75a70ff18c772a33a799e35917c3e3cb5e1590a9b680a64247fe9d504eb8dca23e46f0d7492a6925886410634feeb9ec925fb89b65b47ce3c4add3ee22473d03a8716bed612779b9981895636849d129e7be43e484e51834b08cc1df9", 0xaf}], 0x3, &(0x7f0000001100)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}], 0x88, 0x80}}, {{&(0x7f00000011c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001240)="515ba2ce43219811fb32ba972a92598fa0831a076da951dca1d49ac84f3249513fef07f40ea4ec379450725425cbcd0e7d836cc33433b664f631c15839f9c3514050b9ec2a0f194f59f9c093b9100553a04c12bdf83b443f9b9f3bab41e63b6cac396bcf405ebae53a9add3754b090697af1ec6f6129959477b0fe3f1a132f14e33b7458219b3569c80d9e4d2af072088b23aed6aed2bc1dc5647ed4155d161dcc493a2247850f938ac3b1ad60769a8eab825b3daee029ce423a", 0xba}, {&(0x7f0000001300)="9156a5acc4a53cfb1d9d861e073adf6c556ee0c54c8d7ce064443b9400a0c27a4b3e336c906768372d6f2d1979181411552bb91024fd1904a7568e760f4586feb1242bf3a37efd764daf8b58283acb2f97d311d7d1473bf969f2399546b598113e6e0312fb64e26b6239ba14dc8ea4cc0541d4b3bfcd9973648db82a9702d47579393c8423b98cb68f0dada52dd72e67f4fab015e1a552da376f37f0c641b8b5fd6d03c06c54001cd448e6", 0xab}, {&(0x7f00000013c0)="2264a24dc90e95daad98ab2c6475d7027f01d08e3815c67155bf515002f9a20e2c33e7214e74725d98e29f9d387dd3072bfc4880f2c58615befe7bfc7e0b3d6cd0f92db7352fb83ae4c3b4cac31140697623b6caad056906d10e880085cd77ed77c40788d43fcbd14ea0e989", 0x6c}], 0x3, &(0x7f0000001540)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, r1]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r1]}}], 0x60}}, {{&(0x7f00000015c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001640)="e9d2244071eeefa8f24e6c8ad40b659a47ab3ebd32ae158a08c96e90b5a0bea9a1ebc28f241a98b01c43ffaa60a486f4ae4b0bb7afe97373496a6aaa5e6c4a0f8c0e87db73c2aa6db1eaba9c02bb54aef48cb91589e85285e2c1b4e72c274bcfdf0cbc818aa58876b64633bafa4826f739629f2d5e87a8fceef7313d67c13b029c203fd7440efa42bb971e46e9adb7349a646f9a877b427d99045eee78bd27b31f449ef1d868faa31d7736cbb7078bf31c6c10b324f2e9d5535147b591abce25a4ce438660bdad4ddc9f7efbc2c96452b6634845e8b8bc0cd2a4aead1924af367456c6f1ef99fa6fad0ac88f2bd02e0f51", 0xf1}, {&(0x7f0000001740)="8f60a37e1dfb93b2bbed29fc45f5ca948dc976ea8cd4baa6e60304aa2455638ba9a81c5fd60bc7859ee560915458d03cd736556c197fd8b316b351e2d4948e408c9a68483c746c3a76903c5a05851d53f3a95266acdeb120436faab9129f09ecbedf24e328c6c64840cec09682a84b86affc4cdf3d0d58b7bca1a1840b632f750e413596235c740be8623c20", 0x8c}, {&(0x7f0000001800)="448039bf1734dfbe73f51dbfa8065d8d94d860e34228bcd18a684e5004fea8f9494820266fe10edc606d7a8eb6eb340b104698b94aa5161944f8ebefac4290df6e4c06", 0x43}], 0x3, &(0x7f0000004180)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0, 0x10}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}, {{&(0x7f0000004240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005440)=[{&(0x7f00000042c0)="4e9f87ef0216f319d441bc28998e3252503bdf7d71b0e65488351d9e486bfe", 0x1f}, {&(0x7f0000004300)="be330e1d02f3043b5b3ee1d814360af192fb56f94c184c53a3dd13db06795886c05b2a4953948d53cb55730b9a5b287f0edc6eeb235ee3d47b9f23cf5dcf967806ca131fc17d3ff8bd74f7842fdb998255d3d1d4db062b1e2b63dd925127329d8b88afec02c9577adab6d7f924043f8993a608817d39a71fd0b8deffe5eb0a8f8f4bd801c23e95b07c1d98226599d49ad477586ecfd205964bed12a28e76273c516d2b9c740415e8b07c5870ced6559f0b002dd8adcabeee7d09c9980f56790edf3bf8d9d8e5a0d77b418d804415832c395c16fec711770129b789694f79421a7a8d1ab3575782a3f49cf07c6ba9", 0xee}, {&(0x7f0000004400)="e155d7fe88b9b588629881f26a187fe0c1a0389a30179dc7df16b033a1048b701fbca003124d0dac65bbbb5a775fad", 0x2f}, {&(0x7f0000004440)="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", 0x1000}], 0x4, &(0x7f0000005600)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x128}}, {{0x0, 0x0, &(0x7f0000005cc0)=[{&(0x7f0000005740)="3886fb306ebcd18cb528", 0xa}, {&(0x7f0000005780)="1435b1cb3c07264f3924d5e3433e8e0525fcd49e48998fd2b93c627ea7b734e39b02c628905121e37c1486d3c80e04aed755b83fbf34464d472140c94d93d7bd0accfad555c45bad2e184775c48b223cd64eb3a08e701e31e4cb95bb98fe7f7d5ef77afb06006753218a235046a45e5cb0766f6cc865e5c5e07c4ebc9fe4b998249e4d0b53d39d73508ceccd33401dcf4fd8970468809bb4322fdc8b5db5ccf7b34a139fe445f0d323e2f9895e96d4c2d2fdd20217e42990f5a8ff3969da681ac4817aa6a798a59301798c7b9ad39b39c090b3c6411747a8729df8813cc9270796c041a6c7337166da92c1966dcabff7484527a6", 0xf4}, {&(0x7f0000005880)="94d647d768e0b9a013a47eb214aba7b249ad0a373ca3f2f396061b17e0612247ce88c4eba63bfe722e02bdf27e1a77e37b9f484ed2970f890a81f9b09c7a2d009071dfa98e6fc96074e7efbff6a27c5ddb43f8b65c64b305123472c7814219dfaba0e031a3d8a579cac3665f805ad7bad696ed3e653dd408a34651d2f63dc62326a117dc4f79a4aa1fde68daacc0dac959d393c163c05163083ff89294cd3a44196952a580abbe33a705fb5209e0f5fd3e933092a85c8b476f0bcb340adf32ff70aa99775ac6b116e79549e7fd3c66762c380b26c9095d322372e83b1f16df7c7ced695be5ef3946d7152dd37bf43564a2ebd225", 0xf4}, {&(0x7f0000005980)="1d47895812f8faf55773ae16561cf87dc5a3e45e7151db4f7cb3efbcd855e8315914fd5af916a53e86f14d29905a9eb425ca49a8694355d8866abe517b1155f31f6a0d602d6d377177e45da24b65b78c199e7911505cfd62209c1af2ff32b387cfae74f12845f1d3ea1aadd0addfff40a71948e53e0388696918cf75", 0x7c}, {&(0x7f0000005a00)="67ab9ec79705a81ae9a97413f96ce61c71b7a3a60d7962485fa9a03b28eaa55d7d52817496a799e00728117a135d0ef7970e6dd539cde85828e77231b0c76a0ccdfb0af6b99ce179ff26e20929eb2aa6db09a66685c73a0b468521facee9befe250ec75e04b6b063212c57a887c7c6adc3f656c2bff38ef3b353cc09da378e260c0996afac313bfc8fe997d2c85d8334c874d0919cf7f73eeac97a55a8a0b4b3cd4097a0b760893605df715beef64230504c1e957800a1af4ad1876ad9a52b2e3aede55bfd6fab5a9d80f808b6d3b8da7cfab62a4f06f4a0a8d851761f39b8307784", 0xe2}, {&(0x7f0000005b00)="b82ae5f2f6f7e3f25be0eb539b732d2605d3eda41c9824e50c50d1f3d7ae355fc59f26d038f1ddbb1cff735495ad5cb9151f1ffd6549bc62cc03f6a67c399c57a9f38f49f01b7fe5b6596fbdf23a71348c4a153ee36b0a316fc2c2fcaa43e09cba100137d388536354a00f8598be70553af6b934d6bdcf488e28feaf7f50f7387c05002f6d2638d71e6263a945ec2f38b1778a2d7bffea6aea881711cb354f5554", 0xa1}, {&(0x7f0000005bc0)="ccbc1fae5be24d5ab30f9102b51231face7dc76470ba0f7c377f9cc6a7d6293e5b7413cc026666cab4d5e188b49df0ad31187d82b8ff9f", 0x37}, {&(0x7f0000005c00)="06d19716812bc7bff1c5bf9465741103122e7963e0bf406cca2d35cf35f7c4830e3c4800eaf71b8768cc3c3236f51a69bf56f3937961a5e5b3bb474312456898cd273dab1273956ac2b53fab05f7be21569fa21a77ad3af64359cc71f293bfa20d89264c9197e1c3ec07c783900f44f64bedb3a755b0e50a0d7f1769e13e6c662b99797e1d0058913bb8116e026916f2281ea043796a50a2fe17d83607bb245f5576fe54e063a8e9b73b2fab9ab653265e709ac564aacfa94f237c7ce0b5", 0xbe}], 0x8, &(0x7f00000062c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff, r2]}}, @rights={{0x38, 0x1, 0x1, [r0, 0xffffffffffffffff, r2, r3, r4, r2, r5, r1, r6, r7]}}, @rights={{0x20, 0x1, 0x1, [r2, r8, r0, r0]}}, @rights={{0x24, 0x1, 0x1, [r9, r2, r2, r2, r2]}}, @rights={{0x18, 0x1, 0x1, [r10, r0]}}], 0x120, 0x810}}], 0x9, 0x4084) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x80800) ftruncate(r11, 0xfffffffffffffff8) 23:16:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x8000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:16:10 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 46) 23:16:10 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 55) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1479.848601] No source specified [ 1479.855699] No source specified [ 1480.091542] serio: Serial port ptm2 [ 1480.120682] serio: Serial port ptm3 23:16:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) (fail_nth: 4) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:16:20 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x401c5820, 0x0) 23:16:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) read(r0, 0x0, 0xf0ffffff7f0000) 23:16:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x10880, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0xffff) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x400, 0x0, 0x84, "f2f3e2a9286b6a770ff8c2b978657df3480824", 0x5}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:16:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x9000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:16:20 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 9) 23:16:20 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 47) 23:16:20 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 56) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1489.677282] serio: Serial port ptm0 [ 1489.702047] No source specified [ 1489.712791] No source specified [ 1489.731660] serio: Serial port ptm1 [ 1489.750903] serio: Serial port ptm2 23:16:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xa000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:16:20 executing program 4: ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e24, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)='batadv0\x00', 0x2, 0x6f, 0x5}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1489.830881] No source specified [ 1489.841427] No source specified 23:16:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) (fail_nth: 5) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:16:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xb000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:16:20 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 10) [ 1489.929553] FAULT_INJECTION: forcing a failure. [ 1489.929553] name failslab, interval 1, probability 0, space 0, times 0 [ 1489.930664] CPU: 1 UID: 0 PID: 11220 Comm: syz-executor.2 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1489.930684] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1489.930698] Call Trace: [ 1489.930703] [ 1489.930708] dump_stack_lvl+0xca/0x120 [ 1489.930742] should_fail_ex+0x4d7/0x5e0 [ 1489.930759] should_failslab+0xc2/0x120 [ 1489.930774] __kmalloc_cache_noprof+0x81/0x6b0 [ 1489.930792] ? serio_queue_event+0x10b/0x370 [ 1489.930813] ? serio_queue_event+0x10b/0x370 [ 1489.930829] serio_queue_event+0x10b/0x370 [ 1489.930846] serport_ldisc_read+0x328/0x650 [ 1489.930861] ? __pfx_serport_ldisc_read+0x10/0x10 [ 1489.930878] ? __pfx_perf_trace_lock+0x10/0x10 [ 1489.930903] tty_read+0x2e8/0x5b0 [ 1489.930925] ? __pfx_tty_read+0x10/0x10 [ 1489.930943] ? avc_policy_seqno+0x9/0x20 [ 1489.930958] ? selinux_file_permission+0x99/0x600 [ 1489.930975] ? security_file_permission+0x22/0x90 [ 1489.930994] vfs_read+0x868/0xc70 [ 1489.931009] ? __fget_files+0x34/0x3b0 [ 1489.931028] ? __pfx_vfs_read+0x10/0x10 [ 1489.931055] ksys_read+0x121/0x240 [ 1489.931071] ? __pfx_ksys_read+0x10/0x10 [ 1489.931082] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1489.931105] do_syscall_64+0xbf/0x430 [ 1489.931119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.931133] RIP: 0033:0x7fdede60db19 [ 1489.931146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1489.931158] RSP: 002b:00007fdedbb83188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1489.931170] RAX: ffffffffffffffda RBX: 00007fdede720f60 RCX: 00007fdede60db19 [ 1489.931189] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1489.931197] RBP: 00007fdedbb831d0 R08: 0000000000000000 R09: 0000000000000000 [ 1489.931205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1489.931213] R13: 00007ffccaccba8f R14: 00007fdedbb83300 R15: 0000000000022000 [ 1489.931231] [ 1489.931236] serio: Not enough memory to queue event 3 [ 1489.948270] serio: Serial port ptm3 23:16:20 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 48) 23:16:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000001440)) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="259021c77e628262e467f94d842c6456bae2bcc5e0781dba5fb02e392d7fb666740013b5c298", 0x26}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f00000000c0)="dcca92448c26295d8ba475d97e9b31337415d0e4e977e99d139c25018e59130598a197706a3c081ea5f6df34d0441ca3dbb0726d10c52c35971ac702fd86536aace3615084579496e5033029286c83ccc9bc84a4f40a925e02fa38906fba2979aec88a021206d06f370aaed1ca950bb5582cf2ad9bcd6d2f625cb56c5997f963926cc573bb124f408826aa264ea80c1228dbbf50ecc7832c0b286f2670bbff369d5013601aa746d08cd1225817c32f7c", 0xb0}, {&(0x7f0000000180)="c9aecd439f63deff9f1c77401fa09b9cc133d9792fd6391c542096efae0d6669bec79ba63010abce11b08d1c8d0510328e43db1ecef3fc9867f77a3ea0f9ccbee304d554e4bbbf219d5e31819d137fcc7417ac9c53382cd832aa5b405da485b9ec2dd4f402b0f6258664eb44a0f21b3ec17015f7f0e37f312fca092008a56377857acb6932e8dc60c4b02e00482e0301cdbfe0776cee0ac7fdb4d3b5c128cb66329d54e30b570019038fb8907711fb230303910f84d4f8c421469d90", 0xbc}, {&(0x7f0000001300)="89a6d2fe628e3d16551c0a75c584988f61ad0a90cd23ad6bb24616b514933d1160d761a1bd7215c78831723280c0893d97d3d5050f6f4aefe149aadb7d855b7ac86e927952ee36a4db2400a0c7a4aa9a5d91ce309e0251fc2d9246fea8f838cf7672b45479759fa2199dd1c5feff828fd8184acb502363c010a825ddca7a6b6b8b1c", 0x82}], 0x5) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000013c0), 0x800, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000001400)={0x1, 0x1, 0x2, 0xfff, 0x4, "654eb02ef0807235"}) [ 1490.021618] No source specified [ 1490.025415] No source specified [ 1490.090384] FAULT_INJECTION: forcing a failure. [ 1490.090384] name failslab, interval 1, probability 0, space 0, times 0 [ 1490.091332] CPU: 1 UID: 0 PID: 11227 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1490.091350] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1490.091358] Call Trace: [ 1490.091363] [ 1490.091369] dump_stack_lvl+0xfa/0x120 [ 1490.091398] should_fail_ex+0x4d7/0x5e0 [ 1490.091414] ? ext4_mb_new_blocks+0x64e/0x4580 [ 1490.091429] should_failslab+0xc2/0x120 [ 1490.091444] kmem_cache_alloc_noprof+0x80/0x690 [ 1490.091461] ? ext4_dirty_inode+0xf1/0x130 [ 1490.091478] ? __mark_inode_dirty+0x254/0x1470 [ 1490.091497] ? ext4_mb_new_blocks+0x64e/0x4580 [ 1490.091509] ext4_mb_new_blocks+0x64e/0x4580 [ 1490.091529] ? kasan_save_track+0x14/0x30 [ 1490.091543] ? __kasan_kmalloc+0x7f/0x90 [ 1490.091560] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 1490.091575] ? ext4_ext_search_right+0x2e8/0xbd0 [ 1490.091598] ext4_ext_map_blocks+0x1c55/0x5f30 [ 1490.091624] ? unwind_next_frame+0x3bc/0x2540 [ 1490.091636] ? do_syscall_64+0xbf/0x430 [ 1490.091649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.091663] ? kernel_text_address+0x11/0xc0 [ 1490.091685] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1490.091706] ? __pfx_perf_trace_lock+0x10/0x10 [ 1490.091727] ? lock_acquire+0x15e/0x2f0 [ 1490.091744] ? ext4_map_blocks+0x564/0x1510 [ 1490.091766] ? __pfx_down_write+0x10/0x10 [ 1490.091785] ext4_map_blocks+0x62d/0x1510 [ 1490.091800] ? kmem_cache_alloc_noprof+0x270/0x690 [ 1490.091816] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1490.091833] ? jbd2__journal_start+0xf6/0x6b0 [ 1490.091855] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1490.091869] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1490.091883] ? ext4_iomap_begin+0x5b0/0xe80 [ 1490.091896] ? ext4_meta_trans_blocks+0x256/0x310 [ 1490.091913] ext4_iomap_begin+0xa5e/0xe80 [ 1490.091926] ? __pfx_perf_trace_lock+0x10/0x10 [ 1490.091956] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1490.091970] ? mark_held_locks+0x49/0x80 [ 1490.091989] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1490.092009] ? __create_object+0x59/0x80 [ 1490.092031] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1490.092044] iomap_iter+0x55a/0x1020 [ 1490.092068] __iomap_dio_rw+0x6dd/0x1c90 [ 1490.092086] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1490.092111] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1490.092128] ? kasan_quarantine_put+0x84/0x1e0 [ 1490.092153] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1490.092172] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1490.092184] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1490.092206] iomap_dio_rw+0x40/0xa0 [ 1490.092219] ext4_file_write_iter+0xe0e/0x19f0 [ 1490.092241] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1490.092254] ? trace_kmalloc+0x1f/0xb0 [ 1490.092264] ? __kmalloc_noprof+0x274/0x680 [ 1490.092280] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1490.092301] iter_file_splice_write+0xa3a/0x11f0 [ 1490.092328] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1490.092362] ? lock_is_held_type+0x9e/0x120 [ 1490.092380] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1490.092399] direct_splice_actor+0x192/0x7b0 [ 1490.092418] splice_direct_to_actor+0x347/0x9d0 [ 1490.092437] ? __pfx_direct_splice_actor+0x10/0x10 [ 1490.092457] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1490.092476] ? lock_acquire+0x15e/0x2f0 [ 1490.092496] do_splice_direct+0x179/0x250 [ 1490.092513] ? __pfx_do_splice_direct+0x10/0x10 [ 1490.092530] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1490.092549] ? security_file_permission+0x22/0x90 [ 1490.092568] do_sendfile+0xa8e/0xdc0 [ 1490.092592] ? __pfx_do_sendfile+0x10/0x10 [ 1490.092610] ? __fget_files+0x20d/0x3b0 [ 1490.092635] __x64_sys_sendfile64+0x1d3/0x210 [ 1490.092651] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1490.092665] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1490.092688] do_syscall_64+0xbf/0x430 [ 1490.092701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.092713] RIP: 0033:0x7f7a32465b19 [ 1490.092723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1490.092735] RSP: 002b:00007f7a2f9db188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1490.092747] RAX: ffffffffffffffda RBX: 00007f7a32578f60 RCX: 00007f7a32465b19 [ 1490.092756] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1490.092763] RBP: 00007f7a2f9db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1490.092771] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1490.092778] R13: 00007ffe0bebc99f R14: 00007f7a2f9db300 R15: 0000000000022000 [ 1490.092797] [ 1490.510796] serio: Serial port ptm3 [ 1490.556550] serio: Serial port ptm4 23:16:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) (fail_nth: 6) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:16:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:16:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x10000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:16:31 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x4020940d, 0x0) 23:16:31 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 49) 23:16:31 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 11) 23:16:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) read(r0, 0x0, 0x500000000000000) 23:16:31 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 57) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1501.509555] serio: Serial port ptm2 [ 1501.510914] No source specified [ 1501.515289] serio: Serial port ptm1 [ 1501.523796] No source specified [ 1501.530389] serio: Serial port ptm3 [ 1501.562233] FAULT_INJECTION: forcing a failure. [ 1501.562233] name failslab, interval 1, probability 0, space 0, times 0 [ 1501.564195] CPU: 1 UID: 0 PID: 11256 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1501.564226] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1501.564240] Call Trace: [ 1501.564248] [ 1501.564257] dump_stack_lvl+0xfa/0x120 [ 1501.564300] should_fail_ex+0x4d7/0x5e0 [ 1501.564326] ? ext4_mb_new_blocks+0x64e/0x4580 [ 1501.564351] should_failslab+0xc2/0x120 [ 1501.564376] kmem_cache_alloc_noprof+0x80/0x690 [ 1501.564405] ? ext4_dirty_inode+0xf1/0x130 [ 1501.564435] ? __mark_inode_dirty+0x254/0x1470 [ 1501.564467] ? ext4_mb_new_blocks+0x64e/0x4580 [ 1501.564490] ext4_mb_new_blocks+0x64e/0x4580 [ 1501.564527] ? kasan_save_track+0x14/0x30 [ 1501.564550] ? __kasan_kmalloc+0x7f/0x90 [ 1501.564582] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 1501.564609] ? ext4_ext_search_right+0x2e8/0xbd0 [ 1501.564650] ext4_ext_map_blocks+0x1c55/0x5f30 [ 1501.564698] ? unwind_next_frame+0x3bc/0x2540 [ 1501.564719] ? do_syscall_64+0xbf/0x430 [ 1501.564741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1501.564765] ? kernel_text_address+0x11/0xc0 [ 1501.564802] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1501.564842] ? __pfx_perf_trace_lock+0x10/0x10 [ 1501.564881] ? lock_acquire+0x15e/0x2f0 [ 1501.564912] ? ext4_map_blocks+0x564/0x1510 [ 1501.564958] ? __pfx_down_write+0x10/0x10 [ 1501.564991] ext4_map_blocks+0x62d/0x1510 [ 1501.565020] ? kmem_cache_alloc_noprof+0x270/0x690 [ 1501.565050] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1501.565081] ? jbd2__journal_start+0xf6/0x6b0 [ 1501.565122] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1501.565147] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1501.565171] ? ext4_iomap_begin+0x5b0/0xe80 [ 1501.565195] ? ext4_meta_trans_blocks+0x256/0x310 [ 1501.565226] ext4_iomap_begin+0xa5e/0xe80 [ 1501.565250] ? __pfx_perf_trace_lock+0x10/0x10 [ 1501.565297] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1501.565323] ? mark_held_locks+0x49/0x80 [ 1501.565358] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1501.565389] ? __create_object+0x59/0x80 [ 1501.565422] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1501.565447] iomap_iter+0x55a/0x1020 [ 1501.565489] __iomap_dio_rw+0x6dd/0x1c90 [ 1501.565522] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1501.565566] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1501.565598] ? kasan_quarantine_put+0x84/0x1e0 [ 1501.565644] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1501.565679] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1501.565701] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1501.565740] iomap_dio_rw+0x40/0xa0 [ 1501.565765] ext4_file_write_iter+0xe0e/0x19f0 [ 1501.565804] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1501.565828] ? trace_kmalloc+0x1f/0xb0 [ 1501.565847] ? __kmalloc_noprof+0x274/0x680 [ 1501.565875] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1501.565915] iter_file_splice_write+0xa3a/0x11f0 [ 1501.565966] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1501.566027] ? lock_is_held_type+0x9e/0x120 [ 1501.566060] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1501.566095] direct_splice_actor+0x192/0x7b0 [ 1501.566130] splice_direct_to_actor+0x347/0x9d0 [ 1501.566163] ? __pfx_direct_splice_actor+0x10/0x10 [ 1501.566202] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1501.566236] ? lock_acquire+0x15e/0x2f0 [ 1501.566273] do_splice_direct+0x179/0x250 [ 1501.566303] ? __pfx_do_splice_direct+0x10/0x10 [ 1501.566335] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1501.566370] ? security_file_permission+0x22/0x90 [ 1501.566404] do_sendfile+0xa8e/0xdc0 [ 1501.566447] ? __pfx_do_sendfile+0x10/0x10 [ 1501.566481] ? __fget_files+0x20d/0x3b0 [ 1501.566527] __x64_sys_sendfile64+0x1d3/0x210 [ 1501.566555] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1501.566582] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1501.566624] do_syscall_64+0xbf/0x430 [ 1501.566649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1501.566671] RIP: 0033:0x7f7a32465b19 [ 1501.566689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1501.566711] RSP: 002b:00007f7a2f9ba188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1501.566733] RAX: ffffffffffffffda RBX: 00007f7a32579020 RCX: 00007f7a32465b19 [ 1501.566749] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1501.566762] RBP: 00007f7a2f9ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1501.566776] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1501.566791] R13: 00007ffe0bebc99f R14: 00007f7a2f9ba300 R15: 0000000000022000 [ 1501.566825] 23:16:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x20000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:16:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) (fail_nth: 7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:16:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x5, 0x20, 0x9, 0x1, 0x0, "7b59a2288b83f2f3e2da1c08851c4a25612619"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1501.787862] serio: Serial port ptm3 [ 1501.794902] No source specified [ 1501.803451] No source specified 23:16:32 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 50) [ 1501.842557] FAULT_INJECTION: forcing a failure. [ 1501.842557] name failslab, interval 1, probability 0, space 0, times 0 [ 1501.844377] CPU: 1 UID: 0 PID: 11268 Comm: syz-executor.2 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1501.844408] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1501.844422] Call Trace: [ 1501.844430] [ 1501.844439] dump_stack_lvl+0xfa/0x120 [ 1501.844482] should_fail_ex+0x4d7/0x5e0 [ 1501.844509] should_failslab+0xc2/0x120 [ 1501.844534] __kmalloc_cache_noprof+0x81/0x6b0 [ 1501.844566] ? kobject_uevent_env+0x22e/0xf90 [ 1501.844595] ? dev_uevent_filter+0x50/0xe0 [ 1501.844630] ? kobject_uevent_env+0x22e/0xf90 [ 1501.844660] kobject_uevent_env+0x22e/0xf90 [ 1501.844692] ? kobject_put+0xaa/0x260 [ 1501.844726] device_del+0x80a/0xd20 [ 1501.844763] ? __pfx_device_del+0x10/0x10 [ 1501.844797] ? mark_held_locks+0x49/0x80 [ 1501.844835] serio_destroy_port+0x432/0x510 [ 1501.844870] serio_unregister_port+0x35/0x70 [ 1501.844898] serport_ldisc_read+0x3c8/0x650 [ 1501.844925] ? __pfx_serport_ldisc_read+0x10/0x10 [ 1501.844958] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1501.844994] ? __pfx_perf_trace_lock+0x10/0x10 [ 1501.845036] tty_read+0x2e8/0x5b0 [ 1501.845073] ? __pfx_tty_read+0x10/0x10 [ 1501.845106] ? avc_policy_seqno+0x9/0x20 [ 1501.845132] ? selinux_file_permission+0x99/0x600 [ 1501.845163] ? security_file_permission+0x22/0x90 [ 1501.845196] vfs_read+0x868/0xc70 [ 1501.845221] ? __fget_files+0x34/0x3b0 [ 1501.845255] ? __pfx_vfs_read+0x10/0x10 [ 1501.845301] ksys_read+0x121/0x240 [ 1501.845320] ? __pfx_ksys_read+0x10/0x10 [ 1501.845342] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1501.845382] do_syscall_64+0xbf/0x430 [ 1501.845408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1501.845431] RIP: 0033:0x7fdede60db19 [ 1501.845448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1501.845471] RSP: 002b:00007fdedbb83188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1501.845493] RAX: ffffffffffffffda RBX: 00007fdede720f60 RCX: 00007fdede60db19 [ 1501.845508] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1501.845522] RBP: 00007fdedbb831d0 R08: 0000000000000000 R09: 0000000000000000 [ 1501.845536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1501.845549] R13: 00007ffccaccba8f R14: 00007fdedbb83300 R15: 0000000000022000 [ 1501.845583] 23:16:32 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 58) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:16:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x20100000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:16:32 executing program 4: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x7666256847375ef5, 0x0) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) ioctl$TCSETSF2(r1, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 23:16:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) (fail_nth: 8) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:16:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x43160000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:16:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) dup2(r0, r0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:16:32 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 12) [ 1502.192826] serio: Serial port ptm0 [ 1502.329911] serio: Serial port ptm0 [ 1502.375918] FAULT_INJECTION: forcing a failure. [ 1502.375918] name failslab, interval 1, probability 0, space 0, times 0 [ 1502.377817] CPU: 0 UID: 0 PID: 11295 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1502.377850] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1502.377865] Call Trace: [ 1502.377874] [ 1502.377884] dump_stack_lvl+0xfa/0x120 [ 1502.377932] should_fail_ex+0x4d7/0x5e0 [ 1502.377970] should_failslab+0xc2/0x120 [ 1502.378002] __kmalloc_cache_noprof+0x81/0x6b0 [ 1502.378031] ? __virt_addr_valid+0x1c6/0x5d0 [ 1502.378059] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1502.378098] ? __iomap_dio_rw+0x271/0x1c90 [ 1502.378122] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1502.378165] ? __iomap_dio_rw+0x271/0x1c90 [ 1502.378187] __iomap_dio_rw+0x271/0x1c90 [ 1502.378213] ? mark_held_locks+0x49/0x80 [ 1502.378252] ? kasan_quarantine_put+0x84/0x1e0 [ 1502.378280] ? kmem_cache_free+0x2a4/0x550 [ 1502.378314] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1502.378343] ? jbd2_journal_stop+0x184/0xe20 [ 1502.378398] ? ext4_dirty_inode+0xf1/0x130 [ 1502.378430] ? __mark_inode_dirty+0x254/0x1470 [ 1502.378466] iomap_dio_rw+0x40/0xa0 [ 1502.378494] ext4_file_write_iter+0x11eb/0x19f0 [ 1502.378536] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1502.378567] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1502.378610] iter_file_splice_write+0xa3a/0x11f0 [ 1502.378663] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1502.378727] ? lock_is_held_type+0x9e/0x120 [ 1502.378764] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1502.378801] direct_splice_actor+0x192/0x7b0 [ 1502.378839] splice_direct_to_actor+0x347/0x9d0 [ 1502.378875] ? __pfx_direct_splice_actor+0x10/0x10 [ 1502.378916] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1502.378952] ? lock_acquire+0x15e/0x2f0 [ 1502.378992] do_splice_direct+0x179/0x250 [ 1502.379025] ? __pfx_do_splice_direct+0x10/0x10 [ 1502.379059] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1502.379096] ? security_file_permission+0x22/0x90 [ 1502.379133] do_sendfile+0xa8e/0xdc0 [ 1502.379178] ? __pfx_do_sendfile+0x10/0x10 [ 1502.379214] ? __fget_files+0x20d/0x3b0 [ 1502.379263] __x64_sys_sendfile64+0x1d3/0x210 [ 1502.379293] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1502.379322] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1502.379366] do_syscall_64+0xbf/0x430 [ 1502.379393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.379433] RIP: 0033:0x7f20266ecb19 [ 1502.379452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1502.379476] RSP: 002b:00007f2023c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1502.379500] RAX: ffffffffffffffda RBX: 00007f2026800020 RCX: 00007f20266ecb19 [ 1502.379516] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1502.379531] RBP: 00007f2023c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1502.379546] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1502.379561] R13: 00007ffcc2c01daf R14: 00007f2023c41300 R15: 0000000000022000 [ 1502.379597] 23:16:42 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 51) 23:16:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) read(r0, 0x0, 0x600000000000000) 23:16:42 executing program 4: syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="28010000", @ANYRES16=r0, @ANYBLOB="0225bd700001000000040000007c00088044000780080005000793721ef6ff040068eec6770800060050000000080006004500000008000500cbec4f28250005004b3f6940080005004136af47080006004000000014000780080005004427a36a08000600190000000c00078008000500a50ab15314000780080005007c80ca32080005009421502898000c803c000b8008000900ee33a819080009000d2c4779080009002fd3fc2f08000a002b4e000008000a00ae83000008000900c48cd745080009008274ed1154000b8008000900bb47e65e08000a005fe1000008000900df6e191708000a00a8c8000008000a00afdd000008000a002513000008000900a570137d08000a00edfe00000800090054a60b3008000a0062fa000004000b8000f9ace1971031bf327d6416d66022cebc9d4a68833f7bbe8d2c2afcabdb987a8e4ee785aebcaacba43353c49478d100ae5fb45e5cc9dcbc82d7494ccc0c89ba37fbc35d24e6c7c5177cc4fcd368f7a82e0300a3f7fd429b15a68b2712ade4179a99897b373c3e479ea956bc802b1be308670bd76a926cb524f3bacee1b04838b32f41382067fa0ca42d95c6e9c549e082259e909d932732c5f407bc7ae37a5aa5cd6cab0418cee0c8229bfcaf4720abf47e1e0f92baa8bdc418661175929428ac17a3f40da4e0096e21cf7d95b48f82c085086de6327dd8313a1a8ec17590cc5e3b6fbd4f2e58816c7f"], 0x128}}, 0x20002015) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r1, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0xfffffffe, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824", 0x1}) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x16c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x158, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15be3026}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e4f6104}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4911bb60}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15811d94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4db49ca5}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4eeff1c8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c05c0b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x610ca71f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d24dc5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ffd3ef1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7890f844}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12363d3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1387ec88}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e4da7c2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfb1ecdc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49f46325}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f4f3bb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x515f085e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12e1747e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fa77f12}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75d73dac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e4f8b69}]}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x1}, 0x41) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000280)=0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x40, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}]}, 0x40}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x208, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4c, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x167597b5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69eca2f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14b48c70}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7acf60f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x190, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8cd8579}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37ced41e}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1466a410}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ce9abd0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55796219}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4627e961}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x341e157d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x58a1587}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d574482}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xea43dfe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x129f24dc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x354733c1}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11f697d1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3993e049}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x100b0788}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77670d70}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbabd8f0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1979a751}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 23:16:42 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 13) 23:16:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x8cffffff, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:16:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) (fail_nth: 9) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:16:42 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x80045432, 0x0) 23:16:42 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 59) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1512.255171] serio: Serial port ptm0 [ 1512.288850] serio: Serial port ptm2 [ 1512.305109] serio: Serial port ptm1 23:16:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2ac203, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:16:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xc0ed0000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1512.364643] FAULT_INJECTION: forcing a failure. [ 1512.364643] name failslab, interval 1, probability 0, space 0, times 0 [ 1512.366467] CPU: 0 UID: 0 PID: 11320 Comm: syz-executor.2 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1512.366501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1512.366517] Call Trace: [ 1512.366526] [ 1512.366536] dump_stack_lvl+0xfa/0x120 [ 1512.366587] should_fail_ex+0x4d7/0x5e0 [ 1512.366618] should_failslab+0xc2/0x120 [ 1512.366647] __kmalloc_noprof+0xcd/0x680 [ 1512.366680] ? trace_kmalloc+0x1f/0xb0 [ 1512.366702] ? kobject_get_path+0xc9/0x200 [ 1512.366739] kobject_get_path+0xc9/0x200 [ 1512.366769] ? kasan_save_track+0x14/0x30 [ 1512.366801] kobject_uevent_env+0x252/0xf90 [ 1512.366839] ? kobject_put+0xaa/0x260 [ 1512.366876] device_del+0x80a/0xd20 [ 1512.366920] ? __pfx_device_del+0x10/0x10 [ 1512.366966] ? mark_held_locks+0x49/0x80 [ 1512.367011] serio_destroy_port+0x432/0x510 [ 1512.367050] serio_unregister_port+0x35/0x70 [ 1512.367082] serport_ldisc_read+0x3c8/0x650 [ 1512.367113] ? __pfx_serport_ldisc_read+0x10/0x10 [ 1512.367143] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1512.367183] ? __pfx_perf_trace_lock+0x10/0x10 [ 1512.367231] tty_read+0x2e8/0x5b0 [ 1512.367273] ? __pfx_tty_read+0x10/0x10 [ 1512.367310] ? avc_policy_seqno+0x9/0x20 [ 1512.367341] ? selinux_file_permission+0x99/0x600 [ 1512.367375] ? security_file_permission+0x22/0x90 [ 1512.367412] vfs_read+0x868/0xc70 [ 1512.367441] ? __fget_files+0x34/0x3b0 [ 1512.367480] ? __pfx_vfs_read+0x10/0x10 [ 1512.367530] ksys_read+0x121/0x240 [ 1512.367553] ? __pfx_ksys_read+0x10/0x10 [ 1512.367577] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1512.367638] do_syscall_64+0xbf/0x430 [ 1512.367667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1512.367693] RIP: 0033:0x7fdede60db19 [ 1512.367712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1512.367737] RSP: 002b:00007fdedbb83188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1512.367762] RAX: ffffffffffffffda RBX: 00007fdede720f60 RCX: 00007fdede60db19 [ 1512.367779] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1512.367795] RBP: 00007fdedbb831d0 R08: 0000000000000000 R09: 0000000000000000 [ 1512.367810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1512.367825] R13: 00007ffccaccba8f R14: 00007fdedbb83300 R15: 0000000000022000 [ 1512.367863] [ 1512.449898] No source specified [ 1512.457590] No source specified [ 1513.086604] serio: Serial port ptm1 [ 1513.095324] serio: Serial port ptm3 23:16:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1) 23:16:53 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x80045440, 0x0) 23:16:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xf6ffffff, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:16:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x80000, 0x1ae, 0x2}, 0x18) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f00000000c0)={0x7f, 0xe97, 0x0, 0x6, 0x7, "81ddd630f4a51b7f492b4537d0c82d6ae658b6", 0xffff, 0x4}) read(r0, 0x0, 0x0) 23:16:53 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 52) 23:16:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) (fail_nth: 10) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:16:53 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 14) 23:16:53 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 60) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1523.556788] serio: Serial port ptm0 [ 1523.560920] FAULT_INJECTION: forcing a failure. [ 1523.560920] name failslab, interval 1, probability 0, space 0, times 0 [ 1523.561854] CPU: 1 UID: 0 PID: 11346 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1523.561872] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1523.561880] Call Trace: [ 1523.561885] [ 1523.561891] dump_stack_lvl+0xfa/0x120 [ 1523.561924] should_fail_ex+0x4d7/0x5e0 [ 1523.561953] ? jbd2__journal_start+0x193/0x6b0 [ 1523.561980] should_failslab+0xc2/0x120 [ 1523.561996] kmem_cache_alloc_noprof+0x80/0x690 [ 1523.562015] ? lock_is_held_type+0x9e/0x120 [ 1523.562040] ? jbd2__journal_start+0x193/0x6b0 [ 1523.562059] jbd2__journal_start+0x193/0x6b0 [ 1523.562082] __ext4_journal_start_sb+0x325/0x5d0 [ 1523.562100] ? ext4_iomap_begin+0x5b0/0xe80 [ 1523.562115] ? ext4_meta_trans_blocks+0x256/0x310 [ 1523.562132] ext4_iomap_begin+0x5b0/0xe80 [ 1523.562156] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1523.562172] ? iomap_iter_advance+0x177/0x1f0 [ 1523.562195] ? iomap_dio_bio_iter+0x8ac/0x1310 [ 1523.562210] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1523.562225] iomap_iter+0x55a/0x1020 [ 1523.562248] __iomap_dio_rw+0x6dd/0x1c90 [ 1523.562267] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1523.562293] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1523.562311] ? kasan_quarantine_put+0x84/0x1e0 [ 1523.562336] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1523.562356] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1523.562369] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1523.562392] iomap_dio_rw+0x40/0xa0 [ 1523.562406] ext4_file_write_iter+0xe0e/0x19f0 [ 1523.562428] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1523.562442] ? trace_kmalloc+0x1f/0xb0 [ 1523.562454] ? __kmalloc_noprof+0x274/0x680 [ 1523.562470] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1523.562494] iter_file_splice_write+0xa3a/0x11f0 [ 1523.562522] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1523.562556] ? lock_is_held_type+0x9e/0x120 [ 1523.562575] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1523.562595] direct_splice_actor+0x192/0x7b0 [ 1523.562616] splice_direct_to_actor+0x347/0x9d0 [ 1523.562635] ? __pfx_direct_splice_actor+0x10/0x10 [ 1523.562657] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1523.562677] ? lock_acquire+0x15e/0x2f0 [ 1523.562699] do_splice_direct+0x179/0x250 [ 1523.562718] ? __pfx_do_splice_direct+0x10/0x10 [ 1523.562736] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1523.562756] ? security_file_permission+0x22/0x90 [ 1523.562776] do_sendfile+0xa8e/0xdc0 [ 1523.562801] ? __pfx_do_sendfile+0x10/0x10 [ 1523.562821] ? __fget_files+0x20d/0x3b0 [ 1523.562847] __x64_sys_sendfile64+0x1d3/0x210 [ 1523.562863] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1523.562878] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1523.562902] do_syscall_64+0xbf/0x430 [ 1523.562923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.562942] RIP: 0033:0x7fb59c6b8b19 [ 1523.562952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1523.562965] RSP: 002b:00007fb599c2e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1523.562978] RAX: ffffffffffffffda RBX: 00007fb59c7cbf60 RCX: 00007fb59c6b8b19 [ 1523.562987] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1523.562995] RBP: 00007fb599c2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1523.563003] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1523.563011] R13: 00007fff3932da4f R14: 00007fb599c2e300 R15: 0000000000022000 [ 1523.563030] [ 1523.616584] serio: Serial port ptm1 23:16:54 executing program 4: inotify_init1(0x80000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x3}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x3c}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x881c0, 0x0) ioctl$TCSETSF2(r2, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) [ 1523.706597] FAULT_INJECTION: forcing a failure. [ 1523.706597] name failslab, interval 1, probability 0, space 0, times 0 [ 1523.709006] CPU: 0 UID: 0 PID: 11357 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1523.709041] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1523.709056] Call Trace: [ 1523.709064] [ 1523.709074] dump_stack_lvl+0xfa/0x120 [ 1523.709121] should_fail_ex+0x4d7/0x5e0 [ 1523.709149] ? jbd2__journal_start+0x193/0x6b0 [ 1523.709186] should_failslab+0xc2/0x120 [ 1523.709213] kmem_cache_alloc_noprof+0x80/0x690 [ 1523.709248] ? lock_is_held_type+0x9e/0x120 [ 1523.709290] ? jbd2__journal_start+0x193/0x6b0 [ 1523.709326] jbd2__journal_start+0x193/0x6b0 [ 1523.709369] __ext4_journal_start_sb+0x325/0x5d0 [ 1523.709399] ? ext4_iomap_begin+0x5b0/0xe80 [ 1523.709425] ? ext4_meta_trans_blocks+0x256/0x310 [ 1523.709458] ext4_iomap_begin+0x5b0/0xe80 [ 1523.709502] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1523.709530] ? mark_held_locks+0x49/0x80 [ 1523.709570] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1523.709604] ? __create_object+0x59/0x80 [ 1523.709639] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1523.709665] iomap_iter+0x55a/0x1020 [ 1523.709710] __iomap_dio_rw+0x6dd/0x1c90 [ 1523.709754] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1523.709816] ? ext4_dirty_inode+0xf1/0x130 [ 1523.709847] ? __mark_inode_dirty+0x254/0x1470 [ 1523.709883] iomap_dio_rw+0x40/0xa0 [ 1523.709910] ext4_file_write_iter+0x11eb/0x19f0 [ 1523.709959] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1523.709991] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1523.710034] iter_file_splice_write+0xa3a/0x11f0 [ 1523.710086] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1523.710151] ? lock_is_held_type+0x9e/0x120 [ 1523.710187] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1523.710224] direct_splice_actor+0x192/0x7b0 [ 1523.710262] splice_direct_to_actor+0x347/0x9d0 [ 1523.710297] ? __pfx_direct_splice_actor+0x10/0x10 [ 1523.710338] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1523.710375] ? lock_acquire+0x15e/0x2f0 [ 1523.710414] do_splice_direct+0x179/0x250 [ 1523.710447] ? __pfx_do_splice_direct+0x10/0x10 [ 1523.710481] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1523.710518] ? security_file_permission+0x22/0x90 [ 1523.710555] do_sendfile+0xa8e/0xdc0 [ 1523.710600] ? __pfx_do_sendfile+0x10/0x10 [ 1523.710636] ? __fget_files+0x20d/0x3b0 [ 1523.710685] __x64_sys_sendfile64+0x1d3/0x210 [ 1523.710713] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1523.710743] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1523.710787] do_syscall_64+0xbf/0x430 [ 1523.710814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.710838] RIP: 0033:0x7f20266ecb19 [ 1523.710857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1523.710880] RSP: 002b:00007f2023c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1523.710905] RAX: ffffffffffffffda RBX: 00007f2026800020 RCX: 00007f20266ecb19 [ 1523.710921] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1523.710936] RBP: 00007f2023c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1523.710951] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1523.710966] R13: 00007ffcc2c01daf R14: 00007f2023c41300 R15: 0000000000022000 [ 1523.711002] [ 1523.732248] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:16:54 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 53) 23:16:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) (fail_nth: 11) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:16:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xf9fdffff, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1523.778594] serio: Serial port ptm0 [ 1523.827935] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1523.830084] serio: Serial port ptm2 23:16:54 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 61) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:16:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xffffe000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1523.893836] FAULT_INJECTION: forcing a failure. [ 1523.893836] name failslab, interval 1, probability 0, space 0, times 0 [ 1523.895041] CPU: 1 UID: 0 PID: 11366 Comm: syz-executor.2 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1523.895058] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1523.895066] Call Trace: [ 1523.895071] [ 1523.895076] dump_stack_lvl+0xfa/0x120 [ 1523.895103] should_fail_ex+0x4d7/0x5e0 [ 1523.895119] should_failslab+0xc2/0x120 [ 1523.895134] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 1523.895152] ? __alloc_skb+0x2ab/0x370 [ 1523.895173] ? __alloc_skb+0x2ab/0x370 [ 1523.895187] __alloc_skb+0x2ab/0x370 [ 1523.895202] ? __pfx___alloc_skb+0x10/0x10 [ 1523.895216] ? lock_acquire+0x15e/0x2f0 [ 1523.895234] ? netlink_has_listeners+0x7f/0x430 [ 1523.895253] ? netlink_has_listeners+0x20d/0x430 [ 1523.895269] ? lock_release+0xc8/0x290 [ 1523.895288] alloc_uevent_skb+0x7b/0x210 [ 1523.895307] kobject_uevent_env+0xa8c/0xf90 [ 1523.895329] device_del+0x80a/0xd20 [ 1523.895351] ? __pfx_device_del+0x10/0x10 [ 1523.895371] ? mark_held_locks+0x49/0x80 [ 1523.895391] serio_destroy_port+0x432/0x510 [ 1523.895410] serio_unregister_port+0x35/0x70 [ 1523.895426] serport_ldisc_read+0x3c8/0x650 [ 1523.895440] ? __pfx_serport_ldisc_read+0x10/0x10 [ 1523.895455] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1523.895474] ? __pfx_perf_trace_lock+0x10/0x10 [ 1523.895497] tty_read+0x2e8/0x5b0 [ 1523.895518] ? __pfx_tty_read+0x10/0x10 [ 1523.895537] ? avc_policy_seqno+0x9/0x20 [ 1523.895553] ? selinux_file_permission+0x99/0x600 [ 1523.895569] ? security_file_permission+0x22/0x90 [ 1523.895588] vfs_read+0x868/0xc70 [ 1523.895602] ? __fget_files+0x34/0x3b0 [ 1523.895621] ? __pfx_vfs_read+0x10/0x10 [ 1523.895646] ksys_read+0x121/0x240 [ 1523.895656] ? __pfx_ksys_read+0x10/0x10 [ 1523.895668] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1523.895692] do_syscall_64+0xbf/0x430 [ 1523.895707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.895722] RIP: 0033:0x7fdede60db19 [ 1523.895734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1523.895746] RSP: 002b:00007fdedbb83188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1523.895759] RAX: ffffffffffffffda RBX: 00007fdede720f60 RCX: 00007fdede60db19 [ 1523.895767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1523.895774] RBP: 00007fdedbb831d0 R08: 0000000000000000 R09: 0000000000000000 [ 1523.895781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1523.895788] R13: 00007ffccaccba8f R14: 00007fdedbb83300 R15: 0000000000022000 [ 1523.895820] [ 1523.918153] FAULT_INJECTION: forcing a failure. [ 1523.918153] name failslab, interval 1, probability 0, space 0, times 0 [ 1523.920201] CPU: 0 UID: 0 PID: 11375 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1523.920234] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1523.920248] Call Trace: [ 1523.920256] [ 1523.920265] dump_stack_lvl+0xfa/0x120 [ 1523.920315] should_fail_ex+0x4d7/0x5e0 [ 1523.920344] ? __es_insert_extent+0xed2/0x1370 [ 1523.920379] should_failslab+0xc2/0x120 [ 1523.920406] kmem_cache_alloc_noprof+0x80/0x690 [ 1523.920439] ? ext4_es_can_be_merged.isra.0+0x13b/0x160 [ 1523.920481] ? __es_insert_extent+0xed2/0x1370 [ 1523.920513] __es_insert_extent+0xed2/0x1370 [ 1523.920564] ext4_es_insert_extent+0x438/0x1090 [ 1523.920594] ? __pfx_perf_trace_lock+0x10/0x10 [ 1523.920633] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 1523.920655] ? lock_acquire+0x15e/0x2f0 [ 1523.920686] ? ext4_map_blocks+0x564/0x1510 [ 1523.920726] ? __pfx_down_write+0x10/0x10 [ 1523.920761] ext4_map_blocks+0x808/0x1510 [ 1523.920790] ? kmem_cache_alloc_noprof+0x270/0x690 [ 1523.920820] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1523.920851] ? jbd2__journal_start+0xf6/0x6b0 [ 1523.920892] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1523.920918] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1523.920951] ? ext4_iomap_begin+0x5b0/0xe80 [ 1523.920976] ? ext4_meta_trans_blocks+0x256/0x310 [ 1523.921007] ext4_iomap_begin+0xa5e/0xe80 [ 1523.921031] ? __pfx_perf_trace_lock+0x10/0x10 [ 1523.921078] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1523.921105] ? mark_held_locks+0x49/0x80 [ 1523.921140] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1523.921171] ? __create_object+0x59/0x80 [ 1523.921205] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1523.921229] iomap_iter+0x55a/0x1020 [ 1523.921272] __iomap_dio_rw+0x6dd/0x1c90 [ 1523.921306] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1523.921350] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1523.921382] ? kasan_quarantine_put+0x84/0x1e0 [ 1523.921428] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1523.921463] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1523.921485] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1523.921524] iomap_dio_rw+0x40/0xa0 [ 1523.921550] ext4_file_write_iter+0xe0e/0x19f0 [ 1523.921589] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1523.921613] ? trace_kmalloc+0x1f/0xb0 [ 1523.921632] ? __kmalloc_noprof+0x274/0x680 [ 1523.921660] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1523.921702] iter_file_splice_write+0xa3a/0x11f0 [ 1523.921753] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1523.921815] ? lock_is_held_type+0x9e/0x120 [ 1523.921849] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1523.921884] direct_splice_actor+0x192/0x7b0 [ 1523.921919] splice_direct_to_actor+0x347/0x9d0 [ 1523.921953] ? __pfx_direct_splice_actor+0x10/0x10 [ 1523.921991] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1523.922026] ? lock_acquire+0x15e/0x2f0 [ 1523.922063] do_splice_direct+0x179/0x250 [ 1523.922093] ? __pfx_do_splice_direct+0x10/0x10 [ 1523.922125] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1523.922160] ? security_file_permission+0x22/0x90 [ 1523.922194] do_sendfile+0xa8e/0xdc0 [ 1523.922237] ? __pfx_do_sendfile+0x10/0x10 [ 1523.922271] ? __fget_files+0x20d/0x3b0 [ 1523.922318] __x64_sys_sendfile64+0x1d3/0x210 [ 1523.922346] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1523.922374] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1523.922421] do_syscall_64+0xbf/0x430 [ 1523.922447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.922470] RIP: 0033:0x7f7a32465b19 [ 1523.922488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1523.922511] RSP: 002b:00007f7a2f9ba188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1523.922534] RAX: ffffffffffffffda RBX: 00007f7a32579020 RCX: 00007f7a32465b19 [ 1523.922550] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1523.922564] RBP: 00007f7a2f9ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1523.922579] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1523.922593] R13: 00007ffe0bebc99f R14: 00007f7a2f9ba300 R15: 0000000000022000 [ 1523.922628] 23:16:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) (fail_nth: 12) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:16:54 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 15) [ 1524.071666] serio: Serial port ptm2 [ 1524.436166] serio: Serial port ptm2 [ 1524.592719] serio: Serial port ptm1 23:17:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x8) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:17:04 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 54) 23:17:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) (fail_nth: 13) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:17:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xfffffdf9, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:17:04 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 62) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:17:04 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x80086601, 0x0) 23:17:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x6) 23:17:04 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 16) [ 1534.076773] serio: Serial port ptm0 23:17:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x4, 0x100, 0x0, 0x4, 0x7, "f2281a24506b000300a29b0000007df3480824", 0x1d}) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) [ 1534.137510] serio: Serial port ptm1 [ 1534.154170] FAULT_INJECTION: forcing a failure. [ 1534.154170] name failslab, interval 1, probability 0, space 0, times 0 23:17:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) (fail_nth: 14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1534.155870] CPU: 0 UID: 0 PID: 11412 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1534.155903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1534.155918] Call Trace: [ 1534.155927] [ 1534.155936] dump_stack_lvl+0xfa/0x120 [ 1534.156005] should_fail_ex+0x4d7/0x5e0 [ 1534.156034] ? ext4_mb_new_blocks+0x64e/0x4580 [ 1534.156060] should_failslab+0xc2/0x120 [ 1534.156087] kmem_cache_alloc_noprof+0x80/0x690 [ 1534.156118] ? ext4_dirty_inode+0xf1/0x130 [ 1534.156151] ? __mark_inode_dirty+0x254/0x1470 [ 1534.156184] ? ext4_mb_new_blocks+0x64e/0x4580 [ 1534.156209] ext4_mb_new_blocks+0x64e/0x4580 [ 1534.156246] ? perf_trace_lock+0xb5/0x5d0 [ 1534.156287] ? ext4_ind_map_blocks+0x263/0x2330 [ 1534.156323] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 1534.156351] ? __pfx_perf_trace_lock+0x10/0x10 [ 1534.156384] ? ext4_get_branch+0x588/0x740 [ 1534.156425] ext4_ind_map_blocks+0x1850/0x2330 [ 1534.156465] ? unwind_next_frame+0x3bc/0x2540 [ 1534.156499] ? __pfx_ext4_ind_map_blocks+0x10/0x10 [ 1534.156549] ? lock_acquire+0x15e/0x2f0 [ 1534.156582] ? ext4_map_blocks+0x564/0x1510 [ 1534.156620] ? down_write+0x119/0x1f0 [ 1534.156644] ? __pfx_down_write+0x10/0x10 [ 1534.156667] ? lock_release+0xc8/0x290 [ 1534.156708] ext4_map_blocks+0xaf1/0x1510 [ 1534.156739] ? kmem_cache_alloc_noprof+0x270/0x690 [ 1534.156771] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1534.156804] ? jbd2__journal_start+0xf6/0x6b0 [ 1534.156847] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1534.156875] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1534.156903] ? ext4_iomap_begin+0x5b0/0xe80 [ 1534.156929] ? ext4_meta_trans_blocks+0x256/0x310 [ 1534.156963] ext4_iomap_begin+0xa5e/0xe80 [ 1534.157006] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1534.157036] ? iomap_iter_advance+0x177/0x1f0 [ 1534.157076] ? iomap_dio_bio_iter+0x8ac/0x1310 [ 1534.157105] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1534.157132] iomap_iter+0x55a/0x1020 [ 1534.157176] __iomap_dio_rw+0x6dd/0x1c90 [ 1534.157211] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1534.157258] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1534.157292] ? kasan_quarantine_put+0x84/0x1e0 [ 1534.157339] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1534.157378] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1534.157401] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1534.157443] iomap_dio_rw+0x40/0xa0 [ 1534.157470] ext4_file_write_iter+0xe0e/0x19f0 [ 1534.157511] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1534.157537] ? trace_kmalloc+0x1f/0xb0 [ 1534.157557] ? __kmalloc_noprof+0x274/0x680 [ 1534.157588] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1534.157631] iter_file_splice_write+0xa3a/0x11f0 [ 1534.157684] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1534.157749] ? lock_is_held_type+0x9e/0x120 [ 1534.157785] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1534.157822] direct_splice_actor+0x192/0x7b0 [ 1534.157861] splice_direct_to_actor+0x347/0x9d0 [ 1534.157896] ? __pfx_direct_splice_actor+0x10/0x10 [ 1534.157938] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1534.157975] ? lock_acquire+0x15e/0x2f0 [ 1534.158015] do_splice_direct+0x179/0x250 [ 1534.158048] ? __pfx_do_splice_direct+0x10/0x10 [ 1534.158082] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1534.158120] ? security_file_permission+0x22/0x90 [ 1534.158155] do_sendfile+0xa8e/0xdc0 [ 1534.158201] ? __pfx_do_sendfile+0x10/0x10 [ 1534.158237] ? __fget_files+0x20d/0x3b0 [ 1534.158286] __x64_sys_sendfile64+0x1d3/0x210 [ 1534.158315] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1534.158345] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1534.158389] do_syscall_64+0xbf/0x430 [ 1534.158416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.158440] RIP: 0033:0x7fb59c6b8b19 [ 1534.158459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1534.158483] RSP: 002b:00007fb599c2e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1534.158507] RAX: ffffffffffffffda RBX: 00007fb59c7cbf60 RCX: 00007fb59c6b8b19 [ 1534.158523] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1534.158538] RBP: 00007fb599c2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1534.158553] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1534.158567] R13: 00007fff3932da4f R14: 00007fb599c2e300 R15: 0000000000022000 [ 1534.158602] 23:17:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:17:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xffffff8c, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1534.258508] serio: Serial port ptm0 [ 1534.271182] FAULT_INJECTION: forcing a failure. [ 1534.271182] name failslab, interval 1, probability 0, space 0, times 0 [ 1534.272140] CPU: 1 UID: 0 PID: 11421 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1534.272159] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1534.272168] Call Trace: [ 1534.272177] [ 1534.272182] dump_stack_lvl+0xfa/0x120 [ 1534.272216] should_fail_ex+0x4d7/0x5e0 [ 1534.272233] ? jbd2__journal_start+0x193/0x6b0 [ 1534.272255] should_failslab+0xc2/0x120 [ 1534.272271] kmem_cache_alloc_noprof+0x80/0x690 [ 1534.272294] ? jbd2__journal_start+0x193/0x6b0 [ 1534.272316] jbd2__journal_start+0x193/0x6b0 [ 1534.272340] __ext4_journal_start_sb+0x325/0x5d0 [ 1534.272359] ? ext4_dirty_inode+0xa5/0x130 [ 1534.272380] ext4_dirty_inode+0xa5/0x130 [ 1534.272397] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1534.272414] __mark_inode_dirty+0x1b7/0x1470 [ 1534.272435] generic_update_time+0xcb/0xf0 [ 1534.272452] file_modified+0x1f0/0x230 [ 1534.272469] ext4_buffered_write_iter+0xf4/0x430 [ 1534.272487] ext4_file_write_iter+0x104b/0x19f0 [ 1534.272508] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1534.272525] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1534.272547] iter_file_splice_write+0xa3a/0x11f0 [ 1534.272574] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1534.272608] ? lock_is_held_type+0x9e/0x120 [ 1534.272630] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1534.272651] direct_splice_actor+0x192/0x7b0 [ 1534.272673] splice_direct_to_actor+0x347/0x9d0 [ 1534.272693] ? __pfx_direct_splice_actor+0x10/0x10 [ 1534.272715] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1534.272734] ? lock_acquire+0x15e/0x2f0 [ 1534.272757] do_splice_direct+0x179/0x250 [ 1534.272774] ? __pfx_do_splice_direct+0x10/0x10 [ 1534.272792] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1534.272811] ? security_file_permission+0x22/0x90 [ 1534.272833] do_sendfile+0xa8e/0xdc0 [ 1534.272858] ? __pfx_do_sendfile+0x10/0x10 [ 1534.272878] ? __fget_files+0x20d/0x3b0 [ 1534.272906] __x64_sys_sendfile64+0x1d3/0x210 [ 1534.272922] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1534.272938] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1534.272960] do_syscall_64+0xbf/0x430 [ 1534.272975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.272989] RIP: 0033:0x7f20266ecb19 [ 1534.272999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1534.273013] RSP: 002b:00007f2023c20188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1534.273026] RAX: ffffffffffffffda RBX: 00007f20268000e0 RCX: 00007f20266ecb19 [ 1534.273036] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1534.273045] RBP: 00007f2023c201d0 R08: 0000000000000000 R09: 0000000000000000 [ 1534.273054] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1534.273062] R13: 00007ffcc2c01daf R14: 00007f2023c20300 R15: 0000000000022000 [ 1534.273082] 23:17:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e23, @empty}, {0x2, 0x1, @broadcast}, 0x165, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)='vxcan1\x00', 0x7ff, 0x100000001, 0x5}) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r3, 0x4b4b, 0x0) r4 = openat$cgroup_type(r1, &(0x7f00000003c0), 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r5, 0x4b4b, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) r8 = eventfd2(0x7d, 0x80000) io_submit(0x0, 0xa, &(0x7f0000002a00)=[&(0x7f0000002a80)={0x0, 0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff, &(0x7f0000000140)="ee167f2bbfcce7433b40841f939b0f4b2d2b7c7bb5c932b51cdc435ae83c6e3284b311c863cc92c15c1a8356743c4eae653fcfa36013377155c1dc19b8c195603680ea100333ad61a108cfe3f7006209452a95363696b3002a1f6a69bee8c18de5c018f27e5d0533a0ce1962cd659b70820e6b51f82212e43654fac5008971a5472872ee62ec37de045594a87f8f2df371d66a84b2013619368e881835586ed3a95bb66fbaf98cbf79278812d83073a4afc17a8b4078451b3300afdb", 0xbc, 0x9, 0x0, 0x2, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, r3, &(0x7f0000000300)="1530a54fb5cf21c17a999288a4e446bb1b259ce3c7641429c37c69a005b90db18a53f54b0f357bc2aee78d64c9230899ccf3e8b767c644fe63a3f8cea0a510e093231f1b4fbb4f3796cde53131954c1ba374615d81efc99140c3318ab9cd07de667aff8524aba63a32a825ba40b14c513c81359b3993c904", 0x78, 0x0, 0x0, 0x3}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x2, r1, &(0x7f0000000480)="6b39da768a249480b0fd46c972805fbfbb5fde2db5cf28b661005109ac46dc1a33958bc4a02e22f5b14fae70893efbb78cc09048101c1edd7b8ab5df0f2cf7270f1155a2d8e5f56fb3fd70cb197508c76dba1ccd734e8213fe745ec30560fb1d17ce45b81414cdeb723fd17fec7c281c879e47e41f7f876ec174fa3b30278b2fe359a691b81c4b578cb630ebba2e384a4fff1095cd8132466efdc9274be0540d46df493d215f3df6187be1572837ea669ad003dab7593b6749a278a7234d684eb4c6cb9f280e45a516fef43813720b5bebc0eb218da18ea0a307b98a383ed789a9a564f43d", 0xe5, 0x9, 0x0, 0x3, r1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x9, r4, &(0x7f0000000400)="c2465afd526e1c8c952bb07f01defb21bd6315053f5a562ef8b6", 0x1a, 0x40, 0x0, 0x1}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x7, 0x2, r5, &(0x7f00000005c0)="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", 0x1000, 0x100000001, 0x0, 0x1, r1}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x8, 0x7, r6, &(0x7f0000001600)="c834afe477f2ebef1537e14a4977b7362e9b49abf5b646c536e04b723d0b034f525cc308f2e137f32cb04c80490ac122437c43f741bd04162b5a0790ad66418004a2a3d4b395e898dc1320eb70f8b0a7dc8c0c", 0x53, 0x401, 0x0, 0x2}, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x7, 0x1000, r0, &(0x7f00000016c0)="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", 0x1000, 0x401, 0x0, 0x1, r1}, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x8, 0x8000, r7, &(0x7f0000002700)="8f24eff27ff903e6532880292c18a750e14b35c43361e5654a74d17a4b5e38d10f7768f5e726f4bac6ced2753f9cf73637f0b11eb7f1fd3677eb2d954dad23955b45ce91214c4a38f57555d3257fb59ddfc6e0db63fd0e9adc0d18d53008ff17675e895d7acb9e2370573a6647ac01e54fe6a87ebe43ab9ac4c90cd02e1ca71b0789433636584e4c7ca5790c16fe5279ca489c5ff9", 0x95, 0x0, 0x0, 0x1, r1}, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x8, 0x3, r1, &(0x7f0000002800)="97a1fdbb8ee29245d3847d70734a9c54c72dff5a57fd97ecee834264163890fb66d22f0029c36cda4d9e50b1dad8197164108cf7510703eef18f981aa62e338e48739deb173beb9fc949d58f914ebaa63ef55d6431fdcb077a1bb7edc8857a223341d33e2a0a5643a2fc1277121e6cf0e5d8", 0x72, 0x6, 0x0, 0x1}, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x1, 0x1f, r8, &(0x7f00000028c0)="282c6db7ed81ada8d38b5ad85d1df64cad2b6de3190d3444f9bd52cb28b6458dae22b2ad65cae5e908af446688493840f9b48e664f7904c19f37301e63ab6a34f59c17ffcfca6fbbb1b395113647033a17aa731b3d2223a6057dd8f2870604f8f21a6c64d599cc899d3667842d2f22de106fc4b43c3226e6aa5bc2d52ffb45b67c0d49a0e7ce716908ca0670ff5228bc518a31fbb9202a35975d282691fa950b87abae253dd6a55e58047b51898ab83d8818133a83c79f399e88753d634c112e520cadc1aaf1348b16b99a82288d73f84c1184324067bff67bf0ad2a7332844be581bddb98b0c5876fa30e9dc8a4", 0xee, 0x800000000000, 0x0, 0x2}]) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) 23:17:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:17:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) (fail_nth: 15) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1534.421873] serio: Serial port ptm0 23:17:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xfffffff6, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:17:04 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 55) 23:17:04 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 17) 23:17:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x533400, 0x86, 0x12}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r2, 0x4b4b, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f00000000c0)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000100)={0x0, 0x165, 0x401, 0xa0d9, 0x6, "620adac4c26efbda8edc1660ddccd79529898f", 0x2, 0xfffffff7}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1534.520363] serio: Serial port ptm2 [ 1534.525547] FAULT_INJECTION: forcing a failure. [ 1534.525547] name failslab, interval 1, probability 0, space 0, times 0 [ 1534.526640] CPU: 1 UID: 0 PID: 11443 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1534.526659] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1534.526668] Call Trace: [ 1534.526673] [ 1534.526678] dump_stack_lvl+0xfa/0x120 [ 1534.526710] should_fail_ex+0x4d7/0x5e0 [ 1534.526726] ? jbd2__journal_start+0x193/0x6b0 [ 1534.526746] should_failslab+0xc2/0x120 [ 1534.526761] kmem_cache_alloc_noprof+0x80/0x690 [ 1534.526784] ? jbd2__journal_start+0x193/0x6b0 [ 1534.526802] jbd2__journal_start+0x193/0x6b0 [ 1534.526824] __ext4_journal_start_sb+0x325/0x5d0 [ 1534.526840] ? ext4_dio_write_end_io+0x2ba/0x710 [ 1534.526853] ? lock_is_held_type+0x9e/0x120 [ 1534.526875] ext4_dio_write_end_io+0x2ba/0x710 [ 1534.526887] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1534.526905] ? __pfx_ext4_dio_write_end_io+0x10/0x10 [ 1534.526920] iomap_dio_complete+0x14d/0x9e0 [ 1534.526941] iomap_dio_rw+0x73/0xa0 [ 1534.526954] ext4_file_write_iter+0xe0e/0x19f0 [ 1534.526975] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1534.526988] ? trace_kmalloc+0x1f/0xb0 [ 1534.526999] ? __kmalloc_noprof+0x274/0x680 [ 1534.527014] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1534.527037] iter_file_splice_write+0xa3a/0x11f0 [ 1534.527064] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1534.527097] ? lock_is_held_type+0x9e/0x120 [ 1534.527114] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1534.527133] direct_splice_actor+0x192/0x7b0 [ 1534.527152] splice_direct_to_actor+0x347/0x9d0 [ 1534.527170] ? __pfx_direct_splice_actor+0x10/0x10 [ 1534.527191] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1534.527209] ? lock_acquire+0x15e/0x2f0 [ 1534.527231] do_splice_direct+0x179/0x250 [ 1534.527248] ? __pfx_do_splice_direct+0x10/0x10 [ 1534.527265] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1534.527284] ? security_file_permission+0x22/0x90 [ 1534.527304] do_sendfile+0xa8e/0xdc0 [ 1534.527327] ? __pfx_do_sendfile+0x10/0x10 [ 1534.527345] ? __fget_files+0x20d/0x3b0 [ 1534.527372] __x64_sys_sendfile64+0x1d3/0x210 [ 1534.527387] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1534.527402] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1534.527424] do_syscall_64+0xbf/0x430 [ 1534.527438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.527452] RIP: 0033:0x7f7a32465b19 [ 1534.527461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1534.527474] RSP: 002b:00007f7a2f9db188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1534.527486] RAX: ffffffffffffffda RBX: 00007f7a32578f60 RCX: 00007f7a32465b19 [ 1534.527494] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1534.527502] RBP: 00007f7a2f9db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1534.527510] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1534.527517] R13: 00007ffe0bebc99f R14: 00007f7a2f9db300 R15: 0000000000022000 [ 1534.527536] 23:17:05 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xedc000000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1534.575325] FAULT_INJECTION: forcing a failure. [ 1534.575325] name failslab, interval 1, probability 0, space 0, times 0 [ 1534.577060] CPU: 0 UID: 0 PID: 11444 Comm: syz-executor.2 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1534.577093] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1534.577108] Call Trace: [ 1534.577117] [ 1534.577126] dump_stack_lvl+0xfa/0x120 [ 1534.577173] should_fail_ex+0x4d7/0x5e0 [ 1534.577202] ? skb_clone+0x191/0x400 [ 1534.577233] should_failslab+0xc2/0x120 [ 1534.577260] kmem_cache_alloc_noprof+0x80/0x690 [ 1534.577292] ? netlink_broadcast_filtered+0xe6/0xe90 [ 1534.577336] ? skb_clone+0x191/0x400 [ 1534.577367] skb_clone+0x191/0x400 [ 1534.577403] netlink_broadcast_filtered+0xab1/0xe90 [ 1534.577453] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 1534.577491] ? skb_put+0x138/0x1b0 [ 1534.577519] netlink_broadcast+0x39/0x50 [ 1534.577555] kobject_uevent_env+0xa58/0xf90 [ 1534.577600] device_del+0x80a/0xd20 [ 1534.577642] ? __pfx_device_del+0x10/0x10 [ 1534.577679] ? mark_held_locks+0x49/0x80 [ 1534.577721] serio_destroy_port+0x432/0x510 [ 1534.577758] serio_unregister_port+0x35/0x70 [ 1534.577788] serport_ldisc_read+0x3c8/0x650 [ 1534.577817] ? __pfx_serport_ldisc_read+0x10/0x10 [ 1534.577845] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1534.577884] ? __pfx_perf_trace_lock+0x10/0x10 [ 1534.577929] tty_read+0x2e8/0x5b0 [ 1534.577976] ? __pfx_tty_read+0x10/0x10 [ 1534.578012] ? avc_policy_seqno+0x9/0x20 [ 1534.578041] ? selinux_file_permission+0x99/0x600 [ 1534.578073] ? security_file_permission+0x22/0x90 [ 1534.578109] vfs_read+0x868/0xc70 [ 1534.578135] ? __fget_files+0x34/0x3b0 [ 1534.578173] ? __pfx_vfs_read+0x10/0x10 [ 1534.578220] ksys_read+0x121/0x240 [ 1534.578242] ? __pfx_ksys_read+0x10/0x10 [ 1534.578264] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1534.578309] do_syscall_64+0xbf/0x430 [ 1534.578336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.578360] RIP: 0033:0x7fdede60db19 [ 1534.578378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1534.578402] RSP: 002b:00007fdedbb83188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1534.578425] RAX: ffffffffffffffda RBX: 00007fdede720f60 RCX: 00007fdede60db19 [ 1534.578441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1534.578456] RBP: 00007fdedbb831d0 R08: 0000000000000000 R09: 0000000000000000 [ 1534.578470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1534.578485] R13: 00007ffccaccba8f R14: 00007fdedbb83300 R15: 0000000000022000 [ 1534.578520] [ 1534.961408] serio: Serial port ptm2 [ 1535.250597] serio: Serial port ptm1 23:17:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) (fail_nth: 16) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:17:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x8000000000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:17:16 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 18) 23:17:16 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 56) 23:17:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x280902, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x2, 0x400, 0x9, 0xda6, 0xd2, "cb9ae0ea1c12fd2cd15a6182afa8c893251ea3", 0x1, 0x401}) 23:17:16 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 63) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:17:16 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x80087601, 0x0) 23:17:16 executing program 5: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002cbd7000fddbdf255100000008000300", @ANYRES32=r0, @ANYBLOB="0a00060008021100000100000a000600ffffffffffff00000a004600ffffffffffff0000d3d2a81d59404028d4fa1687fd7d04375f75bd69b00e6a05a6e136f89ff4dcb9b7f387228f7fa473a40af23caeb8b9e93ebc4ea384a1cd719b7dc5870ec391457fac6942fc"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000000) ioctl$TCSETSF2(0xffffffffffffffff, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xd4, r2, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x10001}, {0xc, 0x90, 0x431}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0xc5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004880) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x220, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x10000, 0x3a}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x4c014) read(0xffffffffffffffff, 0x0, 0x0) [ 1545.764355] serio: Serial port ptm0 [ 1545.765831] serio: Serial port ptm1 23:17:16 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) read(r0, &(0x7f00000000c0)=""/142, 0x8e) 23:17:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xe0ffff00000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:17:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) (fail_nth: 17) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1545.983233] FAULT_INJECTION: forcing a failure. [ 1545.983233] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1545.985198] CPU: 0 UID: 0 PID: 11479 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1545.985230] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1545.985245] Call Trace: [ 1545.985253] [ 1545.985262] dump_stack_lvl+0xfa/0x120 [ 1545.985308] should_fail_ex+0x4d7/0x5e0 [ 1545.985336] should_fail_alloc_page+0xe0/0x110 [ 1545.985365] prepare_alloc_pages+0x1eb/0x550 [ 1545.985405] ? kernel_text_address+0x5b/0xc0 [ 1545.985442] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 1545.985490] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1545.985536] ? perf_trace_lock+0xb5/0x5d0 [ 1545.985572] ? ext4_dirty_inode+0x92/0x130 [ 1545.985601] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1545.985631] ? policy_nodemask+0xeb/0x4e0 [ 1545.985666] alloc_pages_mpol+0xed/0x340 [ 1545.985698] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1545.985727] ? find_held_lock+0x2b/0x80 [ 1545.985752] ? filemap_get_entry+0x1b1/0x3b0 [ 1545.985778] ? lock_release+0xc8/0x290 [ 1545.985816] folio_alloc_noprof+0x21/0x80 [ 1545.985850] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 1545.985884] ? lock_release+0xc8/0x290 [ 1545.985920] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1545.985965] ? perf_trace_lock+0xb5/0x5d0 [ 1545.986010] __filemap_get_folio_mpol+0x513/0x9a0 [ 1545.986043] ext4_da_write_begin+0x3e1/0xb40 [ 1545.986084] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1545.986116] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 1545.986148] ? jbd2__journal_start+0xf6/0x6b0 [ 1545.986191] generic_perform_write+0x391/0x810 [ 1545.986238] ? __pfx_generic_perform_write+0x10/0x10 [ 1545.986278] ? generic_update_time+0xcb/0xf0 [ 1545.986304] ? mnt_put_write_access_file+0x45/0xe0 [ 1545.986346] ext4_buffered_write_iter+0x11a/0x430 [ 1545.986377] ext4_file_write_iter+0x104b/0x19f0 [ 1545.986416] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1545.986446] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1545.986489] iter_file_splice_write+0xa3a/0x11f0 [ 1545.986540] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1545.986603] ? lock_is_held_type+0x9e/0x120 [ 1545.986639] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1545.986676] direct_splice_actor+0x192/0x7b0 [ 1545.986713] splice_direct_to_actor+0x347/0x9d0 23:17:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) r2 = getpid() pidfd_open(r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="040000003000"/16]) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000100)={r4, 0xffffffffffffffff, 0x4}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1545.986748] ? __pfx_direct_splice_actor+0x10/0x10 [ 1545.986788] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1545.986824] ? lock_acquire+0x15e/0x2f0 [ 1545.986862] do_splice_direct+0x179/0x250 [ 1545.986894] ? __pfx_do_splice_direct+0x10/0x10 [ 1545.986928] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1545.986969] ? security_file_permission+0x22/0x90 [ 1545.987004] do_sendfile+0xa8e/0xdc0 [ 1545.987047] ? __pfx_do_sendfile+0x10/0x10 [ 1545.987083] ? __fget_files+0x20d/0x3b0 [ 1545.987129] __x64_sys_sendfile64+0x1d3/0x210 [ 1545.987158] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1545.987187] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1545.987230] do_syscall_64+0xbf/0x430 [ 1545.987255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.987279] RIP: 0033:0x7f20266ecb19 [ 1545.987297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1545.987321] RSP: 002b:00007f2023c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1545.987345] RAX: ffffffffffffffda RBX: 00007f2026800020 RCX: 00007f20266ecb19 [ 1545.987361] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1545.987375] RBP: 00007f2023c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1545.987389] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1545.987404] R13: 00007ffcc2c01daf R14: 00007f2023c41300 R15: 0000000000022000 [ 1545.987438] [ 1546.089705] serio: Serial port ptm1 23:17:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x1000, 0x797, 0x7, 0x4, 0x5, "667d747004f35071b390bd9aa35727cec2f89e", 0x8, 0xe00000}) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) [ 1546.148411] FAULT_INJECTION: forcing a failure. [ 1546.148411] name fail_usercopy, interval 1, probability 0, space 0, times 0 23:17:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x100000000000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1546.150384] CPU: 0 UID: 0 PID: 11495 Comm: syz-executor.2 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1546.150418] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1546.150433] Call Trace: [ 1546.150441] [ 1546.150451] dump_stack_lvl+0xfa/0x120 [ 1546.150498] should_fail_ex+0x4d7/0x5e0 [ 1546.150534] _copy_to_user+0x32/0xd0 [ 1546.150561] simple_read_from_buffer+0xe0/0x180 [ 1546.150600] proc_fail_nth_read+0x18a/0x240 [ 1546.150630] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1546.150659] ? security_file_permission+0x22/0x90 [ 1546.150691] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1546.150718] vfs_read+0x1eb/0xc70 [ 1546.150747] ? __pfx_vfs_read+0x10/0x10 [ 1546.150771] ? lock_release+0xc8/0x290 [ 1546.150812] ? __fget_files+0x20d/0x3b0 [ 1546.150861] ksys_read+0x121/0x240 [ 1546.150883] ? __pfx_ksys_read+0x10/0x10 [ 1546.150916] do_syscall_64+0xbf/0x430 [ 1546.150950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.150975] RIP: 0033:0x7fdede5c069c [ 1546.150993] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1546.151018] RSP: 002b:00007fdedbb83170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1546.151042] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdede5c069c [ 1546.151057] RDX: 000000000000000f RSI: 00007fdedbb831e0 RDI: 0000000000000004 [ 1546.151072] RBP: 00007fdedbb831d0 R08: 0000000000000000 R09: 0000000000000000 [ 1546.151087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1546.151101] R13: 00007ffccaccba8f R14: 00007fdedbb83300 R15: 0000000000022000 [ 1546.151136] 23:17:16 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 57) [ 1546.228844] serio: Serial port ptm2 23:17:16 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 19) 23:17:16 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 64) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1546.463009] FAULT_INJECTION: forcing a failure. [ 1546.463009] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.463073] CPU: 0 UID: 0 PID: 11510 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1546.463121] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1546.463142] Call Trace: [ 1546.463154] [ 1546.463169] dump_stack_lvl+0xfa/0x120 [ 1546.463238] should_fail_ex+0x4d7/0x5e0 [ 1546.463284] should_failslab+0xc2/0x120 [ 1546.463324] __kmalloc_noprof+0xcd/0x680 [ 1546.463373] ? copy_splice_read+0x15b/0xc00 [ 1546.463433] copy_splice_read+0x15b/0xc00 [ 1546.463479] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1546.463537] ? __pfx_copy_splice_read+0x10/0x10 [ 1546.463579] ? __pfx_perf_trace_lock+0x10/0x10 [ 1546.463649] ? find_held_lock+0x2b/0x80 [ 1546.463690] ? splice_direct_to_actor+0x347/0x9d0 [ 1546.463746] ? __pfx_copy_splice_read+0x10/0x10 [ 1546.463800] do_splice_read+0x1f8/0x2a0 [ 1546.463857] splice_direct_to_actor+0x2a8/0x9d0 [ 1546.463913] ? __pfx_direct_splice_actor+0x10/0x10 [ 1546.463983] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1546.464033] ? lock_acquire+0x15e/0x2f0 [ 1546.464095] do_splice_direct+0x179/0x250 [ 1546.464148] ? __pfx_do_splice_direct+0x10/0x10 [ 1546.464216] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1546.464275] ? security_file_permission+0x22/0x90 [ 1546.464331] do_sendfile+0xa8e/0xdc0 [ 1546.464401] ? __pfx_do_sendfile+0x10/0x10 [ 1546.464460] ? __fget_files+0x20d/0x3b0 [ 1546.464537] __x64_sys_sendfile64+0x1d3/0x210 [ 1546.464583] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1546.464628] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1546.464699] do_syscall_64+0xbf/0x430 [ 1546.464740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.464778] RIP: 0033:0x7f7a32465b19 [ 1546.464805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1546.464842] RSP: 002b:00007f7a2f9ba188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1546.464876] RAX: ffffffffffffffda RBX: 00007f7a32579020 RCX: 00007f7a32465b19 [ 1546.464902] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1546.464925] RBP: 00007f7a2f9ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1546.464947] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1546.464970] R13: 00007ffe0bebc99f R14: 00007f7a2f9ba300 R15: 0000000000022000 [ 1546.465026] [ 1547.047228] serio: Serial port ptm0 23:17:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x800) read(r0, 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) 23:17:26 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 20) 23:17:26 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 58) 23:17:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x200000000000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:17:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:17:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000c80)="73762adbe3cdf055c38b8ef88378b1e4b9ffc9d7595eb13c27a0ad8b3ea70e730a2fcb8adcf3040fa17851170c890f2fa5240b717968375c22a4d664da0f43739e3db1b7346eb1fd0483ee1d1bba263e125a0c78a4b2f675b10b5891c10a8deaa21ae6639d0d6ed620a8d39a8de6f7e3f661c8f69f8f75aaf3e108f594d81b3af676322bb507bb5306faeb0599c11ea40fde25f71c01785463ddf02d592484a18e24cdb7", 0xa4}], 0x1, 0x0) splice(r1, 0x0, r3, 0x0, 0x802, 0x1500000000000000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80c0, 0x70, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xb, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/netstat\x00') readv(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000005e80)={&(0x7f0000004a80)=@abs, 0x6e, &(0x7f0000005dc0)}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresgid(0x0, 0x0, 0xee01) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {}, [], {}, [{0x8, 0x0, r4}]}, 0x2c, 0x0) setgroups(0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0]) fstat(0xffffffffffffffff, 0x0) getegid() newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0), 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x23, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x16) 23:17:26 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x80111500, 0x0) 23:17:26 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 65) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1556.493311] serio: Serial port ptm2 [ 1556.498668] serio: Serial port ptm0 [ 1556.516846] serio: Serial port ptm1 23:17:27 executing program 4: ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000300)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001300)={r0, 0x8}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r1, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 23:17:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x300000000000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:17:27 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 23:17:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:17:27 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 59) [ 1556.772462] serio: Serial port ptm1 [ 1556.860687] FAULT_INJECTION: forcing a failure. [ 1556.860687] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1556.862470] CPU: 1 UID: 0 PID: 11558 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1556.862500] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1556.862514] Call Trace: [ 1556.862522] [ 1556.862531] dump_stack_lvl+0xfa/0x120 [ 1556.862574] should_fail_ex+0x4d7/0x5e0 [ 1556.862602] should_fail_alloc_page+0xe0/0x110 [ 1556.862629] prepare_alloc_pages+0x1eb/0x550 [ 1556.862665] ? __pfx_perf_trace_lock+0x10/0x10 [ 1556.862704] alloc_pages_bulk_noprof+0x148/0xc30 [ 1556.862734] ? find_held_lock+0x2b/0x80 [ 1556.862764] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1556.862797] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1556.862832] ? trace_kmalloc+0x1f/0xb0 [ 1556.862851] ? __kmalloc_noprof+0x274/0x680 [ 1556.862882] ? copy_splice_read+0x15b/0xc00 [ 1556.862919] copy_splice_read+0x192/0xc00 [ 1556.862964] ? __pfx_copy_splice_read+0x10/0x10 [ 1556.862994] ? __pfx_perf_trace_lock+0x10/0x10 [ 1556.863035] ? find_held_lock+0x2b/0x80 [ 1556.863059] ? splice_direct_to_actor+0x347/0x9d0 [ 1556.863091] ? __pfx_copy_splice_read+0x10/0x10 [ 1556.863123] do_splice_read+0x1f8/0x2a0 [ 1556.863155] splice_direct_to_actor+0x2a8/0x9d0 [ 1556.863188] ? __pfx_direct_splice_actor+0x10/0x10 [ 1556.863225] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1556.863259] ? lock_acquire+0x15e/0x2f0 [ 1556.863295] do_splice_direct+0x179/0x250 [ 1556.863326] ? __pfx_do_splice_direct+0x10/0x10 [ 1556.863357] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1556.863391] ? security_file_permission+0x22/0x90 [ 1556.863425] do_sendfile+0xa8e/0xdc0 [ 1556.863466] ? __pfx_do_sendfile+0x10/0x10 [ 1556.863500] ? __fget_files+0x20d/0x3b0 [ 1556.863544] __x64_sys_sendfile64+0x1d3/0x210 [ 1556.863571] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1556.863598] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1556.863639] do_syscall_64+0xbf/0x430 [ 1556.863663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.863686] RIP: 0033:0x7f7a32465b19 [ 1556.863705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1556.863727] RSP: 002b:00007f7a2f9db188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1556.863749] RAX: ffffffffffffffda RBX: 00007f7a32578f60 RCX: 00007f7a32465b19 [ 1556.863765] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1556.863778] RBP: 00007f7a2f9db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1556.863792] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1556.863806] R13: 00007ffe0bebc99f R14: 00007f7a2f9db300 R15: 0000000000022000 [ 1556.863838] [ 1557.311449] serio: Serial port ptm1 [ 1557.322873] serio: Serial port ptm3 23:17:38 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 66) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:17:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xc0) signalfd4(r1, &(0x7f00000000c0)={[0x3]}, 0x8, 0x80000) 23:17:38 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x801c581f, 0x0) 23:17:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x400000000000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:17:38 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 21) 23:17:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:17:38 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 60) 23:17:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) [ 1567.838324] serio: Serial port ptm0 23:17:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x540, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) close_range(r0, r0, 0x0) [ 1567.911166] serio: Serial port ptm2 23:17:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x500000000000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1567.967981] serio: Serial port ptm1 [ 1567.989449] serio: Serial port ptm2 [ 1568.040188] FAULT_INJECTION: forcing a failure. [ 1568.040188] name failslab, interval 1, probability 0, space 0, times 0 [ 1568.041989] CPU: 1 UID: 0 PID: 11593 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1568.042019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1568.042032] Call Trace: [ 1568.042040] [ 1568.042048] dump_stack_lvl+0xfa/0x120 [ 1568.042091] should_fail_ex+0x4d7/0x5e0 [ 1568.042117] should_failslab+0xc2/0x120 [ 1568.042140] __kmalloc_noprof+0xcd/0x680 [ 1568.042168] ? iter_file_splice_write+0x1cd/0x11f0 [ 1568.042212] iter_file_splice_write+0x1cd/0x11f0 [ 1568.042245] ? kfree+0x284/0x550 [ 1568.042268] ? read_iter_zero+0x120/0x310 [ 1568.042296] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1568.042327] ? __lock_acquire+0xc65/0x1b70 [ 1568.042379] ? lock_is_held_type+0x9e/0x120 [ 1568.042410] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1568.042442] direct_splice_actor+0x192/0x7b0 [ 1568.042473] splice_direct_to_actor+0x347/0x9d0 [ 1568.042504] ? __pfx_direct_splice_actor+0x10/0x10 [ 1568.042538] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1568.042569] ? lock_acquire+0x15e/0x2f0 [ 1568.042602] do_splice_direct+0x179/0x250 [ 1568.042630] ? __pfx_do_splice_direct+0x10/0x10 [ 1568.042659] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1568.042691] ? security_file_permission+0x22/0x90 [ 1568.042722] do_sendfile+0xa8e/0xdc0 [ 1568.042761] ? __pfx_do_sendfile+0x10/0x10 [ 1568.042792] ? __fget_files+0x20d/0x3b0 [ 1568.042834] __x64_sys_sendfile64+0x1d3/0x210 [ 1568.042859] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1568.042884] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1568.042921] do_syscall_64+0xbf/0x430 [ 1568.042951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.042973] RIP: 0033:0x7f7a32465b19 [ 1568.042989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1568.043010] RSP: 002b:00007f7a2f9ba188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1568.043030] RAX: ffffffffffffffda RBX: 00007f7a32579020 RCX: 00007f7a32465b19 [ 1568.043044] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1568.043057] RBP: 00007f7a2f9ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1568.043069] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1568.043082] R13: 00007ffe0bebc99f R14: 00007f7a2f9ba300 R15: 0000000000022000 [ 1568.043112] 23:17:38 executing program 4: ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000000)={0xad7d, {0x8, 0x9e9c, 0x1, 0xb0a1, 0x9}}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0xfffff801, 0xfffffe00, 0x6, 0x9, 0x1, "36fa0ec056da842127c1c5966b0e789c64be22", 0x3, 0x9}) 23:17:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x600000000000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:17:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x4) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:17:38 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 61) [ 1568.300654] serio: Serial port ptm2 23:17:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x700000000000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1568.371684] serio: Serial port ptm2 23:17:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f00000000c0)={0x20, 0x0, 0x2, 0x80000000, 0x2, "a33be8aae42cb234c0d52a6f4f5c333754cbe5", 0x5, 0xfffffffb}) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) fstat(r2, &(0x7f0000000100)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000000)=0x9) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1568.668000] serio: Serial port ptm2 [ 1568.787627] serio: Serial port ptm0 23:17:48 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 62) 23:17:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x800000000000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:17:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x1f) read(r0, 0x0, 0x0) 23:17:48 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x80811501, 0x0) 23:17:48 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 67) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:17:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 23:17:48 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 22) 23:17:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x5) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1578.519538] serio: Serial port ptm0 [ 1578.594663] serio: Serial port ptm1 [ 1578.620365] serio: Serial port ptm2 [ 1578.664812] serio: Serial port ptm1 23:17:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x900000000000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1578.699720] FAULT_INJECTION: forcing a failure. [ 1578.699720] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1578.701555] CPU: 0 UID: 0 PID: 11645 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1578.701586] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1578.701600] Call Trace: [ 1578.701609] [ 1578.701619] dump_stack_lvl+0xfa/0x120 [ 1578.701667] should_fail_ex+0x4d7/0x5e0 [ 1578.701696] should_fail_alloc_page+0xe0/0x110 [ 1578.701724] prepare_alloc_pages+0x1eb/0x550 [ 1578.701768] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 1578.701806] ? __pfx_ext4_es_insert_delayed_extent+0x10/0x10 [ 1578.701834] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 1578.701872] ? find_held_lock+0x2b/0x80 [ 1578.701899] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1578.701927] ? lock_release+0xc8/0x290 [ 1578.701972] ? ext4_da_reserve_space+0xf9/0x430 [ 1578.702012] ? perf_trace_lock+0xb5/0x5d0 [ 1578.702048] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1578.702079] ? policy_nodemask+0xeb/0x4e0 [ 1578.702113] alloc_pages_mpol+0xed/0x340 [ 1578.702143] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1578.702170] ? find_held_lock+0x2b/0x80 [ 1578.702194] ? filemap_get_entry+0x1b1/0x3b0 [ 1578.702219] ? lock_release+0xc8/0x290 [ 1578.702255] folio_alloc_noprof+0x21/0x80 [ 1578.702288] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 1578.702327] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1578.702362] ? perf_trace_lock+0xb5/0x5d0 [ 1578.702401] __filemap_get_folio_mpol+0x513/0x9a0 [ 1578.702433] ext4_da_write_begin+0x3e1/0xb40 [ 1578.702473] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1578.702504] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 1578.702541] generic_perform_write+0x391/0x810 [ 1578.702586] ? __pfx_generic_perform_write+0x10/0x10 [ 1578.702625] ? generic_update_time+0xcb/0xf0 [ 1578.702650] ? mnt_put_write_access_file+0x45/0xe0 [ 1578.702690] ext4_buffered_write_iter+0x11a/0x430 [ 1578.702719] ext4_file_write_iter+0x104b/0x19f0 [ 1578.702756] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1578.702786] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1578.702827] iter_file_splice_write+0xa3a/0x11f0 [ 1578.702877] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1578.702937] ? lock_is_held_type+0x9e/0x120 [ 1578.702972] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1578.703007] direct_splice_actor+0x192/0x7b0 [ 1578.703042] splice_direct_to_actor+0x347/0x9d0 [ 1578.703075] ? __pfx_direct_splice_actor+0x10/0x10 [ 1578.703113] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1578.703147] ? lock_acquire+0x15e/0x2f0 [ 1578.703184] do_splice_direct+0x179/0x250 [ 1578.703215] ? __pfx_do_splice_direct+0x10/0x10 [ 1578.703247] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1578.703281] ? security_file_permission+0x22/0x90 [ 1578.703316] do_sendfile+0xa8e/0xdc0 [ 1578.703358] ? __pfx_do_sendfile+0x10/0x10 [ 1578.703392] ? __fget_files+0x20d/0x3b0 [ 1578.703460] __x64_sys_sendfile64+0x1d3/0x210 [ 1578.703496] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1578.703523] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1578.703564] do_syscall_64+0xbf/0x430 [ 1578.703590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.703613] RIP: 0033:0x7f20266ecb19 [ 1578.703632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1578.703655] RSP: 002b:00007f2023c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1578.703677] RAX: ffffffffffffffda RBX: 00007f2026800020 RCX: 00007f20266ecb19 [ 1578.703693] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1578.703707] RBP: 00007f2023c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1578.703721] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1578.703735] R13: 00007ffcc2c01daf R14: 00007f2023c41300 R15: 0000000000022000 [ 1578.703768] [ 1578.769326] FAULT_INJECTION: forcing a failure. [ 1578.769326] name failslab, interval 1, probability 0, space 0, times 0 [ 1578.771011] CPU: 1 UID: 0 PID: 11648 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1578.771042] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1578.771057] Call Trace: [ 1578.771065] [ 1578.771074] dump_stack_lvl+0xfa/0x120 [ 1578.771118] should_fail_ex+0x4d7/0x5e0 [ 1578.771147] should_failslab+0xc2/0x120 [ 1578.771175] __kmalloc_cache_noprof+0x81/0x6b0 [ 1578.771203] ? __virt_addr_valid+0x1c6/0x5d0 [ 1578.771228] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1578.771266] ? __iomap_dio_rw+0x271/0x1c90 [ 1578.771288] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1578.771328] ? __iomap_dio_rw+0x271/0x1c90 [ 1578.771348] __iomap_dio_rw+0x271/0x1c90 [ 1578.771372] ? mark_held_locks+0x49/0x80 [ 1578.771408] ? kasan_quarantine_put+0x84/0x1e0 [ 1578.771434] ? kmem_cache_free+0x2a4/0x550 [ 1578.771466] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1578.771492] ? jbd2_journal_stop+0x184/0xe20 [ 1578.771544] ? ext4_dirty_inode+0xf1/0x130 [ 1578.771574] ? __mark_inode_dirty+0x254/0x1470 [ 1578.771607] iomap_dio_rw+0x40/0xa0 [ 1578.771633] ext4_file_write_iter+0x11eb/0x19f0 [ 1578.771672] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1578.771701] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1578.771740] iter_file_splice_write+0xa3a/0x11f0 [ 1578.771790] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1578.771850] ? lock_is_held_type+0x9e/0x120 [ 1578.771884] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1578.771919] direct_splice_actor+0x192/0x7b0 [ 1578.771961] splice_direct_to_actor+0x347/0x9d0 [ 1578.771995] ? __pfx_direct_splice_actor+0x10/0x10 [ 1578.772033] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1578.772067] ? lock_acquire+0x15e/0x2f0 [ 1578.772104] do_splice_direct+0x179/0x250 [ 1578.772134] ? __pfx_do_splice_direct+0x10/0x10 [ 1578.772166] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1578.772200] ? security_file_permission+0x22/0x90 [ 1578.772234] do_sendfile+0xa8e/0xdc0 [ 1578.772275] ? __pfx_do_sendfile+0x10/0x10 [ 1578.772309] ? __fget_files+0x20d/0x3b0 [ 1578.772354] __x64_sys_sendfile64+0x1d3/0x210 [ 1578.772381] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1578.772408] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1578.772449] do_syscall_64+0xbf/0x430 [ 1578.772474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.772497] RIP: 0033:0x7f7a32465b19 [ 1578.772515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1578.772537] RSP: 002b:00007f7a2f9ba188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 23:17:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x6) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1578.772559] RAX: ffffffffffffffda RBX: 00007f7a32579020 RCX: 00007f7a32465b19 [ 1578.772575] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1578.772589] RBP: 00007f7a2f9ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1578.772602] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1578.772616] R13: 00007ffe0bebc99f R14: 00007f7a2f9ba300 R15: 0000000000022000 [ 1578.772649] 23:17:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000000)={0x2, 0x0, 0x6, 0x1, 0x0, "54010000020135f92e6e48dd2fde000008001b", 0xfffffffc}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1578.847476] serio: Serial port ptm1 23:17:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xa00000000000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:17:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:17:49 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 63) 23:17:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x410000) ioctl$CDROMREADTOCHDR(r2, 0x5305, &(0x7f0000000140)={0xfe}) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81}}, './file0\x00'}) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffff5, 0x90001) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:17:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xb00000000000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1579.163120] serio: Serial port ptm1 23:17:49 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 68) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:17:49 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 23) [ 1579.410531] FAULT_INJECTION: forcing a failure. [ 1579.410531] name failslab, interval 1, probability 0, space 0, times 0 [ 1579.410634] CPU: 0 UID: 0 PID: 11679 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1579.410662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1579.410683] Call Trace: [ 1579.410690] [ 1579.410699] dump_stack_lvl+0xfa/0x120 [ 1579.410742] should_fail_ex+0x4d7/0x5e0 [ 1579.410768] ? ext4_mb_new_blocks+0x64e/0x4580 [ 1579.410791] should_failslab+0xc2/0x120 [ 1579.410815] kmem_cache_alloc_noprof+0x80/0x690 [ 1579.410842] ? ext4_dirty_inode+0xf1/0x130 [ 1579.410870] ? __mark_inode_dirty+0x254/0x1470 [ 1579.410901] ? ext4_mb_new_blocks+0x64e/0x4580 [ 1579.410921] ext4_mb_new_blocks+0x64e/0x4580 [ 1579.410954] ? perf_trace_lock+0xb5/0x5d0 [ 1579.410989] ? ext4_ind_map_blocks+0x263/0x2330 [ 1579.411020] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 1579.411044] ? __pfx_perf_trace_lock+0x10/0x10 [ 1579.411072] ? ext4_get_branch+0x588/0x740 [ 1579.411107] ext4_ind_map_blocks+0x1850/0x2330 [ 1579.411141] ? unwind_next_frame+0x3bc/0x2540 [ 1579.411171] ? __pfx_ext4_ind_map_blocks+0x10/0x10 [ 1579.411214] ? lock_acquire+0x15e/0x2f0 [ 1579.411248] ? ext4_map_blocks+0x564/0x1510 [ 1579.411280] ? down_write+0x119/0x1f0 [ 1579.411302] ? __pfx_down_write+0x10/0x10 [ 1579.411322] ? lock_release+0xc8/0x290 [ 1579.411357] ext4_map_blocks+0xaf1/0x1510 [ 1579.411383] ? kmem_cache_alloc_noprof+0x270/0x690 [ 1579.411410] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1579.411439] ? jbd2__journal_start+0xf6/0x6b0 [ 1579.411476] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1579.411500] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1579.411523] ? ext4_iomap_begin+0x5b0/0xe80 [ 1579.411545] ? ext4_meta_trans_blocks+0x256/0x310 [ 1579.411574] ext4_iomap_begin+0xa5e/0xe80 [ 1579.411610] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1579.411636] ? iomap_iter_advance+0x177/0x1f0 [ 1579.411670] ? iomap_dio_bio_iter+0x8ac/0x1310 [ 1579.411696] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1579.411718] iomap_iter+0x55a/0x1020 [ 1579.411755] __iomap_dio_rw+0x6dd/0x1c90 [ 1579.411786] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1579.411826] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1579.411855] ? kasan_quarantine_put+0x84/0x1e0 [ 1579.411896] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1579.411929] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1579.411949] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1579.411985] iomap_dio_rw+0x40/0xa0 [ 1579.412008] ext4_file_write_iter+0xe0e/0x19f0 [ 1579.412043] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1579.412065] ? trace_kmalloc+0x1f/0xb0 [ 1579.412083] ? __kmalloc_noprof+0x274/0x680 [ 1579.412108] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1579.412145] iter_file_splice_write+0xa3a/0x11f0 [ 1579.412190] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1579.412245] ? lock_is_held_type+0x9e/0x120 [ 1579.412276] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1579.412307] direct_splice_actor+0x192/0x7b0 [ 1579.412340] splice_direct_to_actor+0x347/0x9d0 [ 1579.412370] ? __pfx_direct_splice_actor+0x10/0x10 [ 1579.412405] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1579.412435] ? lock_acquire+0x15e/0x2f0 [ 1579.412469] do_splice_direct+0x179/0x250 [ 1579.412496] ? __pfx_do_splice_direct+0x10/0x10 [ 1579.412525] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1579.412557] ? security_file_permission+0x22/0x90 [ 1579.412588] do_sendfile+0xa8e/0xdc0 [ 1579.412627] ? __pfx_do_sendfile+0x10/0x10 [ 1579.412658] ? __fget_files+0x20d/0x3b0 [ 1579.412700] __x64_sys_sendfile64+0x1d3/0x210 [ 1579.412725] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1579.412750] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1579.412801] do_syscall_64+0xbf/0x430 [ 1579.412824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.412846] RIP: 0033:0x7fb59c6b8b19 [ 1579.412862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1579.412882] RSP: 002b:00007fb599c2e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1579.412902] RAX: ffffffffffffffda RBX: 00007fb59c7cbf60 RCX: 00007fb59c6b8b19 [ 1579.412916] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1579.412929] RBP: 00007fb599c2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1579.412942] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1579.412954] R13: 00007fff3932da4f R14: 00007fb599c2e300 R15: 0000000000022000 [ 1579.412985] [ 1579.463853] serio: Serial port ptm0 23:17:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x8) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:17:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x202000, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824", 0xffffffff}) ioctl$TIOCNXCL(r0, 0x540d) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:17:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000000000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:17:59 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 24) 23:17:59 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 69) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:17:59 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0xc0045878, 0x0) 23:17:59 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 64) 23:17:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x143000, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x3, 0x9, 0x80000001, 0xea, 0xff, "2f695ab1b4c910bdaca13e4743a884c955515e", 0x7, 0xffff95dc}) flistxattr(r0, &(0x7f0000000000)=""/89, 0x59) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) [ 1588.655198] serio: Serial port ptm0 23:17:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$TCSBRKP(r1, 0x5425, 0x3) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setpipe(r2, 0x407, 0x7fffffff) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)=ANY=[@ANYBLOB="262aee5548826fab4bce5fe9ccef9e1a6ac313fe7f9b94d507b0ef10406331f7e9de1ecb42015d54cba56bfb3dcac2200ea4ef1c63e66da1f19225acbe3245ad1c48b7001554bd8663069437b5e3e087dc8164d57bd897625b1ae1954c41e54105bdd003517a3c4d1a45f78423b2264d05800b3d9b48ef887afc400180c0e479c3003570c48bca696e66ba8967fe19f34bd6f3cad80178da25f1d65f6cc291076a7a4631dc1322547a120f090286a700d694a3abe77e65ae681d62ff2ae2b25f98d6dbd3df67a983", @ANYRES32=0xffffffffffffffff, @ANYBLOB="03000000000000002e2f66696c653000"]) ioctl$VT_DISALLOCATE(r3, 0x5608) [ 1588.699333] serio: Serial port ptm1 23:17:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2000000000000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1588.741989] serio: Serial port ptm0 23:17:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x10) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1588.827536] FAULT_INJECTION: forcing a failure. [ 1588.827536] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1588.828519] CPU: 0 UID: 0 PID: 11714 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1588.828539] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1588.828549] Call Trace: [ 1588.828555] [ 1588.828561] dump_stack_lvl+0xfa/0x120 [ 1588.828598] should_fail_ex+0x4d7/0x5e0 [ 1588.828620] should_fail_alloc_page+0xe0/0x110 [ 1588.828638] prepare_alloc_pages+0x1eb/0x550 [ 1588.828667] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 1588.828687] ? __pfx_ext4_es_insert_delayed_extent+0x10/0x10 [ 1588.828703] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 1588.828724] ? find_held_lock+0x2b/0x80 [ 1588.828739] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1588.828755] ? lock_release+0xc8/0x290 [ 1588.828775] ? ext4_da_reserve_space+0xf9/0x430 [ 1588.828797] ? perf_trace_lock+0xb5/0x5d0 [ 1588.828815] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1588.828832] ? policy_nodemask+0xeb/0x4e0 [ 1588.828851] alloc_pages_mpol+0xed/0x340 [ 1588.828867] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1588.828881] ? find_held_lock+0x2b/0x80 [ 1588.828894] ? filemap_get_entry+0x1b1/0x3b0 [ 1588.828908] ? lock_release+0xc8/0x290 [ 1588.828928] folio_alloc_noprof+0x21/0x80 [ 1588.828956] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 1588.828978] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1588.828997] ? perf_trace_lock+0xb5/0x5d0 [ 1588.829018] __filemap_get_folio_mpol+0x513/0x9a0 [ 1588.829035] ext4_da_write_begin+0x3e1/0xb40 [ 1588.829056] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1588.829073] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 1588.829093] generic_perform_write+0x391/0x810 [ 1588.829118] ? __pfx_generic_perform_write+0x10/0x10 [ 1588.829144] ext4_buffered_write_iter+0x11a/0x430 [ 1588.829160] ext4_file_write_iter+0x104b/0x19f0 [ 1588.829180] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1588.829196] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1588.829219] iter_file_splice_write+0xa3a/0x11f0 [ 1588.829246] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1588.829279] ? lock_is_held_type+0x9e/0x120 [ 1588.829298] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1588.829317] direct_splice_actor+0x192/0x7b0 [ 1588.829336] splice_direct_to_actor+0x347/0x9d0 [ 1588.829354] ? __pfx_direct_splice_actor+0x10/0x10 [ 1588.829374] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1588.829392] ? lock_acquire+0x15e/0x2f0 [ 1588.829412] do_splice_direct+0x179/0x250 [ 1588.829429] ? __pfx_do_splice_direct+0x10/0x10 [ 1588.829446] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1588.829464] ? security_file_permission+0x22/0x90 [ 1588.829484] do_sendfile+0xa8e/0xdc0 [ 1588.829507] ? __pfx_do_sendfile+0x10/0x10 [ 1588.829525] ? __fget_files+0x20d/0x3b0 [ 1588.829550] __x64_sys_sendfile64+0x1d3/0x210 [ 1588.829565] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1588.829580] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1588.829602] do_syscall_64+0xbf/0x430 [ 1588.829616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.829629] RIP: 0033:0x7f20266ecb19 [ 1588.829639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1588.829651] RSP: 002b:00007f2023c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1588.829664] RAX: ffffffffffffffda RBX: 00007f2026800020 RCX: 00007f20266ecb19 [ 1588.829672] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1588.829680] RBP: 00007f2023c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1588.829687] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1588.829695] R13: 00007ffcc2c01daf R14: 00007f2023c41300 R15: 0000000000022000 [ 1588.829713] [ 1588.835860] FAULT_INJECTION: forcing a failure. [ 1588.835860] name failslab, interval 1, probability 0, space 0, times 0 [ 1588.886547] CPU: 1 UID: 0 PID: 11712 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1588.886584] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1588.886599] Call Trace: [ 1588.886609] [ 1588.886619] dump_stack_lvl+0xfa/0x120 [ 1588.886667] should_fail_ex+0x4d7/0x5e0 [ 1588.886695] ? jbd2__journal_start+0x193/0x6b0 [ 1588.886733] should_failslab+0xc2/0x120 [ 1588.886760] kmem_cache_alloc_noprof+0x80/0x690 [ 1588.886803] ? jbd2__journal_start+0x193/0x6b0 [ 1588.886839] jbd2__journal_start+0x193/0x6b0 [ 1588.886882] __ext4_journal_start_sb+0x325/0x5d0 [ 1588.886911] ? ext4_dirty_inode+0xa5/0x130 [ 1588.886954] ext4_dirty_inode+0xa5/0x130 [ 1588.886986] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1588.887015] __mark_inode_dirty+0x1b7/0x1470 [ 1588.887050] generic_update_time+0xcb/0xf0 [ 1588.887080] file_modified+0x1f0/0x230 [ 1588.887108] ext4_file_write_iter+0x117d/0x19f0 [ 1588.887149] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1588.887181] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1588.887224] iter_file_splice_write+0xa3a/0x11f0 [ 1588.887278] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1588.887343] ? lock_is_held_type+0x9e/0x120 [ 1588.887380] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1588.887417] direct_splice_actor+0x192/0x7b0 [ 1588.887456] splice_direct_to_actor+0x347/0x9d0 [ 1588.887492] ? __pfx_direct_splice_actor+0x10/0x10 [ 1588.887533] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1588.887571] ? lock_acquire+0x15e/0x2f0 [ 1588.887613] do_splice_direct+0x179/0x250 [ 1588.887645] ? __pfx_do_splice_direct+0x10/0x10 [ 1588.887680] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1588.887718] ? security_file_permission+0x22/0x90 [ 1588.887755] do_sendfile+0xa8e/0xdc0 [ 1588.887799] ? __pfx_do_sendfile+0x10/0x10 [ 1588.887836] ? __fget_files+0x20d/0x3b0 [ 1588.887885] __x64_sys_sendfile64+0x1d3/0x210 [ 1588.887914] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1588.887944] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1588.887988] do_syscall_64+0xbf/0x430 [ 1588.888015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.888040] RIP: 0033:0x7f7a32465b19 [ 1588.888061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1588.888085] RSP: 002b:00007f7a2f9ba188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1588.888110] RAX: ffffffffffffffda RBX: 00007f7a32579020 RCX: 00007f7a32465b19 [ 1588.888127] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1588.888141] RBP: 00007f7a2f9ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1588.888156] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1588.888171] R13: 00007ffe0bebc99f R14: 00007f7a2f9ba300 R15: 0000000000022000 [ 1588.888207] 23:17:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x5) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRESHEX=r3, @ANYRES64, @ANYRES32=0x0, @ANYBLOB='./fihe0\x00', @ANYRES32=r2]) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:17:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2010000000000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:17:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4316000000000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:17:59 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) getsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000480)={{r2}, 0x0, 0x4, @inherit={0x88, &(0x7f0000000140)={0x1, 0x8, 0x0, 0x9, {0x20, 0x6, 0x4, 0x3, 0x20}, [0x4, 0x0, 0x81, 0x0, 0x3, 0x663, 0x7ff, 0x5]}}, @name="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"}) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) syz_open_pts(0xffffffffffffffff, 0x20100) ioctl$TCSETSF2(r1, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) [ 1589.528471] serio: Serial port ptm2 [ 1589.559311] serio: Serial port ptm3 23:18:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x3) read(r0, 0x0, 0x0) 23:18:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x300) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:18:10 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0xc0045878, 0x0) 23:18:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x8cffffff00000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:18:10 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 65) 23:18:10 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 25) 23:18:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)=0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r2, 0x4b4b, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 23:18:10 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 70) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1600.193352] serio: Serial port ptm2 [ 1600.199684] serio: Serial port ptm3 [ 1600.200144] serio: Serial port ptm1 23:18:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xf6ffffff00000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) [ 1600.264404] serio: Serial port ptm0 23:18:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x1, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000040)={0xfb, 0xa7, 0x81}) ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000000c0)) mount$9p_rdma(&(0x7f0000000100), &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x8000, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e24,sq=0x0000000000000004,objItype=$),smackfsfloor=/dev/ptmx\x00,appraise,\x00']) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000240)={0x318, 0xffffff01, 0x1, 0x10000, 0x4, "e227dec1a7aee9bda9e7b86acc0e50df157723", 0x8, 0x1}) 23:18:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x500) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:18:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xf9fdffff00000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:18:10 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 66) 23:18:11 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 26) [ 1600.591203] serio: Serial port ptm2 [ 1600.618902] 9p: Could not find request transport: rdma [ 1600.681357] serio: Serial port ptm2 [ 1600.688320] 9p: Could not find request transport: rdma [ 1600.766464] FAULT_INJECTION: forcing a failure. [ 1600.766464] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1600.768083] CPU: 0 UID: 0 PID: 11781 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1600.768108] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1600.768119] Call Trace: [ 1600.768125] [ 1600.768133] dump_stack_lvl+0xfa/0x120 [ 1600.768169] should_fail_ex+0x4d7/0x5e0 [ 1600.768192] should_fail_alloc_page+0xe0/0x110 [ 1600.768214] prepare_alloc_pages+0x1eb/0x550 [ 1600.768250] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 1600.768279] ? __pfx_ext4_es_insert_delayed_extent+0x10/0x10 [ 1600.768300] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 1600.768331] ? find_held_lock+0x2b/0x80 [ 1600.768352] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1600.768374] ? lock_release+0xc8/0x290 [ 1600.768404] ? ext4_da_reserve_space+0xf9/0x430 [ 1600.768435] ? perf_trace_lock+0xb5/0x5d0 [ 1600.768462] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1600.768485] ? policy_nodemask+0xeb/0x4e0 [ 1600.768513] alloc_pages_mpol+0xed/0x340 [ 1600.768536] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1600.768558] ? find_held_lock+0x2b/0x80 [ 1600.768577] ? filemap_get_entry+0x1b1/0x3b0 [ 1600.768596] ? lock_release+0xc8/0x290 [ 1600.768625] folio_alloc_noprof+0x21/0x80 [ 1600.768651] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 1600.768681] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1600.768709] ? perf_trace_lock+0xb5/0x5d0 [ 1600.768740] __filemap_get_folio_mpol+0x513/0x9a0 [ 1600.768765] ext4_da_write_begin+0x3e1/0xb40 [ 1600.768797] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1600.768822] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 1600.768852] generic_perform_write+0x391/0x810 [ 1600.768888] ? __pfx_generic_perform_write+0x10/0x10 [ 1600.768927] ext4_buffered_write_iter+0x11a/0x430 [ 1600.768955] ext4_file_write_iter+0x104b/0x19f0 [ 1600.768986] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1600.769009] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1600.769042] iter_file_splice_write+0xa3a/0x11f0 [ 1600.769082] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1600.769130] ? lock_is_held_type+0x9e/0x120 [ 1600.769172] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1600.769200] direct_splice_actor+0x192/0x7b0 [ 1600.769228] splice_direct_to_actor+0x347/0x9d0 [ 1600.769254] ? __pfx_direct_splice_actor+0x10/0x10 [ 1600.769285] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1600.769312] ? lock_acquire+0x15e/0x2f0 [ 1600.769341] do_splice_direct+0x179/0x250 [ 1600.769365] ? __pfx_do_splice_direct+0x10/0x10 [ 1600.769391] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1600.769419] ? security_file_permission+0x22/0x90 [ 1600.769446] do_sendfile+0xa8e/0xdc0 [ 1600.769479] ? __pfx_do_sendfile+0x10/0x10 [ 1600.769507] ? __fget_files+0x20d/0x3b0 [ 1600.769543] __x64_sys_sendfile64+0x1d3/0x210 [ 1600.769565] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1600.769587] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1600.769620] do_syscall_64+0xbf/0x430 [ 1600.769640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.769659] RIP: 0033:0x7f20266ecb19 [ 1600.769674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1600.769692] RSP: 002b:00007f2023c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1600.769710] RAX: ffffffffffffffda RBX: 00007f2026800020 RCX: 00007f20266ecb19 [ 1600.769722] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1600.769733] RBP: 00007f2023c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1600.769744] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1600.769755] R13: 00007ffcc2c01daf R14: 00007f2023c41300 R15: 0000000000022000 [ 1600.769782] [ 1600.990910] serio: Serial port ptm0 23:18:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000000)={0x1, 0x2, 0x1000, 0xbe, &(0x7f00000001c0)="09bcf73dd83ca35862001865be2a894b516c0823db6827d3958b85ac17196c3c202282f948f4612eaa0530d4b170d7784bba3b2d6318c346ec77aa2ed91c7688ade2e5d800fa4fd81632486574ea0682536af3dd50da508f4b82850a12b950a7bce1abd2411c0e3c1f016f8320c311118c703d08e0b570d382a46525ddc1cbcfd0b83b315d2e398851e0865129573817805f57ddab29a379aa118bc016ee332849d5b6c6a8b11b4cfe1a04133c97f399db632804b7c4dff3faefcbe34699", 0xda, 0x0, &(0x7f0000000300)="5d5c6b977accb8cc37c46a60ef9a7d60c4432fea74bf774bb58cc4dd54b0828b09a3843a39f5a1f01705942eaf47ceb75683b58d2281d25d23cef7a785b5a9d6c5710eeb1a80b0f4768a81407be71274f4b1fa3d5b28eb81a0d60760f22ce1c319a6b9c411322c67445365c02158c2f54dfe0fef738d691519e86d1fb2522cde38ac149373608405593632bd6362e2d28a8847a52b4f7bdcc4efedd0e66b47dfd16952acd09841fe28b7179b8ba41e6b307d56eb0ebb58cfdb0c13a9e45b64c15890a9ea70c4d6e3e1e8e1b9861a54023c29e7a519dfdf74a0d7"}) pread64(r0, &(0x7f00000000c0)=""/207, 0xcf, 0x4) read(r0, 0x0, 0x0) 23:18:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xffffffff00000000, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:18:23 executing program 4: ioprio_get$pid(0x0, 0x0) timer_create(0x5, &(0x7f0000000040)={0x0, 0x2a, 0x2, @thr={&(0x7f00000000c0)="dbd8eef64e806443507785df9283c3bd328ca037c27298d69f92d45d08f7c42c0ec260fe341b917e47819934e7a31a9e9b01a51200538beb64a3099bd00094fe8010c275e82dead3de8b6a4e6416a2cd6c415040a34c68ae678fe4ff73724b4a0aa89701b7f58edc8581b0ded9c4aa14f76812ef72707a0dbfb5c7df2e9683bf890b6a7198224288d901116b160a2715dd38d035fa416abe1573c49e1a7be4cbe0fda05b859d02f086796ef37f1aa4adb511c4c7a34f1a692942a93e0c8e0b", &(0x7f0000000000)="78878f855a2ed19dbc5c9b6ab683974c5f428149d41afe3da6"}}, &(0x7f0000000180)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0xffffffffffff8000, &(0x7f00000001c0)=""/211) ioctl$TCSETSF2(r1, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x3, 0x0, "f2f3e2a9286b6a770ff8c2b17865f4f3480824", 0x0, 0x1}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = getpid() pidfd_open(r2, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000340)=0x0) r4 = getpgid(r3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) r7 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x10001) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000400)={0x0, r7, 0x200, 0x80000001, 0x8000, 0x8}) ioctl$TIOCSLCKTRMIOS(r5, 0x4b4b, 0x0) timer_delete(r0) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000300)={0x2, {0x2, 0x7fff, 0x7, 0x3f, 0x8001, 0x2}}) tkill(r4, 0x23) 23:18:23 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0xc0189436, 0x0) 23:18:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x600) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:18:23 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 67) 23:18:23 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 27) 23:18:23 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 71) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1612.814809] serio: Serial port ptm0 [ 1612.821988] serio: Serial port ptm1 [ 1612.836630] serio: Serial port ptm2 [ 1612.912814] serio: Serial port ptm2 23:18:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro, 0x22}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:18:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x4, 0x3, 0xfffffffd, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824", 0x0, 0x2}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:18:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x700) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1613.075537] vfat: Bad value for 'nfs' [ 1613.089438] vfat: Bad value for 'nfs' 23:18:23 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 68) [ 1613.174538] serio: Serial port ptm3 23:18:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir, 0x22}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:18:23 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 72) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1613.255100] serio: Serial port ptm2 [ 1613.297403] vfat: Unknown parameter 'rodir"iocharset' [ 1613.303239] vfat: Unknown parameter 'rodir"iocharset' 23:18:23 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 28) 23:18:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x4b4b, 0x0) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000000040)="b63cfbcf98c244b31623f1bbc61f0dd06695fa48cea2e8c1f83414577c60bb2ec154ae8b05135e3d84c21645e463ce5aff27f99d48", 0x35}, {&(0x7f00000000c0)="b4730bfae37961fceb13f1112cf876a233212709161924c63492402d531c7d38ef8fea6fac888f1f49861f703c6f9dba8e7464fa6b61dea41730e9d29001cb3a986cff51b0f1ab8c787121ff81600e43cc5f5a9c5197eba1df5a66f384145153740923b9325802bc97e1e19bf728a60e75ef52064c3c044c2e2eb3e66189283d020dd38f4cb254d23a982f4fe33de55a3c310e50b2a2932ffe377df75b73f48a3828a4ae33ac843f8e6cfde9", 0xac}, {&(0x7f0000000180)="40da022ab8cae29b2c58e40de7b409e9f45be4e6230c432f354968a8276e8f4b7abee7e1ed12d917fc8c1e6b7d84da74ad2957ee3e8cabb8d1591d421945b15e92fc60158c757796", 0x48}, {&(0x7f0000000200)="12ec027b66adfc1e9bad52ae7953c60775e6b7a4c5740bbfa1b4c6b6f6aee9fa565f1be580cfd09e4e2445b78b793372b8f8fecff5bdf02894ef01f9d26560fa3481d19d75f6579a0d220760a612c106653216ee4a04622b4af9788b20", 0x5d}, {&(0x7f0000000300)="93cf01d417a54a483eb6c17c6b46f390811965a07b7624387c8fb42c6f1009aa6ca90cf3f0b933f029c7d7d3febaece06fcc1ab6d4bdff8c3e3ec48947509a4514064ba3e8b0c905444fcbfb3235de7a74e863314a3e3754ab09cd6ed8c1f1c80fe261fe2b6fcc1e", 0x68}], 0x5, 0x3) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r1, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x100, 0x1, 0x6, 0x8, 0x7, "1c22872b649384b9967ad96128b1a18c6bc2ae", 0xffffffe1, 0x5}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) [ 1613.424053] FAULT_INJECTION: forcing a failure. [ 1613.424053] name failslab, interval 1, probability 0, space 0, times 0 [ 1613.426189] FAULT_INJECTION: forcing a failure. [ 1613.426189] name failslab, interval 1, probability 0, space 0, times 0 [ 1613.426239] CPU: 0 UID: 0 PID: 11830 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1613.426272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1613.426288] Call Trace: [ 1613.426296] [ 1613.426307] dump_stack_lvl+0xfa/0x120 [ 1613.426353] should_fail_ex+0x4d7/0x5e0 [ 1613.426383] should_failslab+0xc2/0x120 [ 1613.426410] __kmalloc_noprof+0xcd/0x680 [ 1613.426444] ? ext4_find_extent+0x7f5/0xa00 [ 1613.426483] ext4_find_extent+0x7f5/0xa00 [ 1613.426524] ext4_ext_map_blocks+0x1cc/0x5f30 [ 1613.426565] ? lock_release+0xc8/0x290 [ 1613.426607] ? unwind_next_frame+0x3bc/0x2540 [ 1613.426630] ? do_syscall_64+0xbf/0x430 [ 1613.426655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.426680] ? kernel_text_address+0x11/0xc0 [ 1613.426723] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1613.426776] ? __pfx_perf_trace_lock+0x10/0x10 [ 1613.426816] ? lock_acquire+0x15e/0x2f0 [ 1613.426849] ? ext4_map_blocks+0x564/0x1510 [ 1613.426888] ? down_write+0x119/0x1f0 [ 1613.426913] ? __pfx_down_write+0x10/0x10 [ 1613.426947] ext4_map_blocks+0x62d/0x1510 [ 1613.426978] ? kmem_cache_alloc_noprof+0x270/0x690 [ 1613.427010] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1613.427043] ? jbd2__journal_start+0xf6/0x6b0 [ 1613.427088] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1613.427115] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1613.427142] ? ext4_iomap_begin+0x5b0/0xe80 [ 1613.427167] ? ext4_meta_trans_blocks+0x256/0x310 [ 1613.427201] ext4_iomap_begin+0xa5e/0xe80 [ 1613.427244] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1613.427272] ? mark_held_locks+0x49/0x80 [ 1613.427310] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1613.427343] ? __create_object+0x59/0x80 [ 1613.427379] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1613.427406] iomap_iter+0x55a/0x1020 [ 1613.427451] __iomap_dio_rw+0x6dd/0x1c90 [ 1613.427496] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1613.427559] ? ext4_dirty_inode+0xf1/0x130 [ 1613.427590] ? __mark_inode_dirty+0x254/0x1470 [ 1613.427626] iomap_dio_rw+0x40/0xa0 [ 1613.427653] ext4_file_write_iter+0x11eb/0x19f0 [ 1613.427695] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1613.427727] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1613.427770] iter_file_splice_write+0xa3a/0x11f0 [ 1613.427823] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1613.427889] ? lock_is_held_type+0x9e/0x120 [ 1613.427925] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1613.427962] direct_splice_actor+0x192/0x7b0 [ 1613.428000] splice_direct_to_actor+0x347/0x9d0 [ 1613.428035] ? __pfx_direct_splice_actor+0x10/0x10 [ 1613.428077] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1613.428114] ? lock_acquire+0x15e/0x2f0 [ 1613.428154] do_splice_direct+0x179/0x250 [ 1613.428187] ? __pfx_do_splice_direct+0x10/0x10 [ 1613.428221] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1613.428258] ? security_file_permission+0x22/0x90 [ 1613.428295] do_sendfile+0xa8e/0xdc0 [ 1613.428339] ? __pfx_do_sendfile+0x10/0x10 [ 1613.428376] ? __fget_files+0x20d/0x3b0 [ 1613.428425] __x64_sys_sendfile64+0x1d3/0x210 [ 1613.428454] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1613.428483] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1613.428528] do_syscall_64+0xbf/0x430 [ 1613.428554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.428578] RIP: 0033:0x7f7a32465b19 [ 1613.428597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1613.428621] RSP: 002b:00007f7a2f9ba188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1613.428645] RAX: ffffffffffffffda RBX: 00007f7a32579020 RCX: 00007f7a32465b19 [ 1613.428662] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1613.428676] RBP: 00007f7a2f9ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1613.428690] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1613.428705] R13: 00007ffe0bebc99f R14: 00007f7a2f9ba300 R15: 0000000000022000 [ 1613.428741] [ 1613.487805] CPU: 1 UID: 0 PID: 11829 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1613.487838] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1613.487853] Call Trace: [ 1613.487861] [ 1613.487871] dump_stack_lvl+0xfa/0x120 [ 1613.487918] should_fail_ex+0x4d7/0x5e0 [ 1613.487952] ? jbd2__journal_start+0x193/0x6b0 [ 1613.487987] should_failslab+0xc2/0x120 [ 1613.488012] kmem_cache_alloc_noprof+0x80/0x690 [ 1613.488046] ? lock_is_held_type+0x9e/0x120 [ 1613.488087] ? jbd2__journal_start+0x193/0x6b0 [ 1613.488120] jbd2__journal_start+0x193/0x6b0 [ 1613.488160] __ext4_journal_start_sb+0x325/0x5d0 [ 1613.488189] ? ext4_iomap_begin+0x5b0/0xe80 [ 1613.488216] ? ext4_meta_trans_blocks+0x256/0x310 [ 1613.488246] ext4_iomap_begin+0x5b0/0xe80 [ 1613.488288] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1613.488316] ? iomap_iter_advance+0x177/0x1f0 [ 1613.488353] ? iomap_dio_bio_iter+0x8ac/0x1310 [ 1613.488381] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1613.488406] iomap_iter+0x55a/0x1020 [ 1613.488446] __iomap_dio_rw+0x6dd/0x1c90 [ 1613.488479] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1613.488522] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1613.488555] ? kasan_quarantine_put+0x84/0x1e0 [ 1613.488599] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1613.488635] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1613.488657] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1613.488696] iomap_dio_rw+0x40/0xa0 [ 1613.488721] ext4_file_write_iter+0xe0e/0x19f0 [ 1613.488761] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1613.488785] ? trace_kmalloc+0x1f/0xb0 [ 1613.488804] ? __kmalloc_noprof+0x274/0x680 [ 1613.488832] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1613.488874] iter_file_splice_write+0xa3a/0x11f0 [ 1613.488924] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1613.488984] ? lock_is_held_type+0x9e/0x120 [ 1613.489017] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1613.489052] direct_splice_actor+0x192/0x7b0 [ 1613.489087] splice_direct_to_actor+0x347/0x9d0 [ 1613.489120] ? __pfx_direct_splice_actor+0x10/0x10 [ 1613.489159] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1613.489194] ? lock_acquire+0x15e/0x2f0 [ 1613.489232] do_splice_direct+0x179/0x250 [ 1613.489262] ? __pfx_do_splice_direct+0x10/0x10 [ 1613.489294] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1613.489328] ? security_file_permission+0x22/0x90 [ 1613.489362] do_sendfile+0xa8e/0xdc0 [ 1613.489420] ? __pfx_do_sendfile+0x10/0x10 [ 1613.489454] ? __fget_files+0x20d/0x3b0 [ 1613.489500] __x64_sys_sendfile64+0x1d3/0x210 [ 1613.489527] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1613.489554] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1613.489596] do_syscall_64+0xbf/0x430 [ 1613.489621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.489644] RIP: 0033:0x7fb59c6b8b19 [ 1613.489663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1613.489685] RSP: 002b:00007fb599c2e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1613.489708] RAX: ffffffffffffffda RBX: 00007fb59c7cbf60 RCX: 00007fb59c6b8b19 [ 1613.489723] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1613.489737] RBP: 00007fb599c2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1613.489751] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1613.489764] R13: 00007fff3932da4f R14: 00007fb599c2e300 R15: 0000000000022000 [ 1613.489799] [ 1613.650253] FAULT_INJECTION: forcing a failure. [ 1613.650253] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1613.652218] CPU: 0 UID: 0 PID: 11834 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1613.652251] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1613.652266] Call Trace: [ 1613.652275] [ 1613.652285] dump_stack_lvl+0xfa/0x120 [ 1613.652333] should_fail_ex+0x4d7/0x5e0 [ 1613.652363] should_fail_alloc_page+0xe0/0x110 [ 1613.652393] prepare_alloc_pages+0x1eb/0x550 [ 1613.652440] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 1613.652479] ? __pfx_ext4_es_insert_delayed_extent+0x10/0x10 [ 1613.652509] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 1613.652549] ? find_held_lock+0x2b/0x80 [ 1613.652577] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1613.652608] ? lock_release+0xc8/0x290 [ 1613.652648] ? ext4_da_reserve_space+0xf9/0x430 [ 1613.652690] ? perf_trace_lock+0xb5/0x5d0 [ 1613.652726] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1613.652757] ? policy_nodemask+0xeb/0x4e0 [ 1613.652793] alloc_pages_mpol+0xed/0x340 [ 1613.652825] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1613.652854] ? find_held_lock+0x2b/0x80 [ 1613.652879] ? filemap_get_entry+0x1b1/0x3b0 [ 1613.652905] ? lock_release+0xc8/0x290 [ 1613.652952] folio_alloc_noprof+0x21/0x80 [ 1613.652987] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 1613.653028] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1613.653066] ? perf_trace_lock+0xb5/0x5d0 [ 1613.653107] __filemap_get_folio_mpol+0x513/0x9a0 [ 1613.653141] ext4_da_write_begin+0x3e1/0xb40 [ 1613.653183] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1613.653216] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 1613.653256] generic_perform_write+0x391/0x810 [ 1613.653305] ? __pfx_generic_perform_write+0x10/0x10 [ 1613.653347] ? generic_update_time+0xcb/0xf0 [ 1613.653391] ? mnt_put_write_access_file+0x45/0xe0 [ 1613.653434] ext4_buffered_write_iter+0x11a/0x430 [ 1613.653466] ext4_file_write_iter+0x104b/0x19f0 [ 1613.653506] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1613.653537] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1613.653580] iter_file_splice_write+0xa3a/0x11f0 [ 1613.653634] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1613.653698] ? lock_is_held_type+0x9e/0x120 [ 1613.653735] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1613.653772] direct_splice_actor+0x192/0x7b0 [ 1613.653809] splice_direct_to_actor+0x347/0x9d0 [ 1613.653845] ? __pfx_direct_splice_actor+0x10/0x10 [ 1613.653886] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1613.653922] ? lock_acquire+0x15e/0x2f0 [ 1613.653962] do_splice_direct+0x179/0x250 [ 1613.653994] ? __pfx_do_splice_direct+0x10/0x10 [ 1613.654028] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1613.654065] ? security_file_permission+0x22/0x90 [ 1613.654102] do_sendfile+0xa8e/0xdc0 [ 1613.654146] ? __pfx_do_sendfile+0x10/0x10 [ 1613.654187] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1613.654236] __x64_sys_sendfile64+0x1d3/0x210 [ 1613.654265] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1613.654306] do_syscall_64+0xbf/0x430 [ 1613.654333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.654357] RIP: 0033:0x7f20266ecb19 [ 1613.654377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1613.654401] RSP: 002b:00007f2023c62188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1613.654425] RAX: ffffffffffffffda RBX: 00007f20267fff60 RCX: 00007f20266ecb19 [ 1613.654442] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1613.654457] RBP: 00007f2023c621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1613.654471] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1613.654485] R13: 00007ffcc2c01daf R14: 00007f2023c62300 R15: 0000000000022000 [ 1613.654521] [ 1613.734320] serio: Serial port ptm3 23:18:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x22, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:18:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x2000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:18:24 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 69) 23:18:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="46b51f000000c0fc00002e2f66696c65"]) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6, 0x20, 0x7, 0x4, 0x0, 0x1e0, 0x8080, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x1, @perf_config_ext={0x7f, 0x4}, 0x524, 0x5, 0x5a, 0x9, 0x1f, 0x8, 0xe06, 0x0, 0x1, 0x0, 0xffffffffffffff44}, 0xffffffffffffffff, 0x7, r1, 0x8) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:18:24 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0xc020660b, 0x0) 23:18:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x102, 0x0, 0x0, 0x0, 0x0, "f0f3e2a92c6b6a77245fb06db463118aac0824"}) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/239, 0xef) [ 1613.940911] serio: Serial port ptm1 [ 1613.942413] serio: Serial port ptm2 [ 1613.967745] vfat: Unknown parameter 'iocharset"cp874' [ 1613.978407] vfat: Unknown parameter 'iocharset"cp874' [ 1614.755898] serio: Serial port ptm0 23:18:36 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 73) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:18:36 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 29) 23:18:36 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x8) 23:18:36 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 70) 23:18:36 executing program 5: add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xd) ioctl$TIOCSLCKTRMIOS(r2, 0x4b4b, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="f4b6fee208373ecd2209f924061b60a7efe37f348e82f3cc5d37a84f25dee9922357527bc2fb776a22a250437255103f18ddb0a3029f356f1354c0d0f4dbdf1892d3b0bbea57f69858a444e112f2732d8ddfb2bbb21a40523401ec7daab1b801f60a81980939d42a84a1fcf7ed3be3eeb3cfad", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) poll(&(0x7f0000000040)=[{r1, 0x1000}, {r3, 0x10}, {r4, 0x8}, {r0, 0x100}], 0x4, 0x5) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) 23:18:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x2c, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:18:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x2bdf) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:18:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xd05600, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f0f3e2a5286b6a7707f8c2b967657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1626.118046] serio: Serial port ptm0 [ 1626.118122] vfat: Bad value for 'iocharset' [ 1626.122263] serio: Serial port ptm2 [ 1626.123615] serio: Serial port ptm1 [ 1626.128708] vfat: Bad value for 'iocharset' [ 1626.205504] serio: Serial port ptm2 [ 1626.215387] serio: Serial port ptm1 [ 1626.238336] FAULT_INJECTION: forcing a failure. [ 1626.238336] name failslab, interval 1, probability 0, space 0, times 0 [ 1626.243397] CPU: 0 UID: 0 PID: 11882 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1626.243434] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1626.243449] Call Trace: [ 1626.243458] [ 1626.243468] dump_stack_lvl+0xfa/0x120 [ 1626.243516] should_fail_ex+0x4d7/0x5e0 [ 1626.243546] ? ext4_mb_new_blocks+0x64e/0x4580 [ 1626.243573] should_failslab+0xc2/0x120 [ 1626.243601] kmem_cache_alloc_noprof+0x80/0x690 [ 1626.243633] ? ext4_dirty_inode+0xf1/0x130 [ 1626.243667] ? __mark_inode_dirty+0x254/0x1470 [ 1626.243702] ? ext4_mb_new_blocks+0x64e/0x4580 [ 1626.243728] ext4_mb_new_blocks+0x64e/0x4580 [ 1626.243770] ? kasan_save_track+0x14/0x30 [ 1626.243797] ? __kasan_kmalloc+0x7f/0x90 [ 1626.243832] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 1626.243863] ? ext4_ext_search_right+0x2e8/0xbd0 [ 1626.243910] ext4_ext_map_blocks+0x1c55/0x5f30 [ 1626.243971] ? unwind_next_frame+0x3bc/0x2540 [ 1626.243995] ? do_syscall_64+0xbf/0x430 [ 1626.244020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1626.244047] ? kernel_text_address+0x11/0xc0 [ 1626.244089] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1626.244134] ? __pfx_perf_trace_lock+0x10/0x10 [ 1626.244177] ? lock_acquire+0x15e/0x2f0 [ 1626.244211] ? ext4_map_blocks+0x564/0x1510 [ 1626.244255] ? __pfx_down_write+0x10/0x10 [ 1626.244293] ext4_map_blocks+0x62d/0x1510 [ 1626.244326] ? kmem_cache_alloc_noprof+0x270/0x690 [ 1626.244359] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1626.244394] ? jbd2__journal_start+0xf6/0x6b0 [ 1626.244440] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1626.244469] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1626.244497] ? ext4_iomap_begin+0x5b0/0xe80 [ 1626.244523] ? ext4_meta_trans_blocks+0x256/0x310 [ 1626.244559] ext4_iomap_begin+0xa5e/0xe80 [ 1626.244605] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1626.244635] ? mark_held_locks+0x49/0x80 [ 1626.244676] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1626.244711] ? __create_object+0x59/0x80 [ 1626.244747] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1626.244774] iomap_iter+0x55a/0x1020 [ 1626.244821] __iomap_dio_rw+0x6dd/0x1c90 [ 1626.244867] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1626.244933] ? ext4_dirty_inode+0xf1/0x130 [ 1626.244965] ? __mark_inode_dirty+0x254/0x1470 [ 1626.245002] iomap_dio_rw+0x40/0xa0 [ 1626.245030] ext4_file_write_iter+0x11eb/0x19f0 [ 1626.245074] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1626.245107] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1626.245151] iter_file_splice_write+0xa3a/0x11f0 [ 1626.245207] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1626.245275] ? lock_is_held_type+0x9e/0x120 [ 1626.245312] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1626.245350] direct_splice_actor+0x192/0x7b0 [ 1626.245390] splice_direct_to_actor+0x347/0x9d0 [ 1626.245427] ? __pfx_direct_splice_actor+0x10/0x10 [ 1626.245470] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1626.245508] ? lock_acquire+0x15e/0x2f0 [ 1626.245549] do_splice_direct+0x179/0x250 [ 1626.245583] ? __pfx_do_splice_direct+0x10/0x10 [ 1626.245633] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1626.245675] ? security_file_permission+0x22/0x90 [ 1626.245712] do_sendfile+0xa8e/0xdc0 [ 1626.245759] ? __pfx_do_sendfile+0x10/0x10 [ 1626.245796] ? __fget_files+0x20d/0x3b0 [ 1626.245847] __x64_sys_sendfile64+0x1d3/0x210 [ 1626.245878] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1626.245908] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1626.245955] do_syscall_64+0xbf/0x430 [ 1626.245982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1626.246007] RIP: 0033:0x7f7a32465b19 [ 1626.246028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1626.246053] RSP: 002b:00007f7a2f9ba188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1626.246077] RAX: ffffffffffffffda RBX: 00007f7a32579020 RCX: 00007f7a32465b19 [ 1626.246094] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1626.246109] RBP: 00007f7a2f9ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1626.246124] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1626.246139] R13: 00007ffe0bebc99f R14: 00007f7a2f9ba300 R15: 0000000000022000 [ 1626.246178] 23:18:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x9, 0x3, 0x1000, 0xd38a, 0x3, "3a094329daea954d6da4cd19c7a4341a93cd13", 0x2, 0x1f}) ioctl$TIOCSCTTY(r0, 0x540e, 0x10001) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x520080, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f00000000c0)) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:18:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000040)={{r0}, {@void, @actul_num={@val=0x2b, 0x6a230de2, 0x4b}}}) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x6, 0x0, 0x0, "f2f3e2a9286b6aefb2f8c2b978657df3480824"}) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) 23:18:48 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 74) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:18:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x3f00) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:18:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}, 0x22}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:18:48 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x80000) 23:18:48 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 71) 23:18:48 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 30) [ 1637.919332] serio: Serial port ptm0 [ 1637.926476] serio: Serial port ptm1 [ 1637.928914] No source specified [ 1637.931627] serio: Serial port ptm2 [ 1637.934436] FAULT_INJECTION: forcing a failure. [ 1637.934436] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.936376] CPU: 1 UID: 0 PID: 11906 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1637.936407] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1637.936422] Call Trace: [ 1637.936431] [ 1637.936440] dump_stack_lvl+0xfa/0x120 [ 1637.936488] should_fail_ex+0x4d7/0x5e0 [ 1637.936516] ? ext4_mb_new_blocks+0x64e/0x4580 [ 1637.936542] should_failslab+0xc2/0x120 [ 1637.936567] kmem_cache_alloc_noprof+0x80/0x690 [ 1637.936597] ? ext4_dirty_inode+0xf1/0x130 [ 1637.936628] ? __mark_inode_dirty+0x254/0x1470 [ 1637.936661] ? ext4_mb_new_blocks+0x64e/0x4580 [ 1637.936684] ext4_mb_new_blocks+0x64e/0x4580 [ 1637.936720] ? perf_trace_lock+0xb5/0x5d0 [ 1637.936757] ? ext4_ind_map_blocks+0x263/0x2330 [ 1637.936791] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 1637.936817] ? __pfx_perf_trace_lock+0x10/0x10 [ 1637.936848] ? ext4_get_branch+0x588/0x740 [ 1637.936887] ext4_ind_map_blocks+0x1850/0x2330 [ 1637.936924] ? unwind_next_frame+0x3bc/0x2540 [ 1637.936964] ? __pfx_ext4_ind_map_blocks+0x10/0x10 [ 1637.937011] ? lock_acquire+0x15e/0x2f0 [ 1637.937041] ? ext4_map_blocks+0x564/0x1510 [ 1637.937078] ? down_write+0x119/0x1f0 [ 1637.937101] ? __pfx_down_write+0x10/0x10 [ 1637.937123] ? lock_release+0xc8/0x290 [ 1637.937161] ext4_map_blocks+0xaf1/0x1510 [ 1637.937190] ? kmem_cache_alloc_noprof+0x270/0x690 [ 1637.937221] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1637.937252] ? jbd2__journal_start+0xf6/0x6b0 [ 1637.937293] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1637.937319] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1637.937344] ? ext4_iomap_begin+0x5b0/0xe80 [ 1637.937368] ? ext4_meta_trans_blocks+0x256/0x310 [ 1637.937399] ext4_iomap_begin+0xa5e/0xe80 [ 1637.937440] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1637.937468] ? iomap_iter_advance+0x177/0x1f0 [ 1637.937506] ? iomap_dio_bio_iter+0x8ac/0x1310 [ 1637.937534] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1637.937558] iomap_iter+0x55a/0x1020 [ 1637.937599] __iomap_dio_rw+0x6dd/0x1c90 [ 1637.937633] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1637.937677] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1637.937709] ? kasan_quarantine_put+0x84/0x1e0 [ 1637.937755] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1637.937805] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1637.937827] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1637.937866] iomap_dio_rw+0x40/0xa0 [ 1637.937892] ext4_file_write_iter+0xe0e/0x19f0 [ 1637.937930] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1637.937954] ? trace_kmalloc+0x1f/0xb0 [ 1637.937973] ? __kmalloc_noprof+0x274/0x680 [ 1637.938001] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1637.938041] iter_file_splice_write+0xa3a/0x11f0 [ 1637.938091] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1637.938152] ? lock_is_held_type+0x9e/0x120 [ 1637.938186] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1637.938220] direct_splice_actor+0x192/0x7b0 [ 1637.938255] splice_direct_to_actor+0x347/0x9d0 [ 1637.938292] No source specified [ 1637.938289] ? __pfx_direct_splice_actor+0x10/0x10 [ 1637.938329] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1637.938364] ? lock_acquire+0x15e/0x2f0 [ 1637.938401] do_splice_direct+0x179/0x250 [ 1637.938432] ? __pfx_do_splice_direct+0x10/0x10 [ 1637.938463] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1637.938499] ? security_file_permission+0x22/0x90 [ 1637.938533] do_sendfile+0xa8e/0xdc0 [ 1637.938576] ? __pfx_do_sendfile+0x10/0x10 [ 1637.938611] ? __fget_files+0x20d/0x3b0 [ 1637.938657] __x64_sys_sendfile64+0x1d3/0x210 [ 1637.938684] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1637.938712] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1637.938753] do_syscall_64+0xbf/0x430 [ 1637.938779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1637.938802] RIP: 0033:0x7fb59c6b8b19 [ 1637.938820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1637.938843] RSP: 002b:00007fb599c2e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1637.938865] RAX: ffffffffffffffda RBX: 00007fb59c7cbf60 RCX: 00007fb59c6b8b19 [ 1637.938880] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1637.938894] RBP: 00007fb599c2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1637.938908] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1637.938922] R13: 00007fff3932da4f R14: 00007fb599c2e300 R15: 0000000000022000 [ 1637.938957] 23:18:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000000c0)="abbf0f5605d46f52d7b5f19381201047114d9af49248fd47b9a7bf6358dc9e07cc7fd75c84603af150c01375959bd4bce628f7937510dba88c804d3c52189b8d6b9e9f29597a5d1bb8cd00263eca9a1b064b8c4afdb6995aea749638e309274e090b8fd5846ddebcc4b3d95b97a4b3394d138e183bf1e3d7e86d544c797d878bc11f05ca666bc0fdb86af9c8decad36cc285c0b58d848e8cf141bf85bf48e2c9b81f01160400cd1b0a2ae9d60f775dbeebce51c01ec2699a5f093634fc736f2db7c2b939fafaa1ac8f2dcd3def3025b0961d539c082fd67d") ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 23:18:48 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x1000000) [ 1638.148783] FAULT_INJECTION: forcing a failure. [ 1638.148783] name failslab, interval 1, probability 0, space 0, times 0 [ 1638.150730] CPU: 0 UID: 0 PID: 11918 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1638.150763] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1638.150778] Call Trace: [ 1638.150786] [ 1638.150796] dump_stack_lvl+0xfa/0x120 [ 1638.150844] should_fail_ex+0x4d7/0x5e0 [ 1638.150872] ? jbd2__journal_start+0x193/0x6b0 [ 1638.150910] should_failslab+0xc2/0x120 [ 1638.150945] kmem_cache_alloc_noprof+0x80/0x690 [ 1638.150980] ? lock_is_held_type+0x9e/0x120 [ 1638.151024] ? jbd2__journal_start+0x193/0x6b0 [ 1638.151060] jbd2__journal_start+0x193/0x6b0 [ 1638.151105] __ext4_journal_start_sb+0x325/0x5d0 23:18:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x22, 'iso8859-5'}}]}) [ 1638.151138] ? ext4_iomap_begin+0x5b0/0xe80 [ 1638.151164] ? ext4_meta_trans_blocks+0x256/0x310 [ 1638.151197] ext4_iomap_begin+0x5b0/0xe80 [ 1638.151240] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1638.151271] ? iomap_iter_advance+0x177/0x1f0 [ 1638.151310] ? iomap_dio_bio_iter+0x8ac/0x1310 [ 1638.151339] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1638.151366] iomap_iter+0x55a/0x1020 [ 1638.151409] __iomap_dio_rw+0x6dd/0x1c90 [ 1638.151444] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1638.151491] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1638.151525] ? kasan_quarantine_put+0x84/0x1e0 [ 1638.151571] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1638.151609] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1638.151633] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1638.151674] iomap_dio_rw+0x40/0xa0 [ 1638.151701] ext4_file_write_iter+0xe0e/0x19f0 [ 1638.151742] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1638.151767] ? trace_kmalloc+0x1f/0xb0 [ 1638.151788] ? __kmalloc_noprof+0x274/0x680 [ 1638.151818] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1638.151861] iter_file_splice_write+0xa3a/0x11f0 [ 1638.151914] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1638.151978] ? lock_is_held_type+0x9e/0x120 [ 1638.152014] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1638.152051] direct_splice_actor+0x192/0x7b0 [ 1638.152090] splice_direct_to_actor+0x347/0x9d0 [ 1638.152125] ? __pfx_direct_splice_actor+0x10/0x10 [ 1638.152166] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1638.152203] ? lock_acquire+0x15e/0x2f0 [ 1638.152244] do_splice_direct+0x179/0x250 [ 1638.152277] ? __pfx_do_splice_direct+0x10/0x10 [ 1638.152311] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1638.152348] ? security_file_permission+0x22/0x90 [ 1638.152384] do_sendfile+0xa8e/0xdc0 [ 1638.152429] ? __pfx_do_sendfile+0x10/0x10 [ 1638.152466] ? __fget_files+0x20d/0x3b0 [ 1638.152514] __x64_sys_sendfile64+0x1d3/0x210 [ 1638.152543] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1638.152573] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1638.152617] do_syscall_64+0xbf/0x430 [ 1638.152644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1638.152669] RIP: 0033:0x7f20266ecb19 [ 1638.152688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1638.152713] RSP: 002b:00007f2023c20188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1638.152736] RAX: ffffffffffffffda RBX: 00007f20268000e0 RCX: 00007f20266ecb19 [ 1638.152752] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1638.152767] RBP: 00007f2023c201d0 R08: 0000000000000000 R09: 0000000000000000 [ 1638.152782] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1638.152797] R13: 00007ffcc2c01daf R14: 00007f2023c20300 R15: 0000000000022000 [ 1638.152831] 23:18:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0xdf2b) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1638.258602] serio: Serial port ptm1 [ 1638.261829] serio: Serial port ptm0 [ 1638.292279] vfat: Unknown parameter 'iocharset"iso8859-5' [ 1638.296460] vfat: Unknown parameter 'iocharset"iso8859-5' [ 1638.318732] serio: Serial port ptm1 23:18:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824", 0x3}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x2a48) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:18:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x2c, 'iso8859-5'}}]}) 23:18:48 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 72) 23:18:48 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 31) 23:18:48 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0xfdfdffff) [ 1638.449816] vfat: Bad value for 'iocharset' [ 1638.459116] vfat: Bad value for 'iocharset' [ 1638.480070] serio: Serial port ptm0 [ 1638.552294] serio: Serial port ptm0 [ 1638.570163] FAULT_INJECTION: forcing a failure. [ 1638.570163] name failslab, interval 1, probability 0, space 0, times 0 [ 1638.571701] CPU: 1 UID: 0 PID: 11941 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1638.571726] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1638.571739] Call Trace: [ 1638.571746] [ 1638.571753] dump_stack_lvl+0xfa/0x120 [ 1638.571795] should_fail_ex+0x4d7/0x5e0 [ 1638.571818] should_failslab+0xc2/0x120 [ 1638.571840] __kmalloc_noprof+0xcd/0x680 [ 1638.571866] ? ext4_find_extent+0x7f5/0xa00 [ 1638.571897] ext4_find_extent+0x7f5/0xa00 [ 1638.571929] ext4_ext_map_blocks+0x1cc/0x5f30 [ 1638.571973] ? lock_release+0xc8/0x290 [ 1638.572009] ? unwind_next_frame+0x3bc/0x2540 [ 1638.572028] ? do_syscall_64+0xbf/0x430 [ 1638.572047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1638.572067] ? kernel_text_address+0x11/0xc0 [ 1638.572098] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1638.572129] ? __pfx_perf_trace_lock+0x10/0x10 [ 1638.572160] ? lock_acquire+0x15e/0x2f0 [ 1638.572184] ? ext4_map_blocks+0x564/0x1510 [ 1638.572213] ? down_write+0x119/0x1f0 [ 1638.572232] ? __pfx_down_write+0x10/0x10 [ 1638.572258] ext4_map_blocks+0x62d/0x1510 [ 1638.572281] ? kmem_cache_alloc_noprof+0x270/0x690 [ 1638.572305] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1638.572329] ? jbd2__journal_start+0xf6/0x6b0 [ 1638.572362] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1638.572382] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1638.572402] ? ext4_iomap_begin+0x5b0/0xe80 [ 1638.572421] ? ext4_meta_trans_blocks+0x256/0x310 [ 1638.572446] ext4_iomap_begin+0xa5e/0xe80 [ 1638.572465] ? __pfx_perf_trace_lock+0x10/0x10 [ 1638.572502] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1638.572523] ? mark_held_locks+0x49/0x80 [ 1638.572551] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1638.572577] ? __create_object+0x59/0x80 [ 1638.572604] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1638.572624] iomap_iter+0x55a/0x1020 [ 1638.572658] __iomap_dio_rw+0x6dd/0x1c90 [ 1638.572685] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1638.572720] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1638.572746] ? kasan_quarantine_put+0x84/0x1e0 [ 1638.572783] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1638.572811] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1638.572829] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1638.572860] iomap_dio_rw+0x40/0xa0 [ 1638.572881] ext4_file_write_iter+0xe0e/0x19f0 [ 1638.572912] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1638.572931] ? trace_kmalloc+0x1f/0xb0 [ 1638.572946] ? __kmalloc_noprof+0x274/0x680 [ 1638.572968] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1638.573002] iter_file_splice_write+0xa3a/0x11f0 [ 1638.573042] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1638.573090] ? lock_is_held_type+0x9e/0x120 [ 1638.573117] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1638.573145] direct_splice_actor+0x192/0x7b0 [ 1638.573173] splice_direct_to_actor+0x347/0x9d0 [ 1638.573199] ? __pfx_direct_splice_actor+0x10/0x10 [ 1638.573230] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1638.573257] ? lock_acquire+0x15e/0x2f0 [ 1638.573286] do_splice_direct+0x179/0x250 [ 1638.573310] ? __pfx_do_splice_direct+0x10/0x10 [ 1638.573335] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1638.573363] ? security_file_permission+0x22/0x90 [ 1638.573391] do_sendfile+0xa8e/0xdc0 [ 1638.573425] ? __pfx_do_sendfile+0x10/0x10 [ 1638.573452] ? __fget_files+0x20d/0x3b0 [ 1638.573489] __x64_sys_sendfile64+0x1d3/0x210 [ 1638.573511] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1638.573532] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1638.573566] do_syscall_64+0xbf/0x430 [ 1638.573585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1638.573603] RIP: 0033:0x7f7a32465b19 [ 1638.573618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1638.573636] RSP: 002b:00007f7a2f9db188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1638.573653] RAX: ffffffffffffffda RBX: 00007f7a32578f60 RCX: 00007f7a32465b19 [ 1638.573666] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1638.573677] RBP: 00007f7a2f9db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1638.573688] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1638.573700] R13: 00007ffe0bebc99f R14: 00007f7a2f9db300 R15: 0000000000022000 [ 1638.573727] [ 1638.743509] serio: Serial port ptm0 23:18:59 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 75) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:18:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}, 0x22}]}) 23:18:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0xe084) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:18:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000000)) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:18:59 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0xfffffdfd) 23:18:59 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 73) 23:18:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x7, 0x1, 0xff, 0x6f, 0x6, "7d15817821f92d2029b4dca4f67e0ffa0ef814", 0x7, 0x9}) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r2, 0x4b4b, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x17) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000100)) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) 23:18:59 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 32) [ 1649.147515] serio: Serial port ptm0 [ 1649.206768] No source specified [ 1649.216896] No source specified [ 1649.246901] FAULT_INJECTION: forcing a failure. [ 1649.246901] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1649.248098] CPU: 0 UID: 0 PID: 11972 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1649.248116] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1649.248124] Call Trace: [ 1649.248129] [ 1649.248135] dump_stack_lvl+0xfa/0x120 [ 1649.248163] should_fail_ex+0x4d7/0x5e0 [ 1649.248179] should_fail_alloc_page+0xe0/0x110 [ 1649.248196] prepare_alloc_pages+0x1eb/0x550 [ 1649.248221] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 1649.248242] ? __pfx_ext4_es_insert_delayed_extent+0x10/0x10 [ 1649.248258] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 1649.248280] ? find_held_lock+0x2b/0x80 [ 1649.248295] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1649.248311] ? lock_release+0xc8/0x290 [ 1649.248332] ? ext4_da_reserve_space+0xf9/0x430 [ 1649.248354] ? perf_trace_lock+0xb5/0x5d0 [ 1649.248374] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1649.248390] ? policy_nodemask+0xeb/0x4e0 [ 1649.248410] alloc_pages_mpol+0xed/0x340 [ 1649.248427] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1649.248442] ? find_held_lock+0x2b/0x80 [ 1649.248455] ? filemap_get_entry+0x1b1/0x3b0 23:18:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x1000) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x4, "f2f3e2a9286b6a770ff8c2b978657df3480824", 0xfffffffd, 0x2}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1649.248470] ? lock_release+0xc8/0x290 [ 1649.248490] folio_alloc_noprof+0x21/0x80 [ 1649.248508] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 1649.248530] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1649.248550] ? perf_trace_lock+0xb5/0x5d0 [ 1649.248572] __filemap_get_folio_mpol+0x513/0x9a0 [ 1649.248590] ext4_da_write_begin+0x3e1/0xb40 [ 1649.248612] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1649.248630] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 1649.248651] generic_perform_write+0x391/0x810 [ 1649.248677] ? __pfx_generic_perform_write+0x10/0x10 [ 1649.248704] ext4_buffered_write_iter+0x11a/0x430 [ 1649.248721] ext4_file_write_iter+0x104b/0x19f0 [ 1649.248742] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1649.248758] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1649.248783] iter_file_splice_write+0xa3a/0x11f0 [ 1649.248811] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1649.248845] ? lock_is_held_type+0x9e/0x120 [ 1649.248865] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1649.248884] direct_splice_actor+0x192/0x7b0 [ 1649.248904] splice_direct_to_actor+0x347/0x9d0 [ 1649.248923] ? __pfx_direct_splice_actor+0x10/0x10 [ 1649.248950] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1649.248969] ? lock_acquire+0x15e/0x2f0 [ 1649.248990] do_splice_direct+0x179/0x250 [ 1649.249007] ? __pfx_do_splice_direct+0x10/0x10 [ 1649.249027] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1649.249047] ? security_file_permission+0x22/0x90 [ 1649.249066] do_sendfile+0xa8e/0xdc0 [ 1649.249090] ? __pfx_do_sendfile+0x10/0x10 [ 1649.249109] ? __fget_files+0x20d/0x3b0 [ 1649.249135] __x64_sys_sendfile64+0x1d3/0x210 [ 1649.249151] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1649.249166] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1649.249189] do_syscall_64+0xbf/0x430 [ 1649.249203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.249217] RIP: 0033:0x7f20266ecb19 [ 1649.249227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1649.249240] RSP: 002b:00007f2023c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1649.249253] RAX: ffffffffffffffda RBX: 00007f2026800020 RCX: 00007f20266ecb19 [ 1649.249262] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1649.249270] RBP: 00007f2023c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1649.249277] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1649.249285] R13: 00007ffcc2c01daf R14: 00007f2023c41300 R15: 0000000000022000 [ 1649.249304] [ 1649.251761] serio: Serial port ptm2 23:18:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:18:59 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x8000000000000) 23:18:59 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 74) [ 1649.355700] serio: Serial port ptm1 [ 1649.363674] No source specified [ 1649.367368] No source specified 23:18:59 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x9) syz_open_dev$tty20(0xc, 0x4, 0x0) [ 1649.416109] serio: Serial port ptm0 23:18:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}], [], 0x2}) [ 1649.460331] FAULT_INJECTION: forcing a failure. [ 1649.460331] name failslab, interval 1, probability 0, space 0, times 0 [ 1649.461453] CPU: 0 UID: 0 PID: 11988 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1649.461471] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1649.461479] Call Trace: [ 1649.461484] [ 1649.461490] dump_stack_lvl+0xfa/0x120 [ 1649.461519] should_fail_ex+0x4d7/0x5e0 [ 1649.461535] ? ext4_mb_new_blocks+0x241e/0x4580 [ 1649.461551] should_failslab+0xc2/0x120 [ 1649.461567] kmem_cache_alloc_noprof+0x80/0x690 [ 1649.461591] ? ext4_mb_new_blocks+0x241e/0x4580 [ 1649.461604] ext4_mb_new_blocks+0x241e/0x4580 [ 1649.461626] ? kasan_save_track+0x14/0x30 [ 1649.461640] ? __kasan_kmalloc+0x7f/0x90 [ 1649.461658] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 1649.461673] ? ext4_ext_search_right+0x2e8/0xbd0 [ 1649.461698] ext4_ext_map_blocks+0x1c55/0x5f30 [ 1649.461725] ? unwind_next_frame+0x3bc/0x2540 [ 1649.461738] ? do_syscall_64+0xbf/0x430 [ 1649.461752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.461766] ? kernel_text_address+0x11/0xc0 [ 1649.461788] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1649.461811] ? __pfx_perf_trace_lock+0x10/0x10 [ 1649.461834] ? lock_acquire+0x15e/0x2f0 [ 1649.461852] ? ext4_map_blocks+0x564/0x1510 [ 1649.461875] ? __pfx_down_write+0x10/0x10 [ 1649.461895] ext4_map_blocks+0x62d/0x1510 [ 1649.461911] ? kmem_cache_alloc_noprof+0x270/0x690 [ 1649.461928] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1649.461950] ? jbd2__journal_start+0xf6/0x6b0 [ 1649.461991] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1649.462005] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1649.462020] ? ext4_iomap_begin+0x5b0/0xe80 [ 1649.462034] ? ext4_meta_trans_blocks+0x256/0x310 [ 1649.462052] ext4_iomap_begin+0xa5e/0xe80 [ 1649.462066] ? __pfx_perf_trace_lock+0x10/0x10 [ 1649.462092] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1649.462108] ? mark_held_locks+0x49/0x80 [ 1649.462128] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1649.462146] ? __create_object+0x59/0x80 [ 1649.462166] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1649.462181] iomap_iter+0x55a/0x1020 [ 1649.462206] __iomap_dio_rw+0x6dd/0x1c90 [ 1649.462224] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1649.462251] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1649.462269] ? kasan_quarantine_put+0x84/0x1e0 [ 1649.462294] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1649.462315] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1649.462327] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1649.462350] iomap_dio_rw+0x40/0xa0 [ 1649.462364] ext4_file_write_iter+0xe0e/0x19f0 [ 1649.462387] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1649.462401] ? trace_kmalloc+0x1f/0xb0 23:18:59 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 33) [ 1649.462412] ? __kmalloc_noprof+0x274/0x680 [ 1649.462428] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1649.462452] iter_file_splice_write+0xa3a/0x11f0 [ 1649.462481] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1649.462516] ? lock_is_held_type+0x9e/0x120 [ 1649.462535] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1649.462555] direct_splice_actor+0x192/0x7b0 [ 1649.462576] splice_direct_to_actor+0x347/0x9d0 [ 1649.462595] ? __pfx_direct_splice_actor+0x10/0x10 [ 1649.462617] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1649.462637] ? lock_acquire+0x15e/0x2f0 [ 1649.462658] do_splice_direct+0x179/0x250 [ 1649.462676] ? __pfx_do_splice_direct+0x10/0x10 [ 1649.462695] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1649.462715] ? security_file_permission+0x22/0x90 [ 1649.462735] do_sendfile+0xa8e/0xdc0 [ 1649.462759] ? __pfx_do_sendfile+0x10/0x10 [ 1649.462779] ? __fget_files+0x20d/0x3b0 [ 1649.462806] __x64_sys_sendfile64+0x1d3/0x210 [ 1649.462822] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1649.462838] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1649.462862] do_syscall_64+0xbf/0x430 [ 1649.462876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.462889] RIP: 0033:0x7f7a32465b19 [ 1649.462900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1649.462913] RSP: 002b:00007f7a2f9db188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1649.462926] RAX: ffffffffffffffda RBX: 00007f7a32578f60 RCX: 00007f7a32465b19 [ 1649.462936] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1649.462943] RBP: 00007f7a2f9db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1649.462952] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1649.462960] R13: 00007ffe0bebc99f R14: 00007f7a2f9db300 R15: 0000000000022000 [ 1649.462979] [ 1649.469703] vfat: Unknown parameter '' 23:19:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0xeffd) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1649.563305] vfat: Unknown parameter '' [ 1649.624524] serio: Serial port ptm0 [ 1649.680714] serio: Serial port ptm0 23:19:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x2, 0x0, 0x1a0e8e4a, 0x2, 0x0, "0681bdc4fe2781af18e86689f1469c21102acc", 0x7ff, 0xfffffff8}) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824", 0x9}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:19:00 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 75) 23:19:00 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x100000000000000) 23:19:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}], [], 0x3}) 23:19:00 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 76) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:19:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0xfdef) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1649.810335] serio: Serial port ptm2 [ 1649.832405] vfat: Unknown parameter '' [ 1649.846123] vfat: Unknown parameter '' [ 1649.938317] serio: Serial port ptm0 [ 1650.005714] serio: Serial port ptm0 [ 1650.047540] serio: Serial port ptm2 23:19:09 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 34) 23:19:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x40000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:19:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000000)) 23:19:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}], [], 0x4}) 23:19:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x8000, 0x1, "f2f3e2a9286b6a770ff8c2b978657df3480824", 0x0, 0xc5}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:19:09 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 76) 23:19:09 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 77) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:19:09 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0xfdfdffff00000000) [ 1658.876706] vfat: Unknown parameter '' [ 1658.881185] vfat: Unknown parameter '' [ 1658.885978] serio: Serial port ptm1 [ 1658.887079] serio: Serial port ptm2 [ 1658.917305] serio: Serial port ptm3 23:19:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}], [], 0x5}) 23:19:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x4, 0xff, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824", 0x5, 0xffffffff}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) 23:19:09 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 77) [ 1658.995288] FAULT_INJECTION: forcing a failure. [ 1658.995288] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1658.996394] serio: Serial port ptm0 [ 1658.997332] CPU: 1 UID: 0 PID: 12044 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1658.997367] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1658.997382] Call Trace: [ 1658.997392] [ 1658.997401] dump_stack_lvl+0xfa/0x120 [ 1658.997447] should_fail_ex+0x4d7/0x5e0 [ 1658.997477] should_fail_alloc_page+0xe0/0x110 [ 1658.997506] prepare_alloc_pages+0x1eb/0x550 [ 1658.997552] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 1658.997592] ? __pfx_ext4_es_insert_delayed_extent+0x10/0x10 [ 1658.997621] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 1658.997662] ? find_held_lock+0x2b/0x80 [ 1658.997690] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1658.997720] ? lock_release+0xc8/0x290 [ 1658.997760] ? ext4_da_reserve_space+0xf9/0x430 [ 1658.997802] ? perf_trace_lock+0xb5/0x5d0 [ 1658.997838] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1658.997869] ? policy_nodemask+0xeb/0x4e0 [ 1658.997905] alloc_pages_mpol+0xed/0x340 [ 1658.997945] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1658.997974] ? find_held_lock+0x2b/0x80 [ 1658.998000] ? filemap_get_entry+0x1b1/0x3b0 [ 1658.998026] ? lock_release+0xc8/0x290 [ 1658.998065] folio_alloc_noprof+0x21/0x80 [ 1658.998099] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 1658.998153] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1658.998191] ? perf_trace_lock+0xb5/0x5d0 [ 1658.998233] __filemap_get_folio_mpol+0x513/0x9a0 [ 1658.998268] ext4_da_write_begin+0x3e1/0xb40 [ 1658.998310] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1658.998343] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 1658.998383] generic_perform_write+0x391/0x810 [ 1658.998432] ? __pfx_generic_perform_write+0x10/0x10 [ 1658.998473] ? generic_update_time+0xcb/0xf0 [ 1658.998499] ? mnt_put_write_access_file+0x45/0xe0 [ 1658.998542] ext4_buffered_write_iter+0x11a/0x430 [ 1658.998573] ext4_file_write_iter+0x104b/0x19f0 [ 1658.998613] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1658.998645] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1658.998688] iter_file_splice_write+0xa3a/0x11f0 [ 1658.998742] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1658.998807] ? lock_is_held_type+0x9e/0x120 [ 1658.998845] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1658.998882] direct_splice_actor+0x192/0x7b0 [ 1658.998920] splice_direct_to_actor+0x347/0x9d0 [ 1658.998955] ? __pfx_direct_splice_actor+0x10/0x10 [ 1658.998996] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1658.999033] ? lock_acquire+0x15e/0x2f0 [ 1658.999072] do_splice_direct+0x179/0x250 [ 1658.999105] ? __pfx_do_splice_direct+0x10/0x10 [ 1658.999139] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1658.999176] ? security_file_permission+0x22/0x90 [ 1658.999213] do_sendfile+0xa8e/0xdc0 [ 1658.999257] ? __pfx_do_sendfile+0x10/0x10 [ 1658.999294] ? __fget_files+0x20d/0x3b0 [ 1658.999343] __x64_sys_sendfile64+0x1d3/0x210 [ 1658.999372] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1658.999401] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1658.999445] do_syscall_64+0xbf/0x430 [ 1658.999472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1658.999496] RIP: 0033:0x7f20266ecb19 [ 1658.999517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1658.999540] RSP: 002b:00007f2023c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1658.999564] RAX: ffffffffffffffda RBX: 00007f2026800020 RCX: 00007f20266ecb19 [ 1658.999581] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1658.999595] RBP: 00007f2023c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1658.999610] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1658.999625] R13: 00007ffcc2c01daf R14: 00007f2023c41300 R15: 0000000000022000 [ 1658.999661] [ 1659.103771] vfat: Unknown parameter '' 23:19:09 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x4c880, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xaa3) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1659.118450] vfat: Unknown parameter '' 23:19:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x80000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1659.218213] serio: Serial port ptm2 [ 1659.235627] serio: Serial port ptm3 [ 1659.298585] serio: Serial port ptm3 [ 1659.301928] serio: Serial port ptm2 [ 1659.703138] serio: Serial port ptm0 23:19:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x9) 23:19:18 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 78) 23:19:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}], [], 0x6}) 23:19:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x1000000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:19:18 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 35) 23:19:18 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 78) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:19:18 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000004ff18b267d"]) ioctl$TCSBRK(r1, 0x5409, 0x6108) 23:19:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r2, 0x4b4b, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) dup3(r0, r4, 0x80000) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r6, 0x4b4b, 0x0) io_submit(0x0, 0x4, &(0x7f0000002a00)=[&(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000007c0)="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", 0x1000, 0x5, 0x0, 0x0, r1}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x8, 0x7, r3, &(0x7f0000001800)="461a77585f4b376fea9738396ab2f47a717be7eb2a9845ebb3895c5b252609ef741509db02616e9b1a85c69f78d1a50a1a2d8402ac163dd92bd27017e12e097e494c88a70ece8a2798ff31f613d689317a5459eca243f76f98df50abaa79f450d01db4cc9654c4ab4916a6f46455626f18ab6f96a402d38eb19d7ed8c72822dd31e3f536edec21bcb20de2240cf322fd1fc6be2dff357147c75dd292b65db80b2e02dfcefe02005ad34acaca59c07961b2953ebbc55c0ef69c142a", 0xbb, 0x0, 0x0, 0x3, r4}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x8, 0x9, r1, &(0x7f0000001900)="6cf46333b4de7098895fa61258a636da91743daf3f301795c46d66b100cea2fac304f511571c2dfe19e09a2c01c99e67dd39ce7e88f2092dc872fda769c23195ebb574e9f90f98bfadfc4ac05c1dfa3e060aca73005447c2ca81", 0x5a, 0x1, 0x0, 0x1, r5}, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, 0x8, r6, &(0x7f00000019c0)="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", 0x1000, 0xc6, 0x0, 0x2}]) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000002a40)={0x100000001, 0x4, 0x0, [{0x9000000000000, 0x10000, 0x5, 0x18, 0x6a, 0x2, 0xfb}, {0x8, 0x6, 0x9, 0x0, 0x2, 0x3, 0x3}, {0x401, 0xe4c, 0x7, 0x2, 0x7, 0x6, 0x1}, {0x101, 0x6c55, 0x3, 0x3, 0x3, 0xf7, 0x4}]}) recvmmsg$unix(r1, &(0x7f0000000640)=[{{&(0x7f00000000c0), 0x6e, &(0x7f0000000040)=[{&(0x7f0000000140)=""/126, 0x7e}], 0x1, &(0x7f00000001c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)=""/6, 0x6}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000018000000000000400100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x90}}, {{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000440)=""/11, 0xb}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/47, 0x2f}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="2400000000fcffffffffffffff000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x68}}], 0x4, 0x10002, &(0x7f0000000740)={0x0, 0x3938700}) [ 1668.567058] serio: Serial port ptm0 [ 1668.583800] vfat: Unknown parameter '' [ 1668.585908] vfat: Unknown parameter '' [ 1668.587928] serio: Serial port ptm1 [ 1668.605025] serio: Serial port ptm2 [ 1668.613899] FAULT_INJECTION: forcing a failure. [ 1668.613899] name failslab, interval 1, probability 0, space 0, times 0 [ 1668.615740] CPU: 1 UID: 0 PID: 12091 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1668.615773] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1668.615788] Call Trace: [ 1668.615797] [ 1668.615807] dump_stack_lvl+0xfa/0x120 [ 1668.615854] should_fail_ex+0x4d7/0x5e0 [ 1668.615883] ? jbd2__journal_start+0x193/0x6b0 [ 1668.615920] should_failslab+0xc2/0x120 [ 1668.615954] kmem_cache_alloc_noprof+0x80/0x690 [ 1668.615989] ? lock_is_held_type+0x9e/0x120 [ 1668.616031] ? jbd2__journal_start+0x193/0x6b0 [ 1668.616067] jbd2__journal_start+0x193/0x6b0 [ 1668.616110] __ext4_journal_start_sb+0x325/0x5d0 [ 1668.616140] ? ext4_iomap_begin+0x5b0/0xe80 [ 1668.616166] ? ext4_meta_trans_blocks+0x256/0x310 [ 1668.616198] ext4_iomap_begin+0x5b0/0xe80 [ 1668.616242] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1668.616273] ? iomap_iter_advance+0x177/0x1f0 [ 1668.616312] ? iomap_dio_bio_iter+0x8ac/0x1310 [ 1668.616342] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1668.616368] iomap_iter+0x55a/0x1020 [ 1668.616412] __iomap_dio_rw+0x6dd/0x1c90 [ 1668.616447] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1668.616493] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1668.616530] ? kasan_quarantine_put+0x84/0x1e0 [ 1668.616578] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1668.616615] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1668.616639] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1668.616680] iomap_dio_rw+0x40/0xa0 [ 1668.616707] ext4_file_write_iter+0xe0e/0x19f0 [ 1668.616748] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1668.616774] ? trace_kmalloc+0x1f/0xb0 [ 1668.616795] ? __kmalloc_noprof+0x274/0x680 [ 1668.616825] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1668.616869] iter_file_splice_write+0xa3a/0x11f0 [ 1668.616922] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1668.616987] ? lock_is_held_type+0x9e/0x120 [ 1668.617022] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1668.617059] direct_splice_actor+0x192/0x7b0 [ 1668.617097] splice_direct_to_actor+0x347/0x9d0 [ 1668.617133] ? __pfx_direct_splice_actor+0x10/0x10 [ 1668.617174] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1668.617211] ? lock_acquire+0x15e/0x2f0 [ 1668.617252] do_splice_direct+0x179/0x250 [ 1668.617284] ? __pfx_do_splice_direct+0x10/0x10 [ 1668.617319] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1668.617356] ? security_file_permission+0x22/0x90 [ 1668.617392] do_sendfile+0xa8e/0xdc0 [ 1668.617436] ? __pfx_do_sendfile+0x10/0x10 [ 1668.617473] ? __fget_files+0x20d/0x3b0 [ 1668.617521] __x64_sys_sendfile64+0x1d3/0x210 [ 1668.617550] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1668.617579] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1668.617624] do_syscall_64+0xbf/0x430 [ 1668.617650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1668.617675] RIP: 0033:0x7fb59c6b8b19 [ 1668.617694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1668.617717] RSP: 002b:00007fb599c2e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1668.617741] RAX: ffffffffffffffda RBX: 00007fb59c7cbf60 RCX: 00007fb59c6b8b19 [ 1668.617758] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1668.617772] RBP: 00007fb599c2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1668.617787] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1668.617802] R13: 00007fff3932da4f R14: 00007fb599c2e300 R15: 0000000000022000 [ 1668.617838] 23:19:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}], [], 0x7}) [ 1668.693375] serio: Serial port ptm0 [ 1668.747428] vfat: Unknown parameter '' [ 1668.766718] vfat: Unknown parameter '' 23:19:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x2000000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:19:19 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 79) 23:19:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}], [], 0x8}) 23:19:19 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x8, 0xfff8, 0x20, 0x0, 0x17, "c637b2c002761e7a"}) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x2, 0x96001) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:19:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000040)={0xd, 0x9}) [ 1668.870319] serio: Serial port ptm0 [ 1668.884375] vfat: Unknown parameter '' [ 1668.887478] vfat: Unknown parameter '' [ 1668.993214] serio: Serial port ptm2 [ 1669.054672] serio: Serial port ptm0 [ 1669.406607] serio: Serial port ptm0 23:19:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x3000000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:19:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}], [], 0x9}) 23:19:28 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 79) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:19:28 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 36) 23:19:28 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 80) 23:19:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x7ff, 0x400, 0x7, 0x2, 0x6, "e6c0e1b8c68982d5224b47d71be92d5bd5d60c", 0x3ff, 0xf}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x5, 0x1, 0x1, 0x1, 0x81, 0x6}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) 23:19:28 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x523c01, 0x0) dup2(r0, r1) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:19:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0xfffffffb, 0x4, 0x0, 0x6, "907fa17ae36badadc500e3680f89750328b819", 0x200, 0xc202}) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) [ 1678.489849] serio: Serial port ptm1 23:19:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x6, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1678.521493] vfat: Unknown parameter ' ' [ 1678.523922] vfat: Unknown parameter ' ' [ 1678.524970] serio: Serial port ptm0 [ 1678.549510] serio: Serial port ptm2 [ 1678.549792] serio: Serial port ptm1 23:19:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}], [], 0xa}) [ 1678.610662] serio: Serial port ptm1 [ 1678.626618] FAULT_INJECTION: forcing a failure. [ 1678.626618] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1678.627753] CPU: 1 UID: 0 PID: 12155 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1678.627772] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1678.627780] Call Trace: [ 1678.627785] [ 1678.627790] dump_stack_lvl+0xfa/0x120 [ 1678.627818] should_fail_ex+0x4d7/0x5e0 [ 1678.627835] should_fail_alloc_page+0xe0/0x110 [ 1678.627852] prepare_alloc_pages+0x1eb/0x550 [ 1678.627878] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 1678.627899] ? __pfx_ext4_es_insert_delayed_extent+0x10/0x10 [ 1678.627916] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 1678.627942] ? find_held_lock+0x2b/0x80 [ 1678.627959] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1678.627979] ? lock_release+0xc8/0x290 [ 1678.628001] ? ext4_da_reserve_space+0xf9/0x430 [ 1678.628024] ? perf_trace_lock+0xb5/0x5d0 [ 1678.628043] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1678.628060] ? policy_nodemask+0xeb/0x4e0 [ 1678.628080] alloc_pages_mpol+0xed/0x340 [ 1678.628097] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1678.628113] ? find_held_lock+0x2b/0x80 [ 1678.628127] ? filemap_get_entry+0x1b1/0x3b0 [ 1678.628141] ? lock_release+0xc8/0x290 [ 1678.628162] folio_alloc_noprof+0x21/0x80 [ 1678.628181] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 1678.628203] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1678.628223] ? perf_trace_lock+0xb5/0x5d0 [ 1678.628246] __filemap_get_folio_mpol+0x513/0x9a0 [ 1678.628264] ext4_da_write_begin+0x3e1/0xb40 [ 1678.628287] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1678.628305] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 1678.628327] generic_perform_write+0x391/0x810 [ 1678.628353] ? __pfx_generic_perform_write+0x10/0x10 [ 1678.628375] ? generic_update_time+0xcb/0xf0 [ 1678.628390] ? mnt_put_write_access_file+0x45/0xe0 [ 1678.628414] ext4_buffered_write_iter+0x11a/0x430 [ 1678.628430] ext4_file_write_iter+0x104b/0x19f0 [ 1678.628451] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1678.628468] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1678.628492] iter_file_splice_write+0xa3a/0x11f0 [ 1678.628521] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1678.628555] ? lock_is_held_type+0x9e/0x120 [ 1678.628576] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1678.628596] direct_splice_actor+0x192/0x7b0 [ 1678.628616] splice_direct_to_actor+0x347/0x9d0 [ 1678.628635] ? __pfx_direct_splice_actor+0x10/0x10 [ 1678.628658] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1678.628677] ? lock_acquire+0x15e/0x2f0 [ 1678.628699] do_splice_direct+0x179/0x250 [ 1678.628717] ? __pfx_do_splice_direct+0x10/0x10 [ 1678.628735] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1678.628755] ? security_file_permission+0x22/0x90 [ 1678.628775] do_sendfile+0xa8e/0xdc0 [ 1678.628799] ? __pfx_do_sendfile+0x10/0x10 [ 1678.628819] ? __fget_files+0x20d/0x3b0 [ 1678.628845] __x64_sys_sendfile64+0x1d3/0x210 [ 1678.628861] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1678.628876] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1678.628900] do_syscall_64+0xbf/0x430 [ 1678.628915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1678.628929] RIP: 0033:0x7f20266ecb19 [ 1678.628940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1678.628954] RSP: 002b:00007f2023c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1678.628967] RAX: ffffffffffffffda RBX: 00007f2026800020 RCX: 00007f20266ecb19 [ 1678.628977] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1678.628984] RBP: 00007f2023c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1678.628993] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1678.629001] R13: 00007ffcc2c01daf R14: 00007f2023c41300 R15: 0000000000022000 [ 1678.629019] 23:19:29 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x7f, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000001c0)=0xc) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r3, &(0x7f0000001500)=[{&(0x7f0000000100)=""/70, 0x46}], 0x1) write(r4, &(0x7f0000000400)='^', 0x1) fcntl$setown(r1, 0x8, r2) [ 1678.690439] vfat: Unknown parameter ' [ 1678.690439] ' [ 1678.700466] vfat: Unknown parameter ' [ 1678.700466] ' 23:19:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x4000000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:19:29 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 81) 23:19:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r2, 0x4b4b, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)="c5eec83e6f75acbc4d2a1262c01fb4800b644b6c46f3fa25ef4aaefa4ebd3d3dbb9017ca4eda7c6e82f48c5d7d8d3c464cd0cc69ad6d5a218ef6c15c0583052944d6435d405a9eea543701cd86d69790583db760543b433e0fa9467ae9c9173c0137420cd03ee35bbd254d3db783d0c0ecdf7e5a0cf0620fb0be830d770a534b293f1e11ef3d3441dfbe2f0041882a0c4aa3c134cdbe0c1a6ab4c60c49eab1749c1c", 0xa2}, 0x1b) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1678.743672] serio: Serial port ptm2 [ 1678.745647] serio: Serial port ptm1 23:19:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}], [], 0xb}) [ 1678.778532] vfat: Unknown parameter ' ' [ 1678.779903] vfat: Unknown parameter ' ' 23:19:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}], [], 0x10}) 23:19:29 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 80) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:19:29 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 37) 23:19:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x5000000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1678.852278] vfat: Unknown parameter '' [ 1678.854499] vfat: Unknown parameter '' [ 1678.869702] serio: Serial port ptm1 23:19:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='nfs=nostale_ro,rodir,p874,885\x00\x005,\x00'/47]) [ 1678.927607] serio: Serial port ptm1 [ 1678.964602] vfat: Unknown parameter 'p874' [ 1678.972106] vfat: Unknown parameter 'p874' [ 1678.990880] serio: Serial port ptm1 [ 1679.003893] FAULT_INJECTION: forcing a failure. [ 1679.003893] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1679.005021] CPU: 1 UID: 0 PID: 12188 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1679.005039] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1679.005047] Call Trace: [ 1679.005052] [ 1679.005057] dump_stack_lvl+0xfa/0x120 [ 1679.005084] should_fail_ex+0x4d7/0x5e0 [ 1679.005100] should_fail_alloc_page+0xe0/0x110 [ 1679.005116] prepare_alloc_pages+0x1eb/0x550 [ 1679.005140] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 1679.005159] ? __pfx_ext4_es_insert_delayed_extent+0x10/0x10 [ 1679.005175] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 1679.005196] ? find_held_lock+0x2b/0x80 [ 1679.005211] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1679.005226] ? lock_release+0xc8/0x290 [ 1679.005247] ? ext4_da_reserve_space+0xf9/0x430 [ 1679.005268] ? perf_trace_lock+0xb5/0x5d0 [ 1679.005286] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1679.005302] ? policy_nodemask+0xeb/0x4e0 [ 1679.005320] alloc_pages_mpol+0xed/0x340 [ 1679.005336] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1679.005351] ? find_held_lock+0x2b/0x80 [ 1679.005364] ? filemap_get_entry+0x1b1/0x3b0 [ 1679.005377] ? lock_release+0xc8/0x290 [ 1679.005396] folio_alloc_noprof+0x21/0x80 [ 1679.005414] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 1679.005435] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1679.005454] ? perf_trace_lock+0xb5/0x5d0 [ 1679.005475] __filemap_get_folio_mpol+0x513/0x9a0 [ 1679.005492] ext4_da_write_begin+0x3e1/0xb40 [ 1679.005513] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1679.005530] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 1679.005550] generic_perform_write+0x391/0x810 [ 1679.005575] ? __pfx_generic_perform_write+0x10/0x10 [ 1679.005601] ext4_buffered_write_iter+0x11a/0x430 [ 1679.005616] ext4_file_write_iter+0x104b/0x19f0 [ 1679.005636] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1679.005652] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1679.005675] iter_file_splice_write+0xa3a/0x11f0 [ 1679.005701] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1679.005734] ? lock_is_held_type+0x9e/0x120 [ 1679.005753] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1679.005771] direct_splice_actor+0x192/0x7b0 [ 1679.005790] splice_direct_to_actor+0x347/0x9d0 [ 1679.005808] ? __pfx_direct_splice_actor+0x10/0x10 [ 1679.005829] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1679.005847] ? lock_acquire+0x15e/0x2f0 [ 1679.005867] do_splice_direct+0x179/0x250 [ 1679.005883] ? __pfx_do_splice_direct+0x10/0x10 [ 1679.005900] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1679.005919] ? security_file_permission+0x22/0x90 [ 1679.005943] do_sendfile+0xa8e/0xdc0 [ 1679.005966] ? __pfx_do_sendfile+0x10/0x10 [ 1679.005984] ? __fget_files+0x20d/0x3b0 [ 1679.006009] __x64_sys_sendfile64+0x1d3/0x210 [ 1679.006024] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1679.006039] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1679.006061] do_syscall_64+0xbf/0x430 [ 1679.006074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1679.006088] RIP: 0033:0x7f20266ecb19 [ 1679.006098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1679.006110] RSP: 002b:00007f2023c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1679.006123] RAX: ffffffffffffffda RBX: 00007f2026800020 RCX: 00007f20266ecb19 [ 1679.006131] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1679.006138] RBP: 00007f2023c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1679.006146] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1679.006153] R13: 00007ffcc2c01daf R14: 00007f2023c41300 R15: 0000000000022000 [ 1679.006171] [ 1679.352094] serio: Serial port ptm1 23:19:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x4) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000040)) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:19:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x5, 0x6, 0x7, 0x0, 0x8d, "9a039844933b8db23ba1353b1c2029a7151881", 0x3, 0x8}) r1 = syz_open_pts(r0, 0x40880) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000140)) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x6, 0x3ba, 0x1, 0x3f, 0x0, "1496bb172899b9192f000835843d4760554f8a", 0x7, 0x5}) r2 = openat$incfs(r0, &(0x7f0000000100)='.pending_reads\x00', 0x2080, 0x2) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) read(r0, 0x0, 0x0) 23:19:41 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 38) 23:19:41 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x0) 23:19:41 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:19:41 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 82) 23:19:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x6000000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:19:41 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 81) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1690.927793] serio: Serial port ptm0 [ 1690.937865] No source specified [ 1690.946276] No source specified [ 1690.950319] serio: Serial port ptm3 23:19:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_open_pts(r0, 0x210000) [ 1691.037875] FAULT_INJECTION: forcing a failure. [ 1691.037875] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1691.039691] CPU: 1 UID: 0 PID: 12218 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1691.039723] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1691.039738] Call Trace: [ 1691.039746] [ 1691.039756] dump_stack_lvl+0xfa/0x120 [ 1691.039801] should_fail_ex+0x4d7/0x5e0 [ 1691.039830] should_fail_alloc_page+0xe0/0x110 [ 1691.039859] prepare_alloc_pages+0x1eb/0x550 [ 1691.039906] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 1691.039951] ? __pfx_ext4_es_insert_delayed_extent+0x10/0x10 [ 1691.039980] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 1691.040021] ? find_held_lock+0x2b/0x80 [ 1691.040048] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1691.040078] ? lock_release+0xc8/0x290 [ 1691.040118] ? ext4_da_reserve_space+0xf9/0x430 [ 1691.040160] ? perf_trace_lock+0xb5/0x5d0 [ 1691.040196] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1691.040226] ? policy_nodemask+0xeb/0x4e0 [ 1691.040262] alloc_pages_mpol+0xed/0x340 [ 1691.040294] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1691.040323] ? find_held_lock+0x2b/0x80 [ 1691.040348] ? filemap_get_entry+0x1b1/0x3b0 [ 1691.040374] ? lock_release+0xc8/0x290 [ 1691.040412] folio_alloc_noprof+0x21/0x80 [ 1691.040448] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 1691.040488] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1691.040526] ? perf_trace_lock+0xb5/0x5d0 [ 1691.040568] __filemap_get_folio_mpol+0x513/0x9a0 [ 1691.040601] ext4_da_write_begin+0x3e1/0xb40 [ 1691.040643] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1691.040675] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 1691.040715] generic_perform_write+0x391/0x810 [ 1691.040762] ? __pfx_generic_perform_write+0x10/0x10 [ 1691.040817] ext4_buffered_write_iter+0x11a/0x430 [ 1691.040847] ext4_file_write_iter+0x104b/0x19f0 [ 1691.040886] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1691.040917] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1691.040960] iter_file_splice_write+0xa3a/0x11f0 [ 1691.041013] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1691.041075] ? lock_is_held_type+0x9e/0x120 [ 1691.041112] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1691.041149] direct_splice_actor+0x192/0x7b0 [ 1691.041187] splice_direct_to_actor+0x347/0x9d0 [ 1691.041222] ? __pfx_direct_splice_actor+0x10/0x10 [ 1691.041262] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1691.041299] ? lock_acquire+0x15e/0x2f0 [ 1691.041338] do_splice_direct+0x179/0x250 [ 1691.041370] ? __pfx_do_splice_direct+0x10/0x10 [ 1691.041404] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1691.041441] ? security_file_permission+0x22/0x90 [ 1691.041476] do_sendfile+0xa8e/0xdc0 [ 1691.041521] ? __pfx_do_sendfile+0x10/0x10 [ 1691.041558] ? __fget_files+0x20d/0x3b0 [ 1691.041606] __x64_sys_sendfile64+0x1d3/0x210 [ 1691.041635] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1691.041664] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1691.041708] do_syscall_64+0xbf/0x430 [ 1691.041734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1691.041759] RIP: 0033:0x7f20266ecb19 [ 1691.041777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1691.041801] RSP: 002b:00007f2023c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1691.041825] RAX: ffffffffffffffda RBX: 00007f2026800020 RCX: 00007f20266ecb19 [ 1691.041841] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1691.041856] RBP: 00007f2023c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1691.041870] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1691.041885] R13: 00007ffcc2c01daf R14: 00007f2023c41300 R15: 0000000000022000 [ 1691.041919] [ 1691.065152] FAULT_INJECTION: forcing a failure. [ 1691.065152] name failslab, interval 1, probability 0, space 0, times 0 [ 1691.098250] CPU: 0 UID: 0 PID: 12220 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1691.098287] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1691.098303] Call Trace: [ 1691.098313] [ 1691.098323] dump_stack_lvl+0xfa/0x120 [ 1691.098371] should_fail_ex+0x4d7/0x5e0 [ 1691.098401] ? jbd2__journal_start+0x193/0x6b0 [ 1691.098442] should_failslab+0xc2/0x120 [ 1691.098470] kmem_cache_alloc_noprof+0x80/0x690 [ 1691.098508] ? lock_is_held_type+0x9e/0x120 [ 1691.098554] ? jbd2__journal_start+0x193/0x6b0 [ 1691.098594] jbd2__journal_start+0x193/0x6b0 [ 1691.098641] __ext4_journal_start_sb+0x325/0x5d0 [ 1691.098692] ? ext4_dio_write_end_io+0x2ba/0x710 [ 1691.098726] ? lock_is_held_type+0x9e/0x120 [ 1691.098787] ext4_dio_write_end_io+0x2ba/0x710 [ 1691.098816] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1691.098854] ? __pfx_ext4_dio_write_end_io+0x10/0x10 [ 1691.098885] iomap_dio_complete+0x14d/0x9e0 [ 1691.098920] iomap_dio_rw+0x73/0xa0 [ 1691.098957] ext4_file_write_iter+0xe0e/0x19f0 [ 1691.099001] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1691.099030] ? trace_kmalloc+0x1f/0xb0 [ 1691.099052] ? __kmalloc_noprof+0x274/0x680 [ 1691.099085] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1691.099132] iter_file_splice_write+0xa3a/0x11f0 [ 1691.099191] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1691.099262] ? lock_is_held_type+0x9e/0x120 [ 1691.099301] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1691.099341] direct_splice_actor+0x192/0x7b0 [ 1691.099382] splice_direct_to_actor+0x347/0x9d0 [ 1691.099421] ? __pfx_direct_splice_actor+0x10/0x10 [ 1691.099466] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1691.099506] ? lock_acquire+0x15e/0x2f0 [ 1691.099550] do_splice_direct+0x179/0x250 [ 1691.099586] ? __pfx_do_splice_direct+0x10/0x10 [ 1691.099623] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1691.099663] ? security_file_permission+0x22/0x90 [ 1691.099702] do_sendfile+0xa8e/0xdc0 [ 1691.099751] ? __pfx_do_sendfile+0x10/0x10 [ 1691.099791] ? __fget_files+0x20d/0x3b0 [ 1691.099845] __x64_sys_sendfile64+0x1d3/0x210 [ 1691.099877] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1691.099909] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1691.099957] do_syscall_64+0xbf/0x430 [ 1691.099986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1691.100012] RIP: 0033:0x7f7a32465b19 [ 1691.100033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1691.100059] RSP: 002b:00007f7a2f9ba188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1691.100085] RAX: ffffffffffffffda RBX: 00007f7a32579020 RCX: 00007f7a32465b19 [ 1691.100102] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1691.100118] RBP: 00007f7a2f9ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1691.100134] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1691.100150] R13: 00007ffe0bebc99f R14: 00007f7a2f9ba300 R15: 0000000000022000 [ 1691.100188] 23:19:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1a02002, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:19:41 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) 23:19:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x7000000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1691.270377] serio: Serial port ptm1 23:19:41 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 83) [ 1691.337871] serio: Serial port ptm2 [ 1691.407362] serio: Serial port ptm2 [ 1691.460581] FAULT_INJECTION: forcing a failure. [ 1691.460581] name failslab, interval 1, probability 0, space 0, times 0 [ 1691.462077] CPU: 1 UID: 0 PID: 12235 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1691.462103] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1691.462115] Call Trace: [ 1691.462122] [ 1691.462129] dump_stack_lvl+0xfa/0x120 [ 1691.462167] should_fail_ex+0x4d7/0x5e0 [ 1691.462190] should_failslab+0xc2/0x120 [ 1691.462211] __kmalloc_noprof+0xcd/0x680 [ 1691.462235] ? copy_splice_read+0x15b/0xc00 [ 1691.462263] copy_splice_read+0x15b/0xc00 [ 1691.462285] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1691.462317] ? __pfx_copy_splice_read+0x10/0x10 [ 1691.462341] ? __pfx_perf_trace_lock+0x10/0x10 [ 1691.462376] ? find_held_lock+0x2b/0x80 [ 1691.462395] ? splice_direct_to_actor+0x347/0x9d0 [ 1691.462421] ? __pfx_copy_splice_read+0x10/0x10 [ 1691.462446] do_splice_read+0x1f8/0x2a0 [ 1691.462472] splice_direct_to_actor+0x2a8/0x9d0 [ 1691.462498] ? __pfx_direct_splice_actor+0x10/0x10 [ 1691.462528] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1691.462555] ? lock_acquire+0x15e/0x2f0 [ 1691.462584] do_splice_direct+0x179/0x250 [ 1691.462608] ? __pfx_do_splice_direct+0x10/0x10 [ 1691.462633] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1691.462660] ? security_file_permission+0x22/0x90 [ 1691.462699] do_sendfile+0xa8e/0xdc0 [ 1691.462735] ? __pfx_do_sendfile+0x10/0x10 [ 1691.462761] ? __fget_files+0x20d/0x3b0 [ 1691.462798] __x64_sys_sendfile64+0x1d3/0x210 [ 1691.462820] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1691.462841] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1691.462874] do_syscall_64+0xbf/0x430 [ 1691.462894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1691.462913] RIP: 0033:0x7f7a32465b19 [ 1691.462927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1691.462951] RSP: 002b:00007f7a2f9db188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1691.462969] RAX: ffffffffffffffda RBX: 00007f7a32578f60 RCX: 00007f7a32465b19 [ 1691.462981] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1691.462991] RBP: 00007f7a2f9db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1691.463002] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1691.463014] R13: 00007ffe0bebc99f R14: 00007f7a2f9db300 R15: 0000000000022000 [ 1691.463040] [ 1691.749790] serio: Serial port ptm2 [ 1692.089762] serio: Serial port ptm0 23:19:53 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 82) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:19:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x12d100, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:19:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x10000000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:19:53 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 39) 23:19:53 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 84) 23:19:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) 23:19:53 executing program 7: sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f8, 0x504, 0x1070bd27, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x81) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r3, 0x4b4b, 0x0) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000040)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r4, 0x4b4b, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r5, 0x4b4b, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000000c0)) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x800, 0x7fe, 0x2, 0xa, 0xb, "394b400ac45e0ece6f35cba633763bd6884857"}) read(r2, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r6, 0x4b4b, 0x0) ioctl$VT_DISALLOCATE(r6, 0x5608) 23:19:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x4b4b, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x81000, &(0x7f0000000240)=ANY=[@ANYRES16=r0]) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x2, 0x0, 0x8, 0x10, 0xc0, &(0x7f0000000280)="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"}) ioctl$KIOCSOUND(r1, 0x4b2f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r2, 0x4b4b, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000080)={0x5, 0x3, 0x46, 0x7, 0x40}) [ 1703.153104] serio: Serial port ptm0 [ 1703.209921] serio: Serial port ptm1 [ 1703.225776] FAULT_INJECTION: forcing a failure. [ 1703.225776] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1703.227526] CPU: 1 UID: 0 PID: 12244 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1703.227559] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1703.227574] Call Trace: [ 1703.227582] [ 1703.227592] dump_stack_lvl+0xfa/0x120 [ 1703.227638] should_fail_ex+0x4d7/0x5e0 [ 1703.227667] should_fail_alloc_page+0xe0/0x110 [ 1703.227697] prepare_alloc_pages+0x1eb/0x550 [ 1703.227736] ? __pfx_perf_trace_lock+0x10/0x10 [ 1703.227781] alloc_pages_bulk_noprof+0x148/0xc30 [ 1703.227815] ? find_held_lock+0x2b/0x80 [ 1703.227846] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1703.227881] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1703.227918] ? trace_kmalloc+0x1f/0xb0 [ 1703.227946] ? __kmalloc_noprof+0x274/0x680 [ 1703.227977] ? copy_splice_read+0x15b/0xc00 [ 1703.228014] copy_splice_read+0x192/0xc00 [ 1703.228055] ? __pfx_copy_splice_read+0x10/0x10 [ 1703.228086] ? __pfx_perf_trace_lock+0x10/0x10 [ 1703.228131] ? find_held_lock+0x2b/0x80 [ 1703.228157] ? splice_direct_to_actor+0x347/0x9d0 [ 1703.228192] ? __pfx_copy_splice_read+0x10/0x10 [ 1703.228226] do_splice_read+0x1f8/0x2a0 [ 1703.228261] splice_direct_to_actor+0x2a8/0x9d0 [ 1703.228296] ? __pfx_direct_splice_actor+0x10/0x10 [ 1703.228336] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1703.228373] ? lock_acquire+0x15e/0x2f0 [ 1703.228412] do_splice_direct+0x179/0x250 [ 1703.228445] ? __pfx_do_splice_direct+0x10/0x10 [ 1703.228479] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1703.228516] ? security_file_permission+0x22/0x90 [ 1703.228551] do_sendfile+0xa8e/0xdc0 [ 1703.228595] ? __pfx_do_sendfile+0x10/0x10 [ 1703.228632] ? __fget_files+0x20d/0x3b0 [ 1703.228680] __x64_sys_sendfile64+0x1d3/0x210 [ 1703.228708] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1703.228737] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1703.228781] do_syscall_64+0xbf/0x430 [ 1703.228807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.228832] RIP: 0033:0x7f7a32465b19 [ 1703.228851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1703.228875] RSP: 002b:00007f7a2f9db188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1703.228898] RAX: ffffffffffffffda RBX: 00007f7a32578f60 RCX: 00007f7a32465b19 [ 1703.228915] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1703.228930] RBP: 00007f7a2f9db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1703.228945] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1703.228960] R13: 00007ffe0bebc99f R14: 00007f7a2f9db300 R15: 0000000000022000 [ 1703.228993] 23:19:53 executing program 0: personality(0x2000000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="d3f857de9173ff2f22ba272d69342a9b857d518e9acabc6f41c34a82fab3302ed805ebb34f25590dc67a187d5fd605be9c5998a1fd00ab757ad56ff665cf125366545fe0fe006404b91c668d5e27482989a0371ca65d7bd6a6b0ba230f697ce5ded80aef5e3a4effdfe675a46a8fd13da797e951d5af5bcced3e4cb8185c42a39daaea41db922a9d616ef2185a88aa74b7871c3c3243b4d072fde4e30655431393b9588d201b4872899a91992a1f81f62d6d142ede770f54a54396148caec23227"]) 23:19:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x1, 0x5, 0x8001, 0x7, 0xd, "14c28879f9dfc4b6"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:19:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x20000000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1703.436226] vfat: Unknown parameter 'ÓøWÞ‘sÿ/"º'-i4*›…}QŽšÊ¼oAÃJ‚ú³0.Øë³O%YÆz}_Ö¾œY˜¡ý' 23:19:53 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 85) [ 1703.515140] serio: Serial port ptm2 23:19:53 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x8, 0xffffffff, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824", 0x3}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:19:54 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xa9}}, './file0\x00'}) mount_setattr(r0, &(0x7f0000000080)='./file0\x00', 0x1000, &(0x7f0000000100)={0x0, 0x3, 0x0, {r1}}, 0x20) 23:19:54 executing program 4: r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) pwritev2(r0, &(0x7f0000000a40)=[{&(0x7f0000000180)="19627222845e1018e15a1ff934bb32c95814ca4854b4f704ffd337ffffed22cff1c6f60c41108cb408aa6d6804d14ffccc699dfb170cc7649a7ad57d88fbf008e0f2b4b92a08e16214b95e6394fc6d49287f778ed4c655f4156ef71980ddf99ad85a50388b5181d30ee9ee01d3797de6904afed4784146b3d29e496179dde041fd1e4a9e8f736e0a9502cc94b5dc80e099723527995823498cb4ff837253f99ef0c11ed7dff1169bd4cda73b7f7d7bc005d2e90afa078ab564b3ff47d2fa87fb4891fa7acd582b28bc5f639720dfaf36d805d85d27cdac3243f4ea27898db7", 0xdf}, {&(0x7f0000000700)="2249621218d9efd3786ab3c3ec6e44767f2c50b7cd8918c30ca3cc682b7b140701cba618d4b5c443affe3a35257d460f5be56ce6894c089c6ce962a63dc773362e152171cc98739286c40ffc725459375cd6942cd52aeffd27bf5017491255ea84b84b8c190162248c7a763792983a0aa1db1837c64cd973fe7d7b1d92da6e544383c78f8d7eeba0af413a9d59339cc5272ca96c53f57f3b23781a1992f9200c", 0xa0}, {&(0x7f00000007c0)="b873c4fedde763d69837ac356158b444eef2867ec37306628a250d3cfbef8a7d8d81aa2850109b566b491ffd08c3fdebea03cbb063210afa2d337930baad9ab067d29ac585897bd56ed521ec7fc4471e9d8514381d94a1906b2ae4d215e9bc82bd1f0075c665b2a3da45350d506c7388d2b5ffcad4be8bc85d18ad7064a1c92845d34adeb3f49ab4ac97b4c7ee9cd58d860a54bde9ff", 0x96}, {&(0x7f0000000280)="400ed214edadba2b5eda3f7dc06d10e51e51df", 0x13}, {&(0x7f0000000880)="f410bc42ad33da2e2af68b21803f756c5b77859e54ebc7c32c8c775a0f4f814a84370280d70865c481a217acfaad", 0x2e}, {&(0x7f00000008c0)="294fa7a7f96c3338ade7eaef389c9738be948d51229fae2e5d6c4afa92d2693d35215ba0eda427496a155f63bd0740595d1c0e3fd45a705fc6", 0x39}, {&(0x7f0000000900)="ea1b83bc2550073fdd260802cfd34d8db389c350d28296191f6a91794f0621794d404e4e6cbd11b49e65f4837814c3c42f8e26dbf61aa4390fe60359b5afd340371d53ba8ca71b1704b24a7d114cc457083d8215a506acb5744ad8069c7935f72b274c659e6e89cc710f3d09431d1e80596f9cd0b2fb37fddefbc7953ba7e046c2686a2db8afc6b321801fafb84a1813ab72157a675ea2ce29a54afac785a9", 0x9f}, {&(0x7f00000009c0)="f2410c", 0x3}, {&(0x7f0000000a00)="269d8ef11665cf97ff6cc52429019d62608f942b58", 0x15}], 0x9, 0x9, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r1, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x80000004, 0x0, 0x0, "40e22100000000000ff800082400"}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r2, 0x4b4b, 0x0) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r4, 0x4b4b, 0x0) ioctl$KDENABIO(r1, 0x4b36) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r5, 0x4b4b, 0x0) ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f0000000140)={0x2, 0x0, 0x5, 0x19, 0x1b3, &(0x7f0000000300)="ee4a32bbb5610c54615cd2589ac3a139b01507bc6ad875d76e7e69c8d8dcd502fbd26abf0d40b73da37a9bb47a7729671b9d8475f37dbf507e27602274ffb57e412dfc9f33030bfa85648c2da6d576ffef59b724adb1239c5ae8192ca14952f456e630ada2ea675dcb3196a7592d4d833cb140d5ba1d36733e32518cf48ae4972422ce82e67a681b72a6bd8d6fe2245a084b9b3ee230d7cf09eb6877908367f0468fac48308da36b2cb9d13a4e35d921141b866fb52b49a488660a1c1f3073c9a435e265d3cdb14dd2f10c625528f69d5932caf83a13600998eb51579107e33105aea7c704bd02a190bfa3a2a2dc0504bae1337af9794f41b50f3d01584d38c6577e9a55aa06c6133eba6b3fb3882b89fbdfd1f769a710e0bf2e03f871dde95e6dad69194ae05904c9c9bb9d0d8150d79ed1e0f96f23d41c2a9d0395a97fc79856e286e68d903d6fc760954dd67dceb6ced0c8eb2bee4fb43f483c6790ac05408daeb23d3a3a796b65f5b6e37334afda37ac69db61ca0b259dcfefd0a0763fd5df48b1e00ecb0467e85862741524b68568ed5c190691839d7ce593152d5d7451b4f5d8d69129f95cf87aa65c6d058bc0d31f1b544c9839a079abaf9b01589ca7b82762333082ba40f8d537b10b23eea79aef9b1a40c2a7a51b8fa8be4938aa4174bea201b2768cf41f73341bd30536c23aca4735b6b2ee627f3abe042467fc897240e17ce98626c055f09e3b0395a0ea3523c29f73dff11b2c58710000ece71756244126a1e334f11f89716dc8fc34da717e15be37da4c8e1f9d90a146068e3840a46153a5228459685c26ca3b6719bc337f9e87954e3d9aeab574feb33a60bc01018b7e4d3742b11012a0d72b31e6b656946b1d16b011e7e9cfbd8ec04936aaada16c761c1908afa039836948c9de5a7264bea45ecd1c838f487bd774cba3f8b2658d901d118c090208123aeba45d63aa6b1a8688b5c6534512a747a5bff9e2a703ccbe3fb4f604d20f5209c94edcd859f8fc1d5166f6f9724a622b3cf0bb12ca69718294a9dd1a4bd91d18a16e93b28c10fd8531894595df87ebc49e3bf57c51e71378c3591d1a1b50740d3afe8911a4f8af96a7322aae265f0cbd6b775e451f1788956d252cc40c38bac728f68a404a201c7b3a01edcddc71e10274ab2d39891946197b3a7cdd4dc23f327e4b0b481a741f5accf4643a69a55e7f18742e703acdd5498d5c617c5455f42887dfc35c9cd2f9f5255e1801df140b11b4148f5463bfaeb5fe70b4dbb0a56ccb101020d57c8d9bdb9af036324ca4cf2de90f61353df94b4b359b3de4e424965254428271c87b51b87e6dc6cc513e70a2e6f0e5ea125da955c101202b49fbf51b7c549a318e10df2e894bd994d4c1e0f2800824bc210ad80ae955cede52d5be7850f275240026827814184759ffdeee4b7515c047"}) [ 1703.664225] FAULT_INJECTION: forcing a failure. [ 1703.664225] name failslab, interval 1, probability 0, space 0, times 0 [ 1703.665958] CPU: 0 UID: 0 PID: 12279 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1703.665992] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1703.666007] Call Trace: [ 1703.666015] [ 1703.666025] dump_stack_lvl+0xfa/0x120 [ 1703.666071] should_fail_ex+0x4d7/0x5e0 [ 1703.666100] should_failslab+0xc2/0x120 [ 1703.666127] __kmalloc_noprof+0xcd/0x680 [ 1703.666159] ? iter_file_splice_write+0x1cd/0x11f0 [ 1703.666202] iter_file_splice_write+0x1cd/0x11f0 [ 1703.666241] ? kfree+0x284/0x550 [ 1703.666267] ? read_iter_zero+0x120/0x310 [ 1703.666300] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1703.666336] ? __lock_acquire+0xc65/0x1b70 [ 1703.666396] ? lock_is_held_type+0x9e/0x120 [ 1703.666433] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1703.666470] direct_splice_actor+0x192/0x7b0 [ 1703.666508] splice_direct_to_actor+0x347/0x9d0 [ 1703.666544] ? __pfx_direct_splice_actor+0x10/0x10 [ 1703.666585] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1703.666622] ? lock_acquire+0x15e/0x2f0 [ 1703.666661] do_splice_direct+0x179/0x250 [ 1703.666694] ? __pfx_do_splice_direct+0x10/0x10 [ 1703.666728] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1703.666765] ? security_file_permission+0x22/0x90 [ 1703.666801] do_sendfile+0xa8e/0xdc0 [ 1703.666846] ? __pfx_do_sendfile+0x10/0x10 [ 1703.666895] ? __fget_files+0x20d/0x3b0 [ 1703.666949] __x64_sys_sendfile64+0x1d3/0x210 [ 1703.666978] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1703.667007] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1703.667052] do_syscall_64+0xbf/0x430 [ 1703.667078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.667103] RIP: 0033:0x7f7a32465b19 [ 1703.667122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1703.667146] RSP: 002b:00007f7a2f9ba188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1703.667170] RAX: ffffffffffffffda RBX: 00007f7a32579020 RCX: 00007f7a32465b19 [ 1703.667187] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1703.667202] RBP: 00007f7a2f9ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1703.667216] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1703.667231] R13: 00007ffe0bebc99f R14: 00007f7a2f9ba300 R15: 0000000000022000 [ 1703.667266] [ 1703.737265] No source specified 23:19:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x238cedbc) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1703.753033] No source specified [ 1703.825589] serio: Serial port ptm2 23:19:54 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 83) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:19:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x6, 0x2, &(0x7f0000000240)=[{&(0x7f0000000180)="b545424c4daf1c9f92e0193b189379ec6bcf065a877dd9b533893216686c8140080b9e6760bd207fd17f6990", 0x2c, 0x9}, {&(0x7f00000001c0)="5059388c20c2fb83f4892d94c1ce76322d1b1bd9cf75014641ffba0d1fe5521209eef90be26d5e71ff9e584c276298f0b0c491ba13c5d483b8eccdc613136bbd043385c8a3980ba4f8ca7517e32fe94d9cb79a7420403a59039df0315c04c287a5ff17", 0x63, 0x9}], 0x200000, &(0x7f0000000280)={[{'rodir'}, {'.!'}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x10001, 0x6}) 23:19:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824", 0x0, 0x4}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) [ 1703.977475] serio: Serial port ptm1 [ 1703.987842] No source specified [ 1704.016441] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1704.023509] No source specified 23:20:05 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 40) 23:20:05 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 86) 23:20:05 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 84) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:20:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40202, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824", 0x0, 0xfffffffd}) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) 23:20:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x3f000000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:20:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0xffffffff, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824", 0x0, 0x401}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:20:05 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@nfs_nostale_ro}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001c40), 0x500, 0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0xc0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) renameat(r0, &(0x7f00000000c0)='./file0/file0\x00', r2, &(0x7f0000000140)='./file0\x00') lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.impure\x00') ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) 23:20:05 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x4b4b, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0xfffc, 0x7, 0x5, 0x101, 0xa, "72cf69dc08283a9d"}) pread64(r0, &(0x7f00000000c0)=""/128, 0x80, 0x84f) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r1, 0x5423, &(0x7f0000000000)={0x2, 0x0, 0xb6, 0x2, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) r2 = dup2(r0, r1) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000140)) read(r1, 0x0, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000180)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) [ 1715.185820] serio: Serial port ptm0 [ 1715.210012] No source specified [ 1715.234612] serio: Serial port ptm1 [ 1715.253096] No source specified [ 1715.285184] FAULT_INJECTION: forcing a failure. [ 1715.285184] name failslab, interval 1, probability 0, space 0, times 0 [ 1715.286890] CPU: 1 UID: 0 PID: 12325 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1715.286923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1715.286944] Call Trace: [ 1715.286953] [ 1715.286963] dump_stack_lvl+0xfa/0x120 [ 1715.287010] should_fail_ex+0x4d7/0x5e0 [ 1715.287040] ? jbd2__journal_start+0x193/0x6b0 [ 1715.287089] should_failslab+0xc2/0x120 [ 1715.287116] kmem_cache_alloc_noprof+0x80/0x690 [ 1715.287151] ? lock_is_held_type+0x9e/0x120 [ 1715.287194] ? jbd2__journal_start+0x193/0x6b0 [ 1715.287230] jbd2__journal_start+0x193/0x6b0 [ 1715.287273] __ext4_journal_start_sb+0x325/0x5d0 [ 1715.287303] ? ext4_iomap_begin+0x5b0/0xe80 [ 1715.287330] ? ext4_meta_trans_blocks+0x256/0x310 [ 1715.287362] ext4_iomap_begin+0x5b0/0xe80 [ 1715.287405] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1715.287435] ? iomap_iter_advance+0x177/0x1f0 [ 1715.287475] ? iomap_dio_bio_iter+0x8ac/0x1310 [ 1715.287503] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1715.287530] iomap_iter+0x55a/0x1020 [ 1715.287573] __iomap_dio_rw+0x6dd/0x1c90 [ 1715.287607] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1715.287654] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1715.287687] ? kasan_quarantine_put+0x84/0x1e0 [ 1715.287733] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1715.287771] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1715.287794] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1715.287836] iomap_dio_rw+0x40/0xa0 [ 1715.287862] ext4_file_write_iter+0xe0e/0x19f0 [ 1715.287903] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1715.287929] ? trace_kmalloc+0x1f/0xb0 [ 1715.287949] ? __kmalloc_noprof+0x274/0x680 [ 1715.287979] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1715.288023] iter_file_splice_write+0xa3a/0x11f0 [ 1715.288075] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1715.288139] ? lock_is_held_type+0x9e/0x120 [ 1715.288175] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1715.288211] direct_splice_actor+0x192/0x7b0 [ 1715.288249] splice_direct_to_actor+0x347/0x9d0 [ 1715.288285] ? __pfx_direct_splice_actor+0x10/0x10 [ 1715.288325] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1715.288362] ? lock_acquire+0x15e/0x2f0 [ 1715.288402] do_splice_direct+0x179/0x250 [ 1715.288435] ? __pfx_do_splice_direct+0x10/0x10 [ 1715.288470] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1715.288507] ? security_file_permission+0x22/0x90 [ 1715.288543] do_sendfile+0xa8e/0xdc0 [ 1715.288593] ? __pfx_do_sendfile+0x10/0x10 [ 1715.288629] ? __fget_files+0x20d/0x3b0 [ 1715.288678] __x64_sys_sendfile64+0x1d3/0x210 [ 1715.288707] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1715.288736] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1715.288781] do_syscall_64+0xbf/0x430 [ 1715.288807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.288832] RIP: 0033:0x7fb59c6b8b19 [ 1715.288851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1715.288875] RSP: 002b:00007fb599c2e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1715.288899] RAX: ffffffffffffffda RBX: 00007fb59c7cbf60 RCX: 00007fb59c6b8b19 [ 1715.288916] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1715.288930] RBP: 00007fb599c2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1715.288945] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1715.288960] R13: 00007fff3932da4f R14: 00007fb599c2e300 R15: 0000000000022000 [ 1715.288995] [ 1715.308649] serio: Serial port ptm1 23:20:05 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, 0x44, &(0x7f0000000080)=ANY=[@ANYRES16=0x0]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@broadcast, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000000240)=0xe8) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000300)=""/11, 0xb}, {&(0x7f0000000340)=""/51, 0x33}, {&(0x7f0000000380)=""/58, 0x3a}, {&(0x7f00000003c0)=""/11, 0xb}, {&(0x7f0000000400)=""/64, 0x40}, {&(0x7f0000000440)=""/235, 0xeb}], 0x6, &(0x7f00000005c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0xa0}}], 0x1, 0x10000, &(0x7f00000006c0)) setxattr$system_posix_acl(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000700)={{}, {0x1, 0x4}, [{0x2, 0x2, 0xee00}, {0x2, 0x1, 0xee01}, {0x2, 0x4, r1}, {0x2, 0x3, 0xee00}, {0x2, 0x2, 0xee01}], {}, [{}, {0x8, 0x0, r2}], {0x10, 0x5}, {0x20, 0x3}}, 0x5c, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) renameat(r3, &(0x7f0000000780)='./file1\x00', r0, &(0x7f00000007c0)='./file1\x00') [ 1715.414958] FAULT_INJECTION: forcing a failure. [ 1715.414958] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1715.416767] CPU: 1 UID: 0 PID: 12335 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1715.416798] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1715.416812] Call Trace: [ 1715.416821] [ 1715.416830] dump_stack_lvl+0xfa/0x120 [ 1715.416874] should_fail_ex+0x4d7/0x5e0 [ 1715.416902] should_fail_alloc_page+0xe0/0x110 [ 1715.416936] prepare_alloc_pages+0x1eb/0x550 [ 1715.416980] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 1715.417018] ? __pfx_ext4_es_insert_delayed_extent+0x10/0x10 [ 1715.417050] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 1715.417089] ? find_held_lock+0x2b/0x80 [ 1715.417115] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1715.417146] ? __pfx_css_rstat_updated+0x10/0x10 [ 1715.417186] ? perf_trace_lock+0xb5/0x5d0 [ 1715.417220] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1715.417248] ? policy_nodemask+0xeb/0x4e0 [ 1715.417282] alloc_pages_mpol+0xed/0x340 [ 1715.417312] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1715.417339] ? find_held_lock+0x2b/0x80 [ 1715.417363] ? filemap_get_entry+0x1b1/0x3b0 [ 1715.417387] ? lock_release+0xc8/0x290 [ 1715.417423] folio_alloc_noprof+0x21/0x80 [ 1715.417456] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 1715.417494] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1715.417529] ? perf_trace_lock+0xb5/0x5d0 [ 1715.417567] __filemap_get_folio_mpol+0x513/0x9a0 [ 1715.417599] ext4_da_write_begin+0x3e1/0xb40 [ 1715.417639] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1715.417670] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 1715.417708] generic_perform_write+0x391/0x810 [ 1715.417753] ? __pfx_generic_perform_write+0x10/0x10 [ 1715.417791] ? generic_update_time+0xcb/0xf0 [ 1715.417816] ? mnt_put_write_access_file+0x45/0xe0 [ 1715.417855] ext4_buffered_write_iter+0x11a/0x430 [ 1715.417884] ext4_file_write_iter+0x104b/0x19f0 [ 1715.417922] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1715.417952] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1715.417992] iter_file_splice_write+0xa3a/0x11f0 [ 1715.418042] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1715.418102] ? lock_is_held_type+0x9e/0x120 [ 1715.418136] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1715.418170] direct_splice_actor+0x192/0x7b0 [ 1715.418206] splice_direct_to_actor+0x347/0x9d0 [ 1715.418239] ? __pfx_direct_splice_actor+0x10/0x10 [ 1715.418277] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1715.418311] ? lock_acquire+0x15e/0x2f0 [ 1715.418348] do_splice_direct+0x179/0x250 [ 1715.418378] ? __pfx_do_splice_direct+0x10/0x10 [ 1715.418410] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1715.418444] ? security_file_permission+0x22/0x90 [ 1715.418479] do_sendfile+0xa8e/0xdc0 [ 1715.418520] ? __pfx_do_sendfile+0x10/0x10 [ 1715.418554] ? __fget_files+0x20d/0x3b0 [ 1715.418599] __x64_sys_sendfile64+0x1d3/0x210 [ 1715.418626] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1715.418663] do_syscall_64+0xbf/0x430 [ 1715.418688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.418711] RIP: 0033:0x7f20266ecb19 [ 1715.418728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1715.418751] RSP: 002b:00007f2023c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1715.418774] RAX: ffffffffffffffda RBX: 00007f2026800020 RCX: 00007f20266ecb19 [ 1715.418790] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1715.418803] RBP: 00007f2023c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1715.418817] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1715.418830] R13: 00007ffcc2c01daf R14: 00007f2023c41300 R15: 0000000000022000 [ 1715.418864] 23:20:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$KDADDIO(r0, 0x4b34, 0x80000001) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:20:06 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_setup(0x1c000000, &(0x7f0000000040)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) r3 = eventfd(0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_submit(r1, 0x3, &(0x7f0000000300)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x2, r0, &(0x7f0000000340)="945b962d6c96552761062ec48d865c087b4b95fdfb8fa85bef9b9ead5a3afc086e677df7bee7b78aa17aea73832425d34b5e7b5b0349f649f9f132380d7d67e4848d3d7a69eb88a8983afe88cb535c72b8ce9e4695668ed8f91d2660668610d1caaed2639efe0c3b4a0dfbddc60d9d8ecaa8b42defa1460f54572d9d89c4ea6182293a014db195a2485e9fa042e805a3bfaacbff7eab5610489925a41ac53c8aa839bc8b92d0de6c624308ef5e7a4ca5ddaabb873ccc16908b1d515624bd4992af2ed9bd6512e5a11e28fa6aaf7bd18e684c148fdaa29084eb1a55d672ba8a34e7379bd43f4185cc6746c7d81f4a", 0xee, 0xa8e, 0x0, 0x3, r2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x278d, r0, &(0x7f0000000180)="2a91fe51c250437e3b3f2f85cc44660c3f84c4bc9b6d84d2868b838db937d754ac4030f7b8df42195d388dd2", 0x2c, 0xcab, 0x0, 0x0, r3}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x2, r4, &(0x7f0000000200)="05b540bc838fea1be3a42970fa5c0cade59aa1443f99ebebc2ff68cd79bf0cdfed860ab26e419747508d2bd2d24395ca1784c24f08f148cd9455c2cc16045c4ffb6c1380eae30564e8da080038671d67", 0x50, 0x0, 0x0, 0x3}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r5, 0x4b4b, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f00000000c0)) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x5) 23:20:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x84e00000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1715.689539] No source specified [ 1715.717987] No source specified 23:20:06 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 87) [ 1715.735221] serio: Serial port ptm1 [ 1715.753443] serio: Serial port ptm2 [ 1715.850603] serio: Serial port ptm2 [ 1715.861432] serio: Serial port ptm1 23:20:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0xdb) read(r0, &(0x7f0000000000)=""/106, 0x6a) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x301000, 0x0) read(r0, 0x0, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0xfffffffffffffff7) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x4) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f00000000c0)={0x2, 0x9, 0xfffffff7, 0x3731, 0x1, "4c25059883940f80eab985b578ff2c592bdafd", 0x8001, 0x323}) read(r0, 0x0, 0xffffff4d) 23:20:17 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 88) 23:20:17 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 41) 23:20:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@shortname_lower}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}) 23:20:17 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 85) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:20:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x97ffffff) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:20:17 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x9) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000000)={0x2, 0x400, 0x9, 0x6, 0x0, "f2010100006b6a770ff89b3819930000000024", 0xfffffffc}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:20:17 executing program 4: fcntl$getown(0xffffffffffffffff, 0x9) r0 = getpid() pidfd_open(r0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000280)=0xc) timer_create(0x2, &(0x7f0000000040)={0x0, 0x40, 0x2, @tid=r1}, &(0x7f0000000000)=0x0) timer_delete(r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r3, 0x5423, &(0x7f0000000080)={0x1, 0x1, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) [ 1726.807853] serio: Serial port ptm0 [ 1726.860691] serio: Serial port ptm1 [ 1726.868847] No source specified [ 1726.871687] No source specified [ 1726.872680] serio: Serial port ptm2 [ 1726.877374] FAULT_INJECTION: forcing a failure. [ 1726.877374] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.879059] CPU: 1 UID: 0 PID: 12373 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1726.879090] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1726.879104] Call Trace: [ 1726.879112] [ 1726.879122] dump_stack_lvl+0xfa/0x120 [ 1726.879166] should_fail_ex+0x4d7/0x5e0 [ 1726.879194] ? jbd2__journal_start+0x193/0x6b0 [ 1726.879228] should_failslab+0xc2/0x120 [ 1726.879269] kmem_cache_alloc_noprof+0x80/0x690 [ 1726.879301] ? lock_is_held_type+0x9e/0x120 [ 1726.879341] ? jbd2__journal_start+0x193/0x6b0 [ 1726.879375] jbd2__journal_start+0x193/0x6b0 [ 1726.879414] __ext4_journal_start_sb+0x325/0x5d0 [ 1726.879442] ? ext4_iomap_begin+0x5b0/0xe80 [ 1726.879466] ? ext4_meta_trans_blocks+0x256/0x310 [ 1726.879497] ext4_iomap_begin+0x5b0/0xe80 [ 1726.879538] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1726.879566] ? iomap_iter_advance+0x177/0x1f0 [ 1726.879603] ? iomap_dio_bio_iter+0x8ac/0x1310 [ 1726.879630] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1726.879655] iomap_iter+0x55a/0x1020 [ 1726.879695] __iomap_dio_rw+0x6dd/0x1c90 [ 1726.879728] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1726.879771] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1726.879803] ? kasan_quarantine_put+0x84/0x1e0 [ 1726.879847] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1726.879882] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1726.879904] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1726.879950] iomap_dio_rw+0x40/0xa0 [ 1726.879976] ext4_file_write_iter+0xe0e/0x19f0 [ 1726.880014] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1726.880038] ? trace_kmalloc+0x1f/0xb0 [ 1726.880057] ? __kmalloc_noprof+0x274/0x680 [ 1726.880085] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1726.880126] iter_file_splice_write+0xa3a/0x11f0 [ 1726.880175] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1726.880235] ? lock_is_held_type+0x9e/0x120 [ 1726.880268] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1726.880302] direct_splice_actor+0x192/0x7b0 [ 1726.880337] splice_direct_to_actor+0x347/0x9d0 [ 1726.880370] ? __pfx_direct_splice_actor+0x10/0x10 [ 1726.880409] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1726.880442] ? lock_acquire+0x15e/0x2f0 [ 1726.880481] do_splice_direct+0x179/0x250 [ 1726.880511] ? __pfx_do_splice_direct+0x10/0x10 [ 1726.880542] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1726.880577] ? security_file_permission+0x22/0x90 [ 1726.880611] do_sendfile+0xa8e/0xdc0 [ 1726.880652] ? __pfx_do_sendfile+0x10/0x10 [ 1726.880686] ? __fget_files+0x20d/0x3b0 [ 1726.880731] __x64_sys_sendfile64+0x1d3/0x210 [ 1726.880759] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1726.880786] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1726.880827] do_syscall_64+0xbf/0x430 [ 1726.880852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.880875] RIP: 0033:0x7fb59c6b8b19 [ 1726.880893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1726.880915] RSP: 002b:00007fb599c2e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1726.880937] RAX: ffffffffffffffda RBX: 00007fb59c7cbf60 RCX: 00007fb59c6b8b19 [ 1726.880952] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1726.880965] RBP: 00007fb599c2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1726.880979] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1726.880993] R13: 00007fff3932da4f R14: 00007fb599c2e300 R15: 0000000000022000 [ 1726.881026] [ 1726.891686] serio: Serial port ptm0 [ 1726.978732] serio: Serial port ptm1 23:20:17 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) [ 1727.085538] FAULT_INJECTION: forcing a failure. [ 1727.085538] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1727.087375] CPU: 1 UID: 0 PID: 12372 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1727.087406] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1727.087420] Call Trace: [ 1727.087429] [ 1727.087438] dump_stack_lvl+0xfa/0x120 [ 1727.087481] should_fail_ex+0x4d7/0x5e0 [ 1727.087508] should_fail_alloc_page+0xe0/0x110 [ 1727.087536] prepare_alloc_pages+0x1eb/0x550 [ 1727.087573] ? __pfx_perf_trace_lock+0x10/0x10 [ 1727.087612] alloc_pages_bulk_noprof+0x148/0xc30 [ 1727.087642] ? find_held_lock+0x2b/0x80 [ 1727.087671] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1727.087704] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1727.087739] ? trace_kmalloc+0x1f/0xb0 [ 1727.087758] ? __kmalloc_noprof+0x274/0x680 [ 1727.087787] ? copy_splice_read+0x15b/0xc00 [ 1727.087821] copy_splice_read+0x192/0xc00 [ 1727.087859] ? __pfx_copy_splice_read+0x10/0x10 [ 1727.087888] ? __pfx_perf_trace_lock+0x10/0x10 [ 1727.087937] ? find_held_lock+0x2b/0x80 [ 1727.087961] ? splice_direct_to_actor+0x347/0x9d0 [ 1727.087994] ? __pfx_copy_splice_read+0x10/0x10 [ 1727.088025] do_splice_read+0x1f8/0x2a0 [ 1727.088058] splice_direct_to_actor+0x2a8/0x9d0 [ 1727.088090] ? __pfx_direct_splice_actor+0x10/0x10 [ 1727.088128] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1727.088162] ? lock_acquire+0x15e/0x2f0 [ 1727.088198] do_splice_direct+0x179/0x250 [ 1727.088228] ? __pfx_do_splice_direct+0x10/0x10 [ 1727.088259] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1727.088294] ? security_file_permission+0x22/0x90 [ 1727.088327] do_sendfile+0xa8e/0xdc0 [ 1727.088368] ? __pfx_do_sendfile+0x10/0x10 [ 1727.088401] ? __fget_files+0x20d/0x3b0 [ 1727.088445] __x64_sys_sendfile64+0x1d3/0x210 [ 1727.088473] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1727.088500] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1727.088540] do_syscall_64+0xbf/0x430 [ 1727.088566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1727.088588] RIP: 0033:0x7f7a32465b19 [ 1727.088606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1727.088629] RSP: 002b:00007f7a2f9db188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1727.088651] RAX: ffffffffffffffda RBX: 00007f7a32578f60 RCX: 00007f7a32465b19 [ 1727.088667] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1727.088680] RBP: 00007f7a2f9db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1727.088694] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1727.088708] R13: 00007ffe0bebc99f R14: 00007f7a2f9db300 R15: 0000000000022000 [ 1727.088740] 23:20:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000100)=0x1) r1 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0x1) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x1, 0x6, 0x0, 0xfffa, 0x16, "86460b56d54b51a4"}) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/74, 0x4a}, {&(0x7f0000000300)=""/154, 0x9a}, {&(0x7f00000003c0)=""/223, 0xdf}, {&(0x7f0000000240)=""/105, 0x69}], 0x4, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x118}, 0x10100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000000c0)={0x800, 0x404c, 0x9, 0x114, 0x0, "fb3c456a82f6b3e628110c197b7fc5b938ae6b", 0x3, 0x1}) 23:20:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0xbced8c23) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:20:17 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 89) [ 1727.269531] serio: Serial port ptm0 [ 1727.279898] serio: Serial port ptm1 23:20:17 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 86) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 1727.356130] serio: Serial port ptm0 23:20:17 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x9}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000000c0)={0xd19f, 0x1000, 0x20000, 0x7fff, 0x4, "ddb236e03e115d6532304548bd84333606ed14", 0x9, 0xfff}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) dup2(r1, r2) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824", 0x2}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:20:17 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0xd, 0xa, 0x5, 0x0, 0x0, {0xd, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x41) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r1, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r1, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) [ 1727.463813] FAULT_INJECTION: forcing a failure. [ 1727.463813] name failslab, interval 1, probability 0, space 0, times 0 [ 1727.465815] CPU: 0 UID: 0 PID: 12402 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1727.465849] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1727.465864] Call Trace: [ 1727.465872] [ 1727.465882] dump_stack_lvl+0xfa/0x120 [ 1727.465928] should_fail_ex+0x4d7/0x5e0 [ 1727.465965] ? jbd2__journal_start+0x193/0x6b0 [ 1727.466008] should_failslab+0xc2/0x120 [ 1727.466035] kmem_cache_alloc_noprof+0x80/0x690 [ 1727.466070] ? lock_is_held_type+0x9e/0x120 [ 1727.466113] ? jbd2__journal_start+0x193/0x6b0 [ 1727.466149] jbd2__journal_start+0x193/0x6b0 [ 1727.466192] __ext4_journal_start_sb+0x325/0x5d0 [ 1727.466222] ? ext4_iomap_begin+0x5b0/0xe80 [ 1727.466249] ? ext4_meta_trans_blocks+0x256/0x310 [ 1727.466282] ext4_iomap_begin+0x5b0/0xe80 [ 1727.466325] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1727.466356] ? iomap_iter_advance+0x177/0x1f0 [ 1727.466396] ? iomap_dio_bio_iter+0x8ac/0x1310 [ 1727.466426] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1727.466453] iomap_iter+0x55a/0x1020 [ 1727.466497] __iomap_dio_rw+0x6dd/0x1c90 [ 1727.466531] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1727.466578] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1727.466612] ? kasan_quarantine_put+0x84/0x1e0 [ 1727.466659] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1727.466696] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1727.466720] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1727.466762] iomap_dio_rw+0x40/0xa0 [ 1727.466789] ext4_file_write_iter+0xe0e/0x19f0 [ 1727.466830] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1727.466856] ? trace_kmalloc+0x1f/0xb0 [ 1727.466876] ? __kmalloc_noprof+0x274/0x680 [ 1727.466906] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1727.466950] iter_file_splice_write+0xa3a/0x11f0 [ 1727.467003] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1727.467067] ? lock_is_held_type+0x9e/0x120 [ 1727.467103] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1727.467140] direct_splice_actor+0x192/0x7b0 [ 1727.467179] splice_direct_to_actor+0x347/0x9d0 [ 1727.467214] ? __pfx_direct_splice_actor+0x10/0x10 [ 1727.467278] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1727.467319] ? lock_acquire+0x15e/0x2f0 [ 1727.467360] do_splice_direct+0x179/0x250 [ 1727.467393] ? __pfx_do_splice_direct+0x10/0x10 [ 1727.467428] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1727.467465] ? security_file_permission+0x22/0x90 [ 1727.467502] do_sendfile+0xa8e/0xdc0 [ 1727.467547] ? __pfx_do_sendfile+0x10/0x10 [ 1727.467584] ? __fget_files+0x20d/0x3b0 [ 1727.467633] __x64_sys_sendfile64+0x1d3/0x210 [ 1727.467662] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1727.467691] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1727.467736] do_syscall_64+0xbf/0x430 [ 1727.467763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1727.467788] RIP: 0033:0x7fb59c6b8b19 [ 1727.467807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1727.467831] RSP: 002b:00007fb599c2e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1727.467855] RAX: ffffffffffffffda RBX: 00007fb59c7cbf60 RCX: 00007fb59c6b8b19 [ 1727.467871] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1727.467886] RBP: 00007fb599c2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1727.467901] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1727.467916] R13: 00007fff3932da4f R14: 00007fb599c2e300 R15: 0000000000022000 [ 1727.467957] 23:20:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0xdf2b0000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1727.574352] FAULT_INJECTION: forcing a failure. [ 1727.574352] name failslab, interval 1, probability 0, space 0, times 0 [ 1727.576339] CPU: 0 UID: 0 PID: 12399 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1727.576371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1727.576385] Call Trace: [ 1727.576393] [ 1727.576402] dump_stack_lvl+0xfa/0x120 [ 1727.576445] should_fail_ex+0x4d7/0x5e0 [ 1727.576471] ? jbd2__journal_start+0x193/0x6b0 [ 1727.576505] should_failslab+0xc2/0x120 [ 1727.576529] kmem_cache_alloc_noprof+0x80/0x690 [ 1727.576561] ? lock_is_held_type+0x9e/0x120 [ 1727.576600] ? jbd2__journal_start+0x193/0x6b0 [ 1727.576633] ? __mark_inode_dirty+0x254/0x1470 [ 1727.576656] jbd2__journal_start+0x193/0x6b0 [ 1727.576697] __ext4_journal_start_sb+0x325/0x5d0 [ 1727.576725] ? ext4_file_write_iter+0xd77/0x19f0 [ 1727.576753] ext4_file_write_iter+0xd77/0x19f0 [ 1727.576792] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1727.576816] ? trace_kmalloc+0x1f/0xb0 [ 1727.576835] ? __kmalloc_noprof+0x274/0x680 [ 1727.576863] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1727.576903] iter_file_splice_write+0xa3a/0x11f0 [ 1727.576961] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1727.577022] ? lock_is_held_type+0x9e/0x120 [ 1727.577055] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1727.577089] direct_splice_actor+0x192/0x7b0 [ 1727.577125] splice_direct_to_actor+0x347/0x9d0 [ 1727.577158] ? __pfx_direct_splice_actor+0x10/0x10 [ 1727.577196] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1727.577230] ? lock_acquire+0x15e/0x2f0 [ 1727.577268] do_splice_direct+0x179/0x250 [ 1727.577298] ? __pfx_do_splice_direct+0x10/0x10 [ 1727.577330] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1727.577365] ? security_file_permission+0x22/0x90 [ 1727.577398] do_sendfile+0xa8e/0xdc0 [ 1727.577439] ? __pfx_do_sendfile+0x10/0x10 [ 1727.577473] ? __fget_files+0x20d/0x3b0 [ 1727.577518] __x64_sys_sendfile64+0x1d3/0x210 [ 1727.577546] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1727.577573] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1727.577614] do_syscall_64+0xbf/0x430 [ 1727.577639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1727.577661] RIP: 0033:0x7f7a32465b19 [ 1727.577679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1727.577700] RSP: 002b:00007f7a2f9db188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1727.577722] RAX: ffffffffffffffda RBX: 00007f7a32578f60 RCX: 00007f7a32465b19 [ 1727.577737] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1727.577751] RBP: 00007f7a2f9db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1727.577765] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1727.577779] R13: 00007ffe0bebc99f R14: 00007f7a2f9db300 R15: 0000000000022000 [ 1727.577813] [ 1727.596370] serio: Serial port ptm0 [ 1727.622677] serio: Serial port ptm1 [ 1727.680572] serio: Serial port ptm1 [ 1727.686328] serio: Serial port ptm3 [ 1727.704355] serio: Serial port ptm0 23:20:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x3, 0x1000, 0x0, 0x0, 0x0, "f2f320c1e8c09030129300"}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ftruncate(r1, 0x9) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f0000000100)={0x58, 0x7d, 0x2, {0x0, 0x51, 0x8000, 0x3, {0x4, 0x0, 0x7}, 0x10820000, 0x5, 0x6, 0x3091, 0x2, '-\xd7', 0xa, '/dev/ptmx\x00', 0x12, ':$]&%.@!$-+{,@$[#&'}}, 0x58) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x101) 23:20:18 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 42) 23:20:18 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 90) 23:20:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$packet(0x11, 0x3, 0x300) sendmsg$sock(r3, &(0x7f00000003c0)={&(0x7f0000000180)=@phonet={0x23, 0x7, 0x58, 0x6}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)="617c57ee225d33c34c8802b027afe62d7fd9979ab7bade630467d5e66af6149c59eb607e281fd69babe40bcb15725168de200313e4f3b302e7f4b6c768107e10717b05b7954140031b329d7279d2ef37e6a3814cd5c590b742f263457b0b9f13bd86698b4bb0c1999331435fab83e44b5884fa95491408d4717826ab82753c1e2a972444c4155482a440b9170266de76e036", 0x92}], 0x1, &(0x7f0000000340)=[@txtime={{0x18, 0x1, 0x3d, 0x800}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff8}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x78}, 0x81) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) stat(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r2, r4, r1) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f00000000c0)=0x1, 0x4) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x408900, 0x0) ioctl$TCSETSF2(r6, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) 23:20:18 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x3a) read(r0, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x40, 0x80000000, 0x9, 0x4, 0x7f, "d0c305f545577f511f90cf37d1c7abf9edbe3e", 0x2, 0xfffffffa}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0xffffffffffffff79, 0x80000) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) [ 1727.832559] serio: Serial port ptm1 [ 1727.895977] serio: Serial port ptm1 23:20:26 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 87) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:20:26 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 91) 23:20:26 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 43) 23:20:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0xeffdffff) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:20:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x1f6) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x80, 0xe2b, 0x7, 0x8eb2, 0x0, "6c9d52cd2f17addc"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:20:26 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x100600, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824", 0x0, 0x8}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) 23:20:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x6, 0x0, "f2f3e2a9000000000ff8c2b978657df3480824", 0x81}) read(r0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x171000, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0xfff) read(r0, 0x0, 0x0) [ 1736.470597] serio: Serial port ptm1 [ 1736.482106] serio: Serial port ptm2 [ 1736.484489] serio: Serial port ptm0 23:20:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x440281, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f00000000c0)={0x3, 0x200, 0x870, 0x8, 0x7f, "c55d4077e8d9ce7089cfee5b25ba549b8197e9", 0x3, 0x8}) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x3, 0x200) r3 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) [ 1736.531951] serio: Serial port ptm1 [ 1736.549714] FAULT_INJECTION: forcing a failure. [ 1736.549714] name failslab, interval 1, probability 0, space 0, times 0 [ 1736.550933] CPU: 0 UID: 0 PID: 12446 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1736.550952] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1736.550960] Call Trace: [ 1736.550965] [ 1736.550971] dump_stack_lvl+0xfa/0x120 [ 1736.551001] should_fail_ex+0x4d7/0x5e0 [ 1736.551018] ? jbd2__journal_start+0x193/0x6b0 [ 1736.551040] should_failslab+0xc2/0x120 [ 1736.551055] kmem_cache_alloc_noprof+0x80/0x690 [ 1736.551075] ? lock_is_held_type+0x9e/0x120 [ 1736.551099] ? jbd2__journal_start+0x193/0x6b0 [ 1736.551118] ? __mark_inode_dirty+0x254/0x1470 [ 1736.551134] jbd2__journal_start+0x193/0x6b0 [ 1736.551157] __ext4_journal_start_sb+0x325/0x5d0 [ 1736.551174] ? ext4_file_write_iter+0xd77/0x19f0 [ 1736.551191] ext4_file_write_iter+0xd77/0x19f0 [ 1736.551213] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1736.551227] ? trace_kmalloc+0x1f/0xb0 [ 1736.551238] ? __kmalloc_noprof+0x274/0x680 [ 1736.551254] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1736.551278] iter_file_splice_write+0xa3a/0x11f0 [ 1736.551307] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1736.551341] ? lock_is_held_type+0x9e/0x120 [ 1736.551360] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1736.551381] direct_splice_actor+0x192/0x7b0 [ 1736.551411] splice_direct_to_actor+0x347/0x9d0 [ 1736.551430] ? __pfx_direct_splice_actor+0x10/0x10 [ 1736.551452] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1736.551472] ? lock_acquire+0x15e/0x2f0 [ 1736.551495] do_splice_direct+0x179/0x250 [ 1736.551513] ? __pfx_do_splice_direct+0x10/0x10 [ 1736.551532] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1736.551552] ? security_file_permission+0x22/0x90 [ 1736.551573] do_sendfile+0xa8e/0xdc0 [ 1736.551598] ? __pfx_do_sendfile+0x10/0x10 [ 1736.551618] ? __fget_files+0x20d/0x3b0 [ 1736.551645] __x64_sys_sendfile64+0x1d3/0x210 [ 1736.551661] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1736.551677] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1736.551701] do_syscall_64+0xbf/0x430 [ 1736.551716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.551730] RIP: 0033:0x7f7a32465b19 [ 1736.551741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1736.551755] RSP: 002b:00007f7a2f9db188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1736.551768] RAX: ffffffffffffffda RBX: 00007f7a32578f60 RCX: 00007f7a32465b19 [ 1736.551777] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1736.551785] RBP: 00007f7a2f9db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1736.551793] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1736.551802] R13: 00007ffe0bebc99f R14: 00007f7a2f9db300 R15: 0000000000022000 [ 1736.551821] [ 1736.577334] serio: Serial port ptm2 23:20:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0xfdffffff) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 23:20:27 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 92) 23:20:27 executing program 7: ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f00000000c0)) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x4b4b, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x0, 0x8004}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000140)={0x2, 0x2, 0xed, 0xfffffff8, 0x5, "98c14a69d2cd00ad4a8f0f21613cd96ce07c7f", 0x7, 0x2}) read(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 23:20:27 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 88) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:20:27 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 44) [ 1736.718157] serio: Serial port ptm1 23:20:27 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x10, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1736.820922] FAULT_INJECTION: forcing a failure. [ 1736.820922] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1736.822010] CPU: 0 UID: 0 PID: 12482 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1736.822028] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1736.822037] Call Trace: [ 1736.822050] [ 1736.822055] dump_stack_lvl+0xfa/0x120 [ 1736.822084] should_fail_ex+0x4d7/0x5e0 [ 1736.822100] should_fail_alloc_page+0xe0/0x110 [ 1736.822116] prepare_alloc_pages+0x1eb/0x550 [ 1736.822139] ? __pfx_perf_trace_lock+0x10/0x10 [ 1736.822164] alloc_pages_bulk_noprof+0x148/0xc30 [ 1736.822181] ? find_held_lock+0x2b/0x80 [ 1736.822197] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1736.822216] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1736.822235] ? trace_kmalloc+0x1f/0xb0 [ 1736.822246] ? __kmalloc_noprof+0x274/0x680 [ 1736.822262] ? copy_splice_read+0x15b/0xc00 [ 1736.822281] copy_splice_read+0x192/0xc00 [ 1736.822302] ? __pfx_copy_splice_read+0x10/0x10 [ 1736.822317] ? __pfx_perf_trace_lock+0x10/0x10 [ 1736.822340] ? find_held_lock+0x2b/0x80 [ 1736.822352] ? splice_direct_to_actor+0x347/0x9d0 [ 1736.822370] ? __pfx_copy_splice_read+0x10/0x10 [ 1736.822387] do_splice_read+0x1f8/0x2a0 [ 1736.822405] splice_direct_to_actor+0x2a8/0x9d0 [ 1736.822422] ? __pfx_direct_splice_actor+0x10/0x10 [ 1736.822442] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1736.822461] ? lock_acquire+0x15e/0x2f0 [ 1736.822481] do_splice_direct+0x179/0x250 [ 1736.822497] ? __pfx_do_splice_direct+0x10/0x10 [ 1736.822515] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1736.822533] ? security_file_permission+0x22/0x90 [ 1736.822553] do_sendfile+0xa8e/0xdc0 [ 1736.822576] ? __pfx_do_sendfile+0x10/0x10 [ 1736.822594] ? __fget_files+0x20d/0x3b0 [ 1736.822619] __x64_sys_sendfile64+0x1d3/0x210 [ 1736.822634] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1736.822649] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1736.822670] do_syscall_64+0xbf/0x430 [ 1736.822685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.822698] RIP: 0033:0x7f7a32465b19 [ 1736.822709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1736.822721] RSP: 002b:00007f7a2f9ba188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1736.822733] RAX: ffffffffffffffda RBX: 00007f7a32579020 RCX: 00007f7a32465b19 [ 1736.822742] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1736.822749] RBP: 00007f7a2f9ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1736.822757] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1736.822764] R13: 00007ffe0bebc99f R14: 00007f7a2f9ba300 R15: 0000000000022000 [ 1736.822781] [ 1736.857324] serio: Serial port ptm1 23:20:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0xfffffdef) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1736.887981] FAULT_INJECTION: forcing a failure. [ 1736.887981] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1736.889014] CPU: 1 UID: 0 PID: 12484 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1736.889032] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1736.889040] Call Trace: [ 1736.889045] [ 1736.889050] dump_stack_lvl+0xfa/0x120 [ 1736.889082] should_fail_ex+0x4d7/0x5e0 [ 1736.889099] should_fail_alloc_page+0xe0/0x110 [ 1736.889115] prepare_alloc_pages+0x1eb/0x550 [ 1736.889140] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 1736.889161] ? __pfx_ext4_es_insert_delayed_extent+0x10/0x10 [ 1736.889177] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 1736.889200] ? find_held_lock+0x2b/0x80 [ 1736.889222] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1736.889245] ? lock_release+0xc8/0x290 [ 1736.889267] ? ext4_da_reserve_space+0xf9/0x430 [ 1736.889289] ? perf_trace_lock+0xb5/0x5d0 [ 1736.889308] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1736.889325] ? policy_nodemask+0xeb/0x4e0 [ 1736.889343] alloc_pages_mpol+0xed/0x340 [ 1736.889360] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1736.889374] ? find_held_lock+0x2b/0x80 [ 1736.889388] ? filemap_get_entry+0x1b1/0x3b0 [ 1736.889402] ? lock_release+0xc8/0x290 [ 1736.889421] folio_alloc_noprof+0x21/0x80 [ 1736.889439] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 1736.889461] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1736.889480] ? perf_trace_lock+0xb5/0x5d0 [ 1736.889501] __filemap_get_folio_mpol+0x513/0x9a0 [ 1736.889519] ext4_da_write_begin+0x3e1/0xb40 [ 1736.889541] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1736.889558] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 1736.889579] generic_perform_write+0x391/0x810 [ 1736.889603] ? __pfx_generic_perform_write+0x10/0x10 [ 1736.889629] ext4_buffered_write_iter+0x11a/0x430 [ 1736.889645] ext4_file_write_iter+0x104b/0x19f0 [ 1736.889665] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1736.889681] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1736.889704] iter_file_splice_write+0xa3a/0x11f0 [ 1736.889732] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1736.889764] ? lock_is_held_type+0x9e/0x120 [ 1736.889784] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1736.889803] direct_splice_actor+0x192/0x7b0 [ 1736.889822] splice_direct_to_actor+0x347/0x9d0 [ 1736.889840] ? __pfx_direct_splice_actor+0x10/0x10 [ 1736.889860] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1736.889879] ? lock_acquire+0x15e/0x2f0 [ 1736.889899] do_splice_direct+0x179/0x250 [ 1736.889916] ? __pfx_do_splice_direct+0x10/0x10 [ 1736.889938] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1736.889957] ? security_file_permission+0x22/0x90 [ 1736.889977] do_sendfile+0xa8e/0xdc0 [ 1736.890000] ? __pfx_do_sendfile+0x10/0x10 [ 1736.890018] ? __fget_files+0x20d/0x3b0 [ 1736.890044] __x64_sys_sendfile64+0x1d3/0x210 [ 1736.890059] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1736.890073] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1736.890096] do_syscall_64+0xbf/0x430 [ 1736.890110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.890123] RIP: 0033:0x7f20266ecb19 [ 1736.890133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1736.890146] RSP: 002b:00007f2023c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1736.890158] RAX: ffffffffffffffda RBX: 00007f2026800020 RCX: 00007f20266ecb19 [ 1736.890166] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1736.890174] RBP: 00007f2023c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1736.890182] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1736.890190] R13: 00007ffcc2c01daf R14: 00007f2023c41300 R15: 0000000000022000 [ 1736.890213] [ 1736.927081] serio: Serial port ptm1 23:20:27 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) (fail_nth: 89) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 23:20:27 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b4b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x12240, 0x84) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, @in_args={0x1}}, './file1\x00'}) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000180)={0x7, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) syz_open_pts(r4, 0x8000) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000200)='./file1\x00', 0x7, 0x3, &(0x7f0000001300)=[{&(0x7f0000000240)="e2ddcc521f2cb2517de98bfe1e1284d76bcf36a9891f45b991", 0x19, 0x446}, {&(0x7f0000000280)="5c99893af5c326d9f883a59b8d3f405dd14599f5f9a607371646a1315811af897f5436f5b590cf18171e27738bb0", 0x2e, 0x9}, {&(0x7f0000000300)="0221c7e30aa05c6906a4a7d63d8689b1974bab6ebb1469491698f1058abf6e8ef387e8f0642bef71f75ae5c8412dc41d0d06f3cb488d94c9668ccc873c5586e91f09a6dd49c4e83c94e614c30afd507a4f01ee80dcd689670b81464157f6e2d363b484831115b2cd8bcd5bf7981227040cd3496fc3c49c6592b2eedb05c5349b6c8b5c296de7c42be87cbb4a66e185f0485d761d3ca8e333bb1b65d3297e610ecf5d95364218896062738d9f215f67cf3c1a3d1bcc5a91b73441e6180a0128e32424959db732e8acef9b2669ef6c989fb8c52748fa5d6349a6cdeb0aa8ba2854af388ee513e0e0e9e8afa1716f154c2e4948648bd2623be1e9294b2c14544b17d345623c54abfa01ee3b97b26a2dd5db83c7b7fbb3f56ee70a62fb09b3a3cde359525b6d249eebae4b0782073b9ae0768b0848b9ba65298e4c3a6f5661118a5538cbd38140fb062aee20ccb73ff1b13c3bd52be7300ce7189057ddef0dd5256be22878c3523ef12641ad7459a1f83e9c77379125eccefa6093e94f6da48e525e32173b20e7162ece1a17f6482d8c057db93a25236743c8c50e964612dd3a7c27b067f483fca8b9cbd8ee759edb6229930ba67534aefb8f7546b88523b08245bf898e681ba145994156c0bdac181dbf4f2c9506f65ad821794990a8b085e5566e5f99104aad519a14640f7cd012f5ce2627efbf76b27abcefbf471476e81a71b9808cb8d0e4227c1ebfb57b6b58c7a5c8005e43804fd88265d025e521d2b0e667b30463fc92be799f1c39be9592ee989009334bde12bf2b2befa8d9c7a13193867ec21e8f5aebbe3a3ed5bac38d56c61a2451e2f2a9b386b7bfe9c39980d34ab45e03b835878d76eebd372d1b759787bcb78d9733d8bb8708be33b2ff18108731245f28f551dc40f2ba78b2909a68ac606526e284ad7be0945be69e339db376248660186ee750805dac2259510f2db4cb299ee8d15a8610c44c1e2fcd95be368c479029874961c81a42a2af1e35d7875192d2fe2ce03dab2bf3449bc2724cb82bda89be73de1f040af605da0e910bd59eccd6b74df39185562fc9e3a54f73039e84bd25018e3bda1f634de735d650eaadd3bea7842a75d9b15fa6ce866d81aacaed96fbfbb338857101f78ed58d6a509f2dda4d5d5af608206d0743674fba4248c998185fbef3a814da901a48dcee60ddcfe24df1f296cda7648a02ce18d86d9a60878e379da3b474f3569b2dc656aecd7b16ff6c2bf5758150b841e1be437ae00f12fbbbd1c469d310403bee99f986123a6d19e25b7a6b8c2d29cf13a124bee42b38a72280b4a6cfb4289ede254fefb2fab247487acf6811b48a126726349996f4a1623a0f4cac5271c177d1c6d45badc3d9b6165544c25b04910f54ac8835ba68cef2e5430e0cc642ea8dc84f78c97266ffac26b7a7e413a03c17b8490d328506c05ab4f6ac5c5d45a568be0778060f45faf1d4fc1eb121d7e87097b81b0f733b3cda48cac4b630711d52e6a32dd0d75ff38d56d4d5b1ce01aaa713bae4d9b0383d25faaff50a6c2fe9d8555d1ee16a37880fcad97ae2685bee0603634ea7e16987b332136eb48c5ddff55b96bea16ef8a307de0f2009859ad9776ddeacbe61d1df12912ba59591ba0f4ed3d056d484145bf00e7bfdef587ce907dd1f2d8004d458fc73ce1ab5a962e7ed5c6a683ee2360e2b50d6066c65b877c11eb16f044eb5b2e8cfd5f0bd2549e2a588feadf150248cd53af697556b8524c090e14d067f0debcf07f396367dd3b722a9bd59e89be04a53a06024a268ade11d2a7cc59d50d27e6d937638049036f98e26e6fdd95b24ee92b53a0671a97c7572fd7c3e044ea06e813b36c439f3c38707a56e3f6ca2453969ba8576efaa750de0c5335c59aa601e666b76d8dfa7d3dcb9391e8f82a587f08b198b344b3a36128f27c960bd65285c8a9d06b49a46b54324dd544dfb7b9f100cdda7ed2013322b6663dc41888e05f49fbb1695920a7c28ae05d72e4beb3c1e3c6d8733c50299fd779e8e129e9d1d2cbaae012411c9e99732e4cb800a50e72249ef0a9bc1193464b60634d8029f6ac545c9f48a7b5fbb53a588755f3d8064b41f14c54b720ede8ac464cb798e01621f47a6fe5f6a65abc1125a8a685f40ed26ce2a825e2264a7a2cbc4ce7b3d14d4886dd35506f357904bbf427a6c7797021ac7e862de49b91a4861b45a7f94cefd8629a101e758e26af44638d1d8ebc7275685d77ff8203d85d2dbb42ea4f9d571381facc8923c329402d62f3efccfbfa90c441e135beb7fe4ea94024751158866e1a481c6e79291df9ed0979fd070025f1a3086bbb7d5722f26dadcf864c037b87a59d7a15e1d913085120990ac18e881924b7390c76394b4233b68e9b0de84296218eb62919ff4eb7252d4bd6f7dd6262cf69429e48c6db7f09a9532736173d79b545c5ebe281ff92abf4cc4d547fb4371a355e9fd10153933c1843433c10e5f77454ab95adc2c1d2c5d94bba0fda25c532dc2a4edb8e64eb39e32870b6d3498e99a9c443808854b95ff352c0d5e7422ffd943dac16cabcf516a70b27eba2d49eae99dd92003929cc0d05f624cd0b85ad2c11f395652de062b852885d757f8b3f65e786db676f3f5a87c990d163fda20c5d87fd06bfae914b12d52f5db4ca23e17a0ba5618eb217972117b0021ad3a77f896de8837900e06519c4dd5a41e1071e155664af5ab98f936cc491b650706712134df4d9108929f114b4566e9567806e8fec14c6f6f37716d5d5af86c566675b47ba420aecbd5067a9a1c357ad5a632b0cafc48c32a42b0dccdefe32eef0184e479fc4a7ed25a4a5f8d9b8d4c644cefe22cb9eb7c088c3de73999b2801efe2d9ce4cc7d7e5c762995cbeba75a3e1bcf17012fe7b6b7a27d81976ab2925b5557e2d9a43806513ce9019b330e2facc83968c8cdce562128ff75d9dfd0efff1ee168feafe84b2ee21c60249bd8f14d33d8a279bf7fa3bcfea019851091e518451f8221e0d6901a1d96c06c4a154b2a13628d992e86c3c38a35d3f4a7be6d724fbc05ff0398a0d1066ada276cfb94efabc1a09a98c6e01afb034c8a6e25c06c4666f6b8d45f6b32306bd5eafaed153b793f90cefd718ac49d957540894135a800854b06111c38ef54220570a4ab0ef4bc471935428bb23fab74d71139eca57d35c1633785b41d3559688bb8c653a465a77bdebc1b5b681003e05c691d47a535e5de3b56bd804e11bcb07950224a910548604688465e1d7348e87c6a885b25306447c5ab2a1473236f921816cade140633f0ac3f376360254b66a94e5f09552aef3adcbeb2cade6b5a5bc0f90e1391fe5e9527b3b709c5774c0e7af4df3bd694a98606651ead388a0bb13f4c0d1bfe1ab02eb91f6618df1565b395f5995773bf4d133bd073eff36f92dc9f44a726789abc39a6a2d8239c326dc73a3a8ab8cb4c4a7d82bfd3ee18bf2126897510467db91f3dc46e258bd55f28d8e76ff7102def5b3e17109f686b74d84ec2c835648ed7e61725055d29085a69c6338070c559486cb4def8bd791cc145fc1124e7de0bb6ee1616ca827b5fb62f9034d4d42b5baad7c9b0bd09ac64faaf142ca1d0079e1e3ccedcfca22cf086822a0dd3498ea0f77bfcdceaa8f52af379c382999f0231cb621511c2f4ee3fb6d44b6008faf8cd158b1769a889b635bb70abf445dbac6ea11ad16796a92fd26aa941945aac8f328f2cfa79f33036663ba1e1da669c3979f263c188354cd464da088c49a9ff9f76547192085e576d6a1cff674fc904c8033cf9b6dc089eca101b6e08b57f159625977b2538558b24517e4fceecd6137c05ff25edf7423e77aa165f3aac9906f65ec2d9a25fa545b5a5f3f5e8453184433b4052e9d74597632cf5aaac436a87a2d7dd94ec16299efdfb0fc444ee9f7c04b504090c4f76be9e9318c492877f4aa84a521de4ceeb29edae8f21057a2ec1e966d4e96798ad2f9471018f2554b5e305b09ea387d4ee19da1b44a8879ab17f57835c3f94321e765a34d56851d4bc85457f668cc64c97761224991e5f03265b9e5e759169d38403f1c6399bcd15118c81e2538056272417f8408f1a2392b7a43e957af07383c0524ea9ae231e4b62c2c169de3a296cb24ac0f8d36c20a2148813a6a9441dd13fc1b793b682a8b5afd359f3f376d6748ed37d356a762f01c492a695842ca2d8f05e509c9d8dc9c3cb11e910af862b5315ef7701b5c89e87bab405100ff192c1c6be24cb0ba78bddde89f70288548eba4b358ad2bed149f1ea90ff3c93173a8fef4c3b2f68d7fe7e79574751ff828ccc2264d75eb53f4d0897c6c8616a90e253f476ff4cd6680874723feed9c212017737169a094a4f52ed8a1a72dd97b6c98c31182235840bdb080a76d9a0ef111d8df098931b7ad17975bc9a91fb6e7ca390ce12d5c854295333d752b749353f4226dd3167ec754dc86fe5192b9f1e225d53ca50077ec2ba28f6db4545361076cc5e2bb57c412371a6b8eb65f38dccf44ceb61a18976cc1fcc289d0c562931c1aec65af5f673046277ed915b41fb0ec4dd6c1ebea6e7dfac0b8aae54c436c17fa6960926c58b3e7f68305f058bdc74700e609fe954510941114886592a5982a1f9f018332841cb73f655e1a78d34fc3f3096591545a541c787c90681b697b8b94f8f1a149dba7f37c3d491f55d4776ed79ce0b990feebdf0ebe60f8d248a3a0cef8798aa1cf342beae3af8b57a2f2babea470e9a4390b3f693bc742df14f7183cdf32b2e1332f9c9f97b840f2cddaafc60934b8f2cabe00d59f9c064e4e319534b8fbabcc165e959a382f5c1b98b339dd7ef5672a2687c9aa27d52ebc9ca43a5f64b6ca56c4b274a54d97633c9a175a5a9ebd486ea51a97446623e30e4591a9240e36273c622952c22f3843b6bcbba9a9532ca4cbc2f0ed177887a123e957b64ec028317fe3502023ec22eecea3f26350266e858d073af5dcacaf2216f6a169eddc1ab60e128be2ae425d199ffd49ea07339b1d0c7dfc37328a5293b9a80aad2b4bf6ad64bb01b70c84c5bad163bc35b923fee6bb03b4848fa8fe67b060ccda1408ebd829bc5b65c77a59a149e337ccdceb645bd75279ace9c8cc4f0b80383ba66367d986d0162fde77d4c746a8567ab12bc3f665e7c09f84773d2cc612b5f36c982f823ede1ea2d16f0bf88c64f74fba73f05ba0897cef2cd16c1e39b7b9d34150e06f07becb8ce882d98c5c960800d3228638fdaf15703535f504fd4b9b393329a8368a1652323ea02fdcf2c53d6bd230ff6383b1a4be95ffa453b84a10bfcc172643238317dd7405da2a6b25cb7d8b7b7538b95c1ef2af91a087422fab6f3932d1c659af4e55515b62fe6ae3c5e628a3e6334d7ae478b53813227c230954c66ce2fa843cb413a61b9016b36a945883fd27d10bd2b5c27fa77a020e4d8ba6af29c66b3f7efbab079599472577b7ddc02e07812d3a407c8a5fdffc56e20d575bee7ea6efe409a90247d335124b442b351bf4cc23eaec9eac6eefe030b233fb63b2dd1dd20ddb3ccccd8682f14d719d805d41c0811abd1d614257ee413015b638240e922ad4a557c2dc6cc3c13c627887c24a949812fe34b8afc5a8a153ae34d005e5776c1d3ba517ed86f7c2c7fb613277e29af1381727c1cab67e2b345a7224dddcbb79d2573ef6b54bcfec6b73fe2ec17e5069bb4cc1f5493486b70f602ae24245cbfd7bd0c44036f4ed21698a05fde68b306b643692bb853e61440c9cf9f46ecb129566cda697ed7bd9ef37dcb2a", 0x1000, 0x3}], 0x1404, &(0x7f0000001380)={[{@noauto_da_alloc}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x200}}, {@nobarrier}], [{@obj_role={'obj_role', 0x3d, '%k!!}-'}}, {@euid_eq}, {@hash}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xee01}}]}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1736.961319] loop7: detected capacity change from 0 to 8 23:20:27 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 93) [ 1736.972718] serio: Serial port ptm2 [ 1736.982522] serio: Serial port ptm1 [ 1737.045589] loop7: detected capacity change from 0 to 8 23:20:27 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 45) [ 1737.064409] FAULT_INJECTION: forcing a failure. [ 1737.064409] name failslab, interval 1, probability 0, space 0, times 0 [ 1737.065496] CPU: 0 UID: 0 PID: 12497 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1737.065515] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1737.065524] Call Trace: [ 1737.065529] [ 1737.065534] dump_stack_lvl+0xfa/0x120 [ 1737.065565] should_fail_ex+0x4d7/0x5e0 [ 1737.065586] should_failslab+0xc2/0x120 [ 1737.065602] __kmalloc_cache_noprof+0x81/0x6b0 [ 1737.065619] ? do_splice_direct+0x179/0x250 [ 1737.065637] ? do_sendfile+0xa8e/0xdc0 [ 1737.065656] ? __x64_sys_sendfile64+0x1d3/0x210 [ 1737.065671] ? do_syscall_64+0xbf/0x430 [ 1737.065684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.065698] ? __iomap_dio_rw+0x271/0x1c90 [ 1737.065710] ? perf_trace_lock+0xb5/0x5d0 [ 1737.065733] ? __iomap_dio_rw+0x271/0x1c90 [ 1737.065745] __iomap_dio_rw+0x271/0x1c90 [ 1737.065760] ? __virt_addr_valid+0x1c6/0x5d0 [ 1737.065776] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1737.065799] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1737.065820] ? lock_release+0xc8/0x290 [ 1737.065840] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1737.065854] ? mark_held_locks+0x49/0x80 [ 1737.065875] ? kasan_quarantine_put+0x84/0x1e0 [ 1737.065900] ? trace_jbd2_handle_start+0x173/0x1e0 [ 1737.065923] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1737.065940] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1737.065963] iomap_dio_rw+0x40/0xa0 [ 1737.065978] ext4_file_write_iter+0xe0e/0x19f0 [ 1737.066001] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1737.066015] ? trace_kmalloc+0x1f/0xb0 [ 1737.066026] ? __kmalloc_noprof+0x274/0x680 [ 1737.066043] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1737.066065] iter_file_splice_write+0xa3a/0x11f0 [ 1737.066094] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1737.066128] ? lock_is_held_type+0x9e/0x120 [ 1737.066148] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1737.066168] direct_splice_actor+0x192/0x7b0 [ 1737.066189] splice_direct_to_actor+0x347/0x9d0 [ 1737.066208] ? __pfx_direct_splice_actor+0x10/0x10 [ 1737.066230] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1737.066250] ? lock_acquire+0x15e/0x2f0 [ 1737.066272] do_splice_direct+0x179/0x250 [ 1737.066290] ? __pfx_do_splice_direct+0x10/0x10 [ 1737.066308] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1737.066328] ? security_file_permission+0x22/0x90 [ 1737.066349] do_sendfile+0xa8e/0xdc0 [ 1737.066372] ? __pfx_do_sendfile+0x10/0x10 [ 1737.066392] ? __fget_files+0x20d/0x3b0 [ 1737.066419] __x64_sys_sendfile64+0x1d3/0x210 [ 1737.066435] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1737.066451] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1737.066475] do_syscall_64+0xbf/0x430 [ 1737.066489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.066502] RIP: 0033:0x7f7a32465b19 [ 1737.066513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1737.066526] RSP: 002b:00007f7a2f9db188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1737.066539] RAX: ffffffffffffffda RBX: 00007f7a32578f60 RCX: 00007f7a32465b19 [ 1737.066550] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1737.066559] RBP: 00007f7a2f9db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1737.066569] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1737.066578] R13: 00007ffe0bebc99f R14: 00007f7a2f9db300 R15: 0000000000022000 [ 1737.066596] [ 1737.091233] serio: Serial port ptm2 23:20:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0xffffff7f) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1737.124655] serio: Serial port ptm1 23:20:27 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121240, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) (fail_nth: 94) 23:20:27 executing program 7: perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x1f, 0x5, 0x7f, 0x1, 0x0, 0xe4c2, 0x8040, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000040), 0x3}, 0x1000, 0x80000000, 0xff, 0x6, 0xdd9f, 0x336e95cf, 0x2, 0x0, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x5) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) read(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1737.209554] FAULT_INJECTION: forcing a failure. [ 1737.209554] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1737.210551] CPU: 1 UID: 0 PID: 12505 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 1737.210569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1737.210578] Call Trace: [ 1737.210583] [ 1737.210589] dump_stack_lvl+0xfa/0x120 [ 1737.210620] should_fail_ex+0x4d7/0x5e0 [ 1737.210638] should_fail_alloc_page+0xe0/0x110 [ 1737.210655] prepare_alloc_pages+0x1eb/0x550 [ 1737.210682] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 1737.210703] ? __pfx_ext4_es_insert_delayed_extent+0x10/0x10 [ 1737.210721] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 1737.210744] ? find_held_lock+0x2b/0x80 [ 1737.210760] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1737.210776] ? lock_release+0xc8/0x290 [ 1737.210798] ? ext4_da_reserve_space+0xf9/0x430 [ 1737.210821] ? perf_trace_lock+0xb5/0x5d0 [ 1737.210842] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1737.210859] ? policy_nodemask+0xeb/0x4e0 [ 1737.210880] alloc_pages_mpol+0xed/0x340 [ 1737.210897] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1737.210913] ? find_held_lock+0x2b/0x80 [ 1737.210931] ? filemap_get_entry+0x1b1/0x3b0 [ 1737.210947] ? lock_release+0xc8/0x290 [ 1737.210968] folio_alloc_noprof+0x21/0x80 [ 1737.210987] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 1737.211010] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1737.211030] ? perf_trace_lock+0xb5/0x5d0 [ 1737.211053] __filemap_get_folio_mpol+0x513/0x9a0 [ 1737.211071] ext4_da_write_begin+0x3e1/0xb40 [ 1737.211095] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1737.211113] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 1737.211135] generic_perform_write+0x391/0x810 [ 1737.211161] ? __pfx_generic_perform_write+0x10/0x10 [ 1737.211184] ? generic_update_time+0xcb/0xf0 [ 1737.211199] ? mnt_put_write_access_file+0x45/0xe0 [ 1737.211223] ext4_buffered_write_iter+0x11a/0x430 [ 1737.211240] ext4_file_write_iter+0x104b/0x19f0 [ 1737.211261] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1737.211278] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1737.211302] iter_file_splice_write+0xa3a/0x11f0 [ 1737.211331] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1737.211365] ? lock_is_held_type+0x9e/0x120 [ 1737.211386] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1737.211407] direct_splice_actor+0x192/0x7b0 [ 1737.211438] splice_direct_to_actor+0x347/0x9d0 [ 1737.211457] ? __pfx_direct_splice_actor+0x10/0x10 [ 1737.211479] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1737.211499] ? lock_acquire+0x15e/0x2f0 [ 1737.211520] do_splice_direct+0x179/0x250 [ 1737.211538] ? __pfx_do_splice_direct+0x10/0x10 [ 1737.211556] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1737.211576] ? security_file_permission+0x22/0x90 [ 1737.211597] do_sendfile+0xa8e/0xdc0 [ 1737.211622] ? __pfx_do_sendfile+0x10/0x10 [ 1737.211642] ? __fget_files+0x20d/0x3b0 [ 1737.211669] __x64_sys_sendfile64+0x1d3/0x210 [ 1737.211685] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1737.211701] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 1737.211725] do_syscall_64+0xbf/0x430 [ 1737.211740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.211754] RIP: 0033:0x7f20266ecb19 [ 1737.211765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1737.211778] RSP: 002b:00007f2023c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1737.211791] RAX: ffffffffffffffda RBX: 00007f2026800020 RCX: 00007f20266ecb19 [ 1737.211801] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1737.211809] RBP: 00007f2023c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1737.211817] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 1737.211828] R13: 00007ffcc2c01daf R14: 00007f2023c41300 R15: 0000000000022000 [ 1737.211850] [ 1737.284510] serio: Serial port ptm1 23:20:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x28700, 0x0) r1 = memfd_secret(0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x7f, 0x0, 0xffff22f0, 0x0, "f2f3e2a9896b6a770ff8c2b992ff00", 0x0, 0x50}) read(r0, 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000380)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r2, 0x4b4b, 0x0) lseek(r2, 0x9, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000003c0)=0x8) read(r0, 0x0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r0, 0x8, 0x81, 0x80000001}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f0000000100)=0x1) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) [ 1737.368645] serio: Serial port ptm1 [ 1738.278058] serio: Serial port ptm0 VM DIAGNOSIS: 23:25:31 Registers: info registers vcpu 0 RAX=ffff88800f133118 RBX=ffff88800f133118 RCX=0000000000000001 RDX=1ffff11001e26623 RSI=ffff888038af79e0 RDI=ffff88800f133120 RBP=ffff888038af79e0 RSP=ffff888038af7920 R8 =0000000000000001 R9 =ffffed1009e6b000 R10=ffff88804f358007 R11=0000000000000001 R12=ffff88800f1330c8 R13=ffff88800f133118 R14=0000000000000246 R15=ffffffff84c6c12e RIP=ffffffff81513486 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7fd0925700 00000000 00000000 GS =0000 ffff8880e539c000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007feb5a959010 CR3=0000000047f31000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000040f2770000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff8880492d79e0 RCX=0000000000000000 RDX=ffff8880492d79e0 RSI=ffff88800f1330e8 RDI=ffff88800f133120 RBP=ffff88800f1330c8 RSP=ffff8880492d7920 R8 =0000000000000001 R9 =0000000000000000 R10=ffff8880492d79e0 R11=0000000000000001 R12=ffff88800f133118 R13=ffff88800f133118 R14=0000000000000246 R15=ffff8880492d7b40 RIP=ffffffff81513844 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7fd0946700 00000000 00000000 GS =0000 ffff8880e549c000 00000000 00000000 LDT=0000 fffffe4300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4cfc6b8050 CR3=0000000047f31000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffff000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a XMM06=20202020202020202020202020202020 XMM07=00000000000000000000000000000000 XMM08=25203a646672656d6974206574616572 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000