k(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)={0x14, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0']}, 0x14}], 0x1}, 0x0) sendfile(r1, r0, 0x0, 0x4) r3 = syz_io_uring_complete(0x0) mount_setattr(r0, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r3}}, 0x20) fgetxattr(r3, &(0x7f0000000080)=@known='trusted.overlay.redirect\x00', &(0x7f00000002c0)=""/4096, 0x1000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:26:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) syz_io_uring_complete(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r0, r0, 0x0, 0xfffffded) 05:26:26 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0x0, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:26:26 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 4) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:26:26 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_io_uring_setup(0x5c6a, &(0x7f0000000000)={0x0, 0xe184, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r1], 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r2, 0x8000000) 05:26:26 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:26:27 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 5) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:26:27 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:26:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = syz_io_uring_complete(0x0) mount_setattr(r4, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r5}}, 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r7, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r7, r6, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:26:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = syz_io_uring_complete(0x0) mount_setattr(r3, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r4}}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r6, r5, 0x0, 0xfffffdef) 05:26:41 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x20, 0x0, 0x39a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(r1, 0x5bb, 0x58e, 0x1, &(0x7f0000000080)={[0x8]}, 0x8) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x4efe, &(0x7f0000000440), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r4, 0x2) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x3, 0x15, 0x2d, 0x4, 0x2, 0x3e, 0x10000, 0x123, 0x40, 0x294, 0x1000, 0x4, 0x38, 0x1, 0x101, 0xff}, [{0x2, 0x3, 0x1, 0x1, 0x6, 0x0, 0x5, 0x1}, {0x6, 0x4, 0x2, 0x7f, 0x9, 0x3, 0x2, 0xfff}], "2ba31acc5253a3e8b9941e7213fed3f846bc4f85bb90845dcd7c8f6c93d562ea3224901a5a40f98cd5d3092683ab33", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9df) syz_io_uring_submit(r6, r3, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd_index=0x1, 0x100, 0x0, 0x200, 0x2, 0x1, {0x0, r5}}, 0x3) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2004, @fd_index=0x5, 0x400, 0x0, 0x0, 0x29, 0x1, {0x2}}, 0x7) r7 = memfd_secret(0x0) syz_io_uring_setup(0x6b7a, &(0x7f0000000200)={0x0, 0x2a3f, 0x1, 0x1, 0x29, 0x0, r7}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:26:41 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x0) 05:26:41 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:26:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:26:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) syz_io_uring_complete(0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:26:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = syz_io_uring_complete(0x0) mount_setattr(r1, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r2}}, 0x20) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x7, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES16=r1]) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file1\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r7, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r7, r6, 0x0, 0x200) sendfile(r5, r4, 0x0, 0xfffffdef) r8 = accept(r4, &(0x7f0000000240)=@alg, &(0x7f0000000180)=0x80) pread64(r8, &(0x7f00000002c0)=""/208, 0xd0, 0x0) 05:26:41 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 6) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:26:41 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x2ce9, &(0x7f0000000000)={0x0, 0x10000000, 0x0, 0x2, 0x39e}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x101043, 0x112) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = syz_io_uring_complete(0x0) mount_setattr(r4, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r5}}, 0x20) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f00000012c0)=""/4065) sendfile(r2, r1, 0x0, 0xfffffdef) r6 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r6}}, 0x20) write(r2, &(0x7f0000000080)="5bb15dd024292738a2ed063c4796c62d4aaa7498b4c6243536667d4c985fd767e793513f56a664d0184994be151738798d33", 0x32) perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) [ 1917.130961] FAULT_INJECTION: forcing a failure. [ 1917.130961] name failslab, interval 1, probability 0, space 0, times 0 [ 1917.132918] CPU: 1 PID: 10052 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 1917.133990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1917.135050] Call Trace: [ 1917.135400] [ 1917.135717] dump_stack_lvl+0xc1/0xf0 [ 1917.136271] should_fail_ex+0x4b4/0x5b0 [ 1917.136825] ? __create_object+0x3ee/0xc90 [ 1917.137439] should_failslab+0x9/0x20 [ 1917.137970] __kmem_cache_alloc_node+0x5b/0x310 [ 1917.138613] ? __hw_addr_add_ex+0x235/0x7a0 [ 1917.139209] ? find_held_lock+0x2c/0x110 [ 1917.139806] kmalloc_trace+0x26/0x120 [ 1917.140349] __hw_addr_add_ex+0x235/0x7a0 [ 1917.140964] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 1917.141636] ? _find_next_bit+0x11b/0x150 [ 1917.142225] ? __bitmap_weight+0xd8/0x110 [ 1917.142832] dev_addr_init+0x13e/0x230 [ 1917.143387] ? __pfx_dev_addr_init+0x10/0x10 [ 1917.144036] alloc_netdev_mqs+0x172/0x10b0 [ 1917.144643] ? __pfx_tun_setup+0x10/0x10 [ 1917.145242] __tun_chr_ioctl+0x1c17/0x4220 [ 1917.145858] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1917.146512] ? __pfx___fget_files+0x10/0x10 [ 1917.147106] ? lock_acquire+0x32/0xc0 [ 1917.147662] ? __pfx___fget_files+0x10/0x10 [ 1917.148281] ? selinux_file_ioctl+0xba/0x270 [ 1917.148936] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1917.149588] __x64_sys_ioctl+0x19e/0x210 [ 1917.150177] do_syscall_64+0x3f/0x90 [ 1917.150726] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1917.151457] RIP: 0033:0x7fe31ab8cb19 [ 1917.151978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1917.154359] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1917.155373] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 1917.156328] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1917.157292] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 1917.158263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1917.159216] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 1917.160210] 05:26:41 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 7) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:26:55 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 8) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:26:55 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x0) 05:26:55 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:26:55 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x39a, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:26:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)={{0xcc, 0xa6, 0x4, 0x1ad, 0x381, 0xfffffffd, 0x186, 0x5}, "15285eafc783174020f1e2e935dd3443", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x930) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181000, 0x191) sendfile(r2, r1, 0x0, 0xfffffdef) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 05:26:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = syz_io_uring_complete(0x0) mount_setattr(r3, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r4}}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r6, r5, 0x0, 0xfffffdef) 05:26:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) syz_io_uring_complete(0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:26:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:26:55 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:26:55 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 9) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:27:14 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x0) 05:27:14 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:27:14 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x5d6, &(0x7f0000000080)={0x0, 0x6718, 0x8, 0x3, 0x39c, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r3, 0x0, &(0x7f0000000340)="b10477ef79fcf4342613df6a3f8361befff4fea9151674ccb63bb7cc639bb940377a4cb6af56f15aa03b28da39c18b", 0x2f, 0x40012021, 0x0, {0x0, r4}}, 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x0, 0x2000, @fd=r1, 0x7ff, &(0x7f00000004c0)=[{&(0x7f0000000180)="7be4d2f408a44821f4a881470989d7ac32b73d7596e465820c0237ad656a14a1398d20e48eed26d2ae557d1573611927d6cd281dff0f72aad9285668274783fe9af0bcbab74955c96b40b76aa3a626fb2f8d8ca34b5cabbe8536934c4695a0aa5a37d809da297b2a7e2158cbe984d6ff4de137399ce84ce89b96e14215db535bbc7f6bb9210233b980e5611cdf56c4d6ae0d202d9ef875acb99c7f065127bbf0f9d1c513148aa565593b902fe9915f590c0dda86d8192f502a73ea68f16a01996f28324fa1b518249ce1eb3221d634f4165e789c740d215a781f19dedaefc482485204f84f332c571073e3b863762857a13ca8a48c8320", 0xf7}, {&(0x7f00000002c0)="3ab2de90cb38d04ad1e2f3ce7e7a0ced036a55298a443600270a2775b66d9df97f1af58bf24a2b948182c94258c3a87a7087740185f7e59552f3901e398eee3cdb539057d1f4fa1ab483c894a64fafe117a52155262fbaa4775fd51bfc3739894ae3a514b212a13c57e802638b369272e8d014e48f71df7ae5304388a1ffffe70eeebfb8", 0x84}, {&(0x7f0000000380)="14d62613ad4ee99370d45b5128c583fe8faafe0efc323dd9c1375e966bbdefd7db07daeca50553c2e0a13a17b635ca01f982338260f84a9cc94a94ac83ede2ffb92fb5aa3da88e76b3e990e198fd39dcbe8e119d0cf5fa057f96e21efeaef1f67225afc122b7550db50e589bca52e3ebc059bdc3d835f5ab389c75c5b7de5caa1731420497", 0x85}, {&(0x7f0000000440)="abced6b9d3b9de9c4a558830b2f82dc303238c03113bd30fdfd42626efa26085941627a7cade8ae224a69c7f53967c8a910086205ce83b59a14cf4688ce8f3f467b9e739ee50e8ff9670", 0x4a}], 0x4, 0x11, 0x1, {0x3, r4}}, 0x5) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:27:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:27:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) syz_io_uring_complete(0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:27:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = syz_io_uring_complete(0x0) mount_setattr(r3, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r4}}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r6, r5, 0x0, 0xfffffdef) 05:27:14 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 10) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:27:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78}, 0x20) pwritev(0xffffffffffffffff, &(0x7f0000001780)=[{&(0x7f0000000240)="ec1d22e284a751702ce5721535a9534aa3a382fd5e83927e59755f23b2a461f94de943a5038f889baba7494bd9409b6ba5812d4c5af2d045df89c728fb24a1761f895acbe2b86b0aa230b9060894d5486b06e1275e751c49667b1a6dd23ca11870044c64cae254d3f4d31778955f8d279718c10ae8c308fe994ad0b1779fb20f5dbcc0ff2ed4862bcaff0ab335556f622591aad721ad7b185d40f4b5712bc14ef7a5cc95eafda8fc92e92b980ac448d953a97002e422a8ed31479263e5c0250698269a252a1c7c3c2d1f0f1a6ea3d1c1ca5918a60c07c4dd2d89ad7bf0f1798987ab86", 0xe3}, {&(0x7f0000000080)="668fec6f0cc8b250581e5569", 0xc}, {&(0x7f0000000340)="71dc614ac4c0145677dbc90a5adb297962a5a82d8e68f524b2c406a87cd414d9ba2989716cd62196fc096c8f7ef25361d8ca3f6de531d665059487804cb33362fe90aab1281425941a80ce5dd7e6bc8b8172bc837ad11f49088e8cd8d5f3a820b382854014f13c4a4c6e25e983bda25b818bd563a34dcbe25920bdc400d1ed519199a9f277caab2243912b3ea38a8ee03a7fc87a4385a6f965c5f5dd801104dd49c4d1a81008227000ac428ff614d94bcf1ae8d5d8c7e951a8a0be8eb2325f5135922b605cd6255fd06a2a4b6839", 0xce}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="cc9a382eb480fb834fed58e8787234ff9e32783c600251d633556a6f046c85515f1c3e34f1a7a24958c88376e02ff3482bfcbd81f2cc05001d40e0d70d8e12c0253b632d75cc525b8417fea76bf9c4ba06f70314a363acafc58f6e8f772dd712fbc135035676db9246a2687a12e013a3307addc61f6085c1cb11fee58f5f69adbb264c7e3d284b49cfd4a2853cf180427c8834b80ab3caa5bc547ac998d36c84b9b3bad8e369be250d6c0b16d80785899d89b81eeac5192f5b84b607f469423132e47539225a062a76543ec2a8429ad3601bd3", 0xd3}, {&(0x7f0000001540)="1ead5fc36eaf463ce559fed08eb0b2920d6269368e5627ddc52a4609489d7bfeb74be1d38123e854408ab354493750433e350430774311a49a3cd6e554f9e4a38d40025c34b18802a252938eb14f7eafac2dc1317419fabea868ad8acabdca4b178f2e0eacc7dea761b777c1d7818e4eac1b04b6619a3815c81f3d0da557d8fc5ab520838d3ea8cbc056bb16042a4795d421173b8819e199f2c9d19ad709202b1a1118c80eaade741d27ae08a986c513b3e2ec1f70bbc89a3813cffcdcfcf4b6049ca8752cdff47219b5d544af64bd64e5213d5aa830fac45270cb1d676cca2ccccb818887dae7d000a744542b684fca3a22cf3032982a6fc8cec552a0", 0xfd}, {&(0x7f0000001640)="936f0b6ea93de4a74597c21a6f25d598546c1a7a305975b2544b14285fe8503781117c65d19e2366e8ebfcd759586bbe25b423b92af044ca712f88847dce4b86f748c51877e75592cfa7dec5e03513bf29d95a335f2af54c789ce49e9c9518641dd68334e6930a2c2d43ea5b5cf20dbbe2baa24cd3bb7acfefa90934e71d7e7f6dd772384ee01d7ae894b9753c59d7d480a9a3796b05b1", 0x97}, {&(0x7f0000001700)="883353642d986c087682ab8c8567eb51e610cec9b0c37572d99b3feed9d2bc48246b899c53ca13d123ccf77e49db5a5e4e322a52c9461288b4a71c98d9b82d1fadd95953c76913abb0acea205dd1d64d320121bde3a6bf136de9039abafb74", 0x5f}], 0x8, 0x8, 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r4, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r6, r5, 0x0, 0xfffffdef) r7 = syz_io_uring_complete(0x0) mount_setattr(r6, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r7}}, 0x20) sendfile(r5, r7, &(0x7f0000000040), 0x20000b97) sendfile(r3, r2, 0x0, 0xfffffdef) sendfile(r1, r0, 0x0, 0xfffffdef) 05:27:14 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x1e22, 0x20, 0x3, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) sendfile(r1, r0, &(0x7f0000000080), 0x100) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:27:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:27:14 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:27:15 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x39b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='task\x00') getdents64(r1, &(0x7f0000000080)=""/252, 0xfc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:27:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:27:15 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 11) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:27:15 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_io_uring_setup(0x6850, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x39a}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = syz_io_uring_complete(0x0) mount_setattr(r3, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r4}}, 0x20) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) io_uring_enter(r5, 0x18f8, 0x3c53, 0x6, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth0_to_team\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) sendfile(r1, r0, &(0x7f00000000c0), 0x6) 05:27:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:27:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:27:15 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x39b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='task\x00') getdents64(r1, &(0x7f0000000080)=""/252, 0xfc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:27:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) syz_io_uring_complete(0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:27:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:27:15 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 12) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:27:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000240)="8186631e963b8a330afbec18eaffe6178784672f9311fb986cf389034f23fc320c41e6c563990fe836b104a0e89c8a2ae739c5ccb9509ba8e8090a41e9fdb7d8dc7c93e10ed7232239cba9df5e7cb77726a488de5b31a7ec80d10ec6942de98ad8708ee857481ac007cf5b90ddbec17b6c6ac63e8d7f52022b663ccb701edade170562637aa65035daa01e440e58a7bcb16b72eb8e2255c1f6b4febf38bcc2bcdc4641bf", 0xa4, 0x4}, {&(0x7f0000000300)="e876879e8803ce215857bb26ba9fcc5a9f85aa3643ebdeb0ae745abb544ba68b649515792b7db914b48681eae1277b21b7be58057a8b7fd0d1f2545f9584594481df263f70b56501204081f013fc8acf9b3631b04a62207ea6d27871bbf438a3db54f782f5f15441deee85e49368f1196b9758d75850d66485aa7ca6b40da84c61d8cfcd9fab774797a22ef9971c8a16313954a401ac92c64b33a5a281b8b6d2bb055e7091731b6b6db4cb20478dc368fcaa714dda441d23d2b9b690f51eab23d80da6b69d31f50867a18568c899602222faf06a712856", 0xd7, 0x6314}], 0x40, &(0x7f0000000400)={[{@fat=@check_normal}, {@nodots}], [{@subj_type}, {@measure}, {@obj_role={'obj_role', 0x3d, '\x7f'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fowner_gt={'fowner>', 0xee01}}, {@appraise_type}, {@context={'context', 0x3d, 'root'}}, {@appraise}, {@permit_directio}]}) pread64(r0, &(0x7f00000004c0)=""/175, 0xaf, 0xdec) chdir(&(0x7f0000000140)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file1'}}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x101042, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) sendfile(r2, r1, 0x0, 0xfffffdef) 05:27:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = syz_io_uring_complete(0x0) mount_setattr(r4, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r5}}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r0, 0x0, 0xfffffded) 05:27:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:27:15 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = syz_io_uring_complete(0x0) mount_setattr(r3, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r4}}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r6, r5, 0x0, 0xfffffdef) [ 1951.571799] FAULT_INJECTION: forcing a failure. [ 1951.571799] name failslab, interval 1, probability 0, space 0, times 0 [ 1951.572993] CPU: 0 PID: 10178 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 1951.573569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1951.574135] Call Trace: [ 1951.574319] [ 1951.574480] dump_stack_lvl+0xc1/0xf0 [ 1951.574775] should_fail_ex+0x4b4/0x5b0 [ 1951.575074] should_failslab+0x9/0x20 [ 1951.575348] __kmem_cache_alloc_node+0x5b/0x310 [ 1951.575681] ? register_netdevice+0x3e8/0x1530 [ 1951.576023] ? netdev_name_node_lookup+0x11a/0x160 [ 1951.576380] kmalloc_trace+0x26/0x120 [ 1951.576656] register_netdevice+0x3e8/0x1530 [ 1951.576985] ? __xdp_rxq_info_reg+0x18b/0x350 [ 1951.577318] ? __pfx_register_netdevice+0x10/0x10 [ 1951.577665] ? dev_addr_mod+0x29e/0x350 [ 1951.577954] __tun_chr_ioctl+0x21aa/0x4220 [ 1951.578269] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1951.578602] ? __pfx___fget_files+0x10/0x10 [ 1951.578910] ? lock_acquire+0x32/0xc0 [ 1951.579191] ? __pfx___fget_files+0x10/0x10 [ 1951.579507] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1951.579834] __x64_sys_ioctl+0x19e/0x210 [ 1951.580128] do_syscall_64+0x3f/0x90 [ 1951.580403] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1951.580775] RIP: 0033:0x7fe31ab8cb19 [ 1951.581033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1951.582264] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1951.582780] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 1951.583265] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1951.583754] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 1951.584236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1951.584719] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 1951.585233] 05:27:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) [ 1951.632330] loop6: detected capacity change from 0 to 40 [ 1951.751736] syz-executor.6: attempt to access beyond end of device [ 1951.751736] loop6: rw=2049, sector=44, nr_sectors = 12 limit=40 [ 1951.774631] syz-executor.6: attempt to access beyond end of device [ 1951.774631] loop6: rw=2049, sector=60, nr_sectors = 12 limit=40 05:27:16 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:27:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) [ 1951.813314] syz-executor.6: attempt to access beyond end of device [ 1951.813314] loop6: rw=2049, sector=76, nr_sectors = 12 limit=40 05:27:16 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 13) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:27:16 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:27:30 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 14) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:27:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:27:30 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:27:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:27:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) syz_io_uring_complete(0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:27:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = syz_io_uring_complete(0x0) mount_setattr(r4, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r5}}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r0, 0x0, 0xfffffded) 05:27:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) sendfile(r1, r0, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r5 = creat(&(0x7f0000000040)='./file1\x00', 0x10) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, &(0x7f0000000080)={r4, r5, 0x9}) 05:27:30 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) syz_io_uring_setup(0x3d3d, &(0x7f0000000080)={0x0, 0x7927, 0x8, 0x1, 0x44, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x4003, @fd=r1, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x1, {0x2, r3}}, 0x3) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:27:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:27:30 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x810, r1, 0x0) syz_io_uring_setup(0x2742, &(0x7f0000000200)={0x0, 0x787a, 0x2, 0x6, 0xa6, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r6, r5, 0x0, 0xfffffdef) r7 = syz_io_uring_complete(0x0) mount_setattr(r6, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r7}}, 0x20) r8 = openat(r7, &(0x7f0000000080)='./file1\x00', 0x181840, 0x20) fcntl$setlease(r8, 0x400, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r8, 0x0, &(0x7f0000000340)="b10477ef79fcf4342613df6a3f8361befff4fea9151674ccb63bb7cc639bb940377a4cb6af56f15aa03b28da39c18b", 0x2f, 0x40012021, 0x0, {0x0, r9}}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x7, @fd=r4, 0x1, 0x3, 0x32fb, 0x1, 0x1, {0x1, r9}}, 0x7f) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:27:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:27:30 executing program 4: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x5b3042, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x11) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) sendfile(r1, r0, 0x0, 0xfffffdef) 05:27:44 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 15) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:27:44 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = syz_io_uring_complete(0x0) mount_setattr(r4, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r5}}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r0, 0x0, 0xfffffded) 05:27:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file2\x00', 0xb0, 0x7, &(0x7f0000001440)=[{&(0x7f0000000240)="881daded213d72d5f03f8b56563f8b7a2f60bcb02b9c2c46abce3ddcb2ea77fa2e9b9ab5b61e5e3fc3c24a92063ec5d818e577e34fd78d20a14a7cbb92bfd5174254095e509a350ba1c3fe6ae9045246bba4ea68a19cd9dab90d6ebf9de392ccf28ca1614ad375dd30cd5ad9256800132d74fc949f74703f3a8d9df416b16386b6edecd24b4cdc232902f253526d8ec5e59470f842", 0x95, 0x2}, {&(0x7f00000000c0)="58f8c79449dbd194be06bdcc61fce302354905bed3963a6708102ae562906b2ed8dfe8edfa41", 0x26, 0x100000001}, {&(0x7f0000000180)="3caa7b972be2c4856691d9fd4b068d", 0xf, 0x3}, {&(0x7f0000000300)="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", 0x1000, 0x5}, {&(0x7f00000001c0)="b7eb7853039fa485ef3c93e6b55c31b195143e7582879402b5aa1161eff2533c31b6243b27", 0x25, 0x5}, {&(0x7f0000001300)="f79b5ca1fd83bd6050ae081b8cb9d8d0dfb2dc863b1a0866cafe4e27df248857f7b2f519ed4789a9dfb81805d014afd17daf00f94263562a13a75eb518f9fabb9ed3c3a1ed2ca0538413b801a27443", 0x4f, 0x3}, {&(0x7f0000001380)="aac4ee213892cdc6b9923cb0bd72af7c88553930520a29fb8cbd7e885c3ff5967acd9117791943dcbbc244eb9be87e5087e3c23d0aae71b79284b145a67d69ff625585985fadea8bb60346ed74c6306299f6493bf19969ab7976d4f94e602ef19511573a4e60e414c4bef9a55dd318e4118b56251e49a3e303bda56af3edf17f49a4cd687e0835f40fbc545cd3", 0x8d, 0x60}], 0x20000, &(0x7f0000001500)={[{@usrjquota}], [{@audit}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@appraise}, {@appraise_type}]}) sendfile(r1, r0, 0x0, 0xfffffdef) 05:27:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:27:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = syz_io_uring_complete(0x0) mount_setattr(r4, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r5}}, 0x20) [ 1980.686035] loop6: detected capacity change from 0 to 40 openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r0, 0x0, 0xfffffded) 05:27:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) syz_io_uring_complete(0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:27:44 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00'}) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r2 = syz_io_uring_complete(0x0) io_uring_enter(r2, 0x94d, 0xec95, 0x1, &(0x7f00000000c0)={[0x400]}, 0x8) r3 = dup2(r2, r1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:27:44 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) [ 1980.729649] syz-executor.6: attempt to access beyond end of device [ 1980.729649] loop6: rw=2049, sector=44, nr_sectors = 12 limit=40 [ 1980.776739] syz-executor.6: attempt to access beyond end of device [ 1980.776739] loop6: rw=2049, sector=60, nr_sectors = 12 limit=40 05:27:45 executing program 7: openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x200, 0x0, 0x0, 0x439a}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x4000010, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x51e8, &(0x7f0000000080)={0x0, 0x9a1a, 0x1, 0x0, 0x2, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) socket$nl_xfrm(0x10, 0x3, 0x6) 05:27:45 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x500, 0x63) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) sendfile(r1, r0, 0x0, 0xfffffdef) 05:27:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0x0) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) [ 1980.988700] loop6: detected capacity change from 0 to 40 [ 1981.018996] syz-executor.6: attempt to access beyond end of device [ 1981.018996] loop6: rw=2049, sector=44, nr_sectors = 12 limit=40 05:27:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:27:45 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 1) 05:27:45 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 16) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) [ 1981.173575] FAULT_INJECTION: forcing a failure. [ 1981.173575] name failslab, interval 1, probability 0, space 0, times 0 [ 1981.174333] CPU: 0 PID: 10294 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230216 #1 [ 1981.174873] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1981.175405] Call Trace: [ 1981.175581] [ 1981.175744] dump_stack_lvl+0xc1/0xf0 [ 1981.176025] should_fail_ex+0x4b4/0x5b0 [ 1981.176316] ? jbd2__journal_start+0x194/0x6b0 [ 1981.176649] should_failslab+0x9/0x20 [ 1981.176931] kmem_cache_alloc+0x5a/0x320 [ 1981.177226] jbd2__journal_start+0x194/0x6b0 [ 1981.177566] __ext4_journal_start_sb+0x4c2/0x6f0 [ 1981.177903] ? ext4_dirty_inode+0xa5/0x130 [ 1981.178204] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1981.178525] ext4_dirty_inode+0xa5/0x130 [ 1981.178814] __mark_inode_dirty+0x1aa/0xee0 [ 1981.179121] generic_update_time+0x21b/0x2b0 [ 1981.179432] file_modified_flags+0x2d4/0x330 [ 1981.179751] ? __pfx_file_modified_flags+0x10/0x10 [ 1981.180109] ? lock_is_held_type+0x9f/0x120 [ 1981.180416] ext4_fallocate+0x10bb/0x3f50 [ 1981.180724] ? __pfx_ext4_fallocate+0x10/0x10 [ 1981.181043] ? __x64_sys_fallocate+0xd3/0x140 [ 1981.181352] ? lock_is_held_type+0x9f/0x120 [ 1981.181664] ? __pfx_ext4_fallocate+0x10/0x10 [ 1981.182012] vfs_fallocate+0x48d/0xe30 [ 1981.182285] __x64_sys_fallocate+0xd3/0x140 [ 1981.182579] do_syscall_64+0x3f/0x90 [ 1981.182850] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1981.183216] RIP: 0033:0x7f9566faab19 [ 1981.183472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1981.184680] RSP: 002b:00007f95644ff188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1981.185203] RAX: ffffffffffffffda RBX: 00007f95670be020 RCX: 00007f9566faab19 [ 1981.185694] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000005 [ 1981.186179] RBP: 00007f95644ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1981.186658] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 1981.187140] R13: 00007ffc86a4213f R14: 00007f95644ff300 R15: 0000000000022000 [ 1981.187642] 05:27:45 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) syz_io_uring_setup(0x4, &(0x7f00000000c0)={0x0, 0x0, 0x20, 0x0, 0x39a, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r2}}, 0x800) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = accept$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000200)=0x2) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) [ 1981.348551] FAULT_INJECTION: forcing a failure. [ 1981.348551] name failslab, interval 1, probability 0, space 0, times 0 [ 1981.349841] CPU: 1 PID: 10298 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 1981.350381] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1981.350936] Call Trace: [ 1981.351143] [ 1981.351371] dump_stack_lvl+0xc1/0xf0 [ 1981.351656] should_fail_ex+0x4b4/0x5b0 [ 1981.351942] should_failslab+0x9/0x20 [ 1981.352213] __kmem_cache_alloc_node+0x5b/0x310 [ 1981.352536] ? selinux_tun_dev_alloc_security+0x47/0x190 [ 1981.352911] ? pcpu_memcg_post_alloc_hook+0x17/0x2f0 [ 1981.353270] kmalloc_trace+0x26/0x120 [ 1981.353546] selinux_tun_dev_alloc_security+0x47/0x190 [ 1981.353918] security_tun_dev_alloc_security+0x4a/0xa0 [ 1981.354291] tun_net_init+0x170/0x6a0 [ 1981.354597] ? __pfx_tun_net_init+0x10/0x10 [ 1981.354988] register_netdevice+0x554/0x1530 [ 1981.355305] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1981.355673] ? __pfx_register_netdevice+0x10/0x10 [ 1981.356106] ? dev_addr_mod+0x29e/0x350 [ 1981.356448] __tun_chr_ioctl+0x21aa/0x4220 [ 1981.356811] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1981.357162] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1981.357483] __x64_sys_ioctl+0x19e/0x210 [ 1981.357789] do_syscall_64+0x3f/0x90 [ 1981.358057] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1981.358420] RIP: 0033:0x7fe31ab8cb19 [ 1981.358694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1981.360061] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1981.360669] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 1981.361171] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1981.361770] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 1981.362349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1981.362959] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 1981.363531] 05:27:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:27:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0x0) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:27:45 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000080)={[0x2]}, 0x8, 0x800) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:27:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:27:45 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 17) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:27:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffded) 05:27:59 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x511042, 0x11) pwrite64(0xffffffffffffffff, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r5, r4, 0x0, 0xfffffdef) r6 = syz_io_uring_complete(0x0) mount_setattr(r5, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r6}}, 0x20) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[r2, r0, r1, 0xffffffffffffffff, r3, r5, r1, r5], 0x8) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) getresgid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000580)='./file1/file0\x00', 0x1, 0x5, &(0x7f0000000440)=[{&(0x7f0000000240)="86463998a8fd794541b8fbd2a93a923aa05b05b4dbdce8b624a7028c93204551ce7a6ea345811fc06b66bea329a0a6f4eafccfc6455a0f4277792318ab603fd0c0da2ad093547a37271d9dfc757434d027e23046902e18a56b0ee3609371c5f8555a34fe78394cbdbe9207f9297f57be1be88d1af9801ad2035511d4245bd6ff30b7448481e66f3976d98eeffc6e59b25c731cff2ed3", 0x96, 0xe2}, {&(0x7f0000000180)="1790c892fd949a90fa5399a403b198d5a8682c643054d61a640f8c201c820b0b9df5fe8179d931da6eb852aa3d8fab43e0abb6f8d0f90c61ee4bf8ddf14d61276ee6548aa0b893c4c962785349c7598abfdae8747dd32ba6f549c59bfed6d48d58bc8e2a625cf781175fc06a71c6", 0x6e, 0x3ff}, {&(0x7f00000000c0)="af408e3c7e74294f37b8469933d9114dea5e69b4e1589932bbc402db98d8a5c63a25611695cef42c5645168cb1", 0x2d, 0xfff}, {&(0x7f0000000340)="5e065b27691c0c2de1", 0x9, 0x3e08}, {&(0x7f0000000380)="b361b3f459a6503be13e34965466565ad4415b011ca3346e0950f15ad59410221f97c1a310ceb7083365beeb8b9ff068b19f86cc8b545a9ecfcd5090590ae64187f485c7b94ef54e7b595638510bf2c6f55ee54e1900b35bb15858ea288c4b6103946447231fbd3a05485a2df6f0ab7fbf49f675d8abd9f727b6c7a55fd84545c51e19421fc41f07ef18f44f25282a9d6ad33e91b477bd62ebac54afe29e8d2a950e746ab33decf3a81864504dfd8cee6f67", 0xb2, 0x10001}], 0x9b0080, &(0x7f0000000780)=ANY=[@ANYBLOB='huge=always,nr_inodes=-335%,euid>', @ANYRESDEC=0xee01, @ANYBLOB=',uid?', @ANYRESDEC=0x0, @ANYBLOB=',euid=', @ANYRESDEC=0xee00, @ANYBLOB=',subj_role=\x00\x00,obj_role=-*,-@,uid=', @ANYRESDEC=0x0, @ANYBLOB=',dont_hash,fowner=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="140005000000000100008000000000003000d3d9bb0000"], 0x14}], 0x1, 0x0, 0x0, 0x8040}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xffff) 05:27:59 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000002c0)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:27:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = syz_io_uring_complete(0x0) mount_setattr(r4, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r5}}, 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r7, r6, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:27:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0x0) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:27:59 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 18) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:27:59 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 2) 05:27:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:28:00 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000100000000002e2f66696c45312f66696c6570003a77e8650eadd8f04785e818f362ede6af8e5a3cb9fb765beb88e52385eaf65f51a885cbe4eac2fb17a47b2a35e73c59eccf4b6797b10336bcac9ce41f3c5c7ce9ab1bf9a30e4c07075b81cc83efefae8acd8f4314046cb98a4f02be5436fdff4f704e47cee9713c7204334a50f7da685cd76f46539b73a13f6d81e61d3c37b21e23dcdd2e41a6834b52fbe7b064201d10184f856af5d45dc62a14fc1ea58bb42c99aaf70b232331d9f61a0bc9358ed2172f03a5a68ac280666a111285"]) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r1, 0x0, 0x200fffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r3}}, 0x20) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = syz_io_uring_complete(0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r4}}, 0x20) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000140)={0x7, 0x0, '\x00', 0x0, &(0x7f00000000c0)}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team_slave_0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:28:00 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(0xffffffffffffffff, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:28:00 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 19) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:28:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 3) 05:28:00 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = inotify_init() r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'veth1_macvtap\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000340)="b10477ef79fcf4342613df6a3f8361befff4fea9151674ccb63bb7cc639bb940377a4cb6af56f15aa03b28da39c18b", 0x2f, 0x40012021, 0x0, {0x0, r3}}, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r1, 0x40, 0x3, 0x1000, 0x6, 0x0, {0x1, r3}}, 0x1ff) inotify_add_watch(r1, &(0x7f0000000140)='./file1\x00', 0x200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, 0xffffffffffffffff, 0x0, 0xfffffdef) r5 = syz_io_uring_complete(0x0) mount_setattr(r4, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r5}}, 0x20) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000000180)) [ 1996.287665] FAULT_INJECTION: forcing a failure. [ 1996.287665] name failslab, interval 1, probability 0, space 0, times 0 [ 1996.289292] CPU: 1 PID: 10361 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230216 #1 [ 1996.290571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1996.291614] Call Trace: [ 1996.291961] [ 1996.292273] dump_stack_lvl+0xc1/0xf0 [ 1996.292810] should_fail_ex+0x4b4/0x5b0 [ 1996.293354] ? jbd2__journal_start+0x194/0x6b0 [ 1996.293980] should_failslab+0x9/0x20 [ 1996.294510] kmem_cache_alloc+0x5a/0x320 [ 1996.295084] jbd2__journal_start+0x194/0x6b0 [ 1996.295698] __ext4_journal_start_sb+0x4c2/0x6f0 [ 1996.296312] ? ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 1996.297027] ? ext4_meta_trans_blocks+0x252/0x310 [ 1996.297699] ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 1996.298391] ? rcu_read_lock_sched_held+0x42/0x80 [ 1996.299025] ? __mark_inode_dirty+0x249/0xee0 [ 1996.299636] ? __pfx_ext4_alloc_file_blocks.isra.0+0x10/0x10 [ 1996.300376] ? __mnt_drop_write_file+0x4e/0xf0 [ 1996.300980] ? __pfx_file_modified_flags+0x10/0x10 [ 1996.301627] ? lock_is_held_type+0x9f/0x120 [ 1996.302234] ext4_fallocate+0x1fc5/0x3f50 [ 1996.302809] ? __pfx_ext4_fallocate+0x10/0x10 [ 1996.303406] ? __x64_sys_fallocate+0xd3/0x140 [ 1996.303984] ? lock_is_held_type+0x9f/0x120 [ 1996.304548] ? __pfx_ext4_fallocate+0x10/0x10 [ 1996.305144] vfs_fallocate+0x48d/0xe30 [ 1996.305656] __x64_sys_fallocate+0xd3/0x140 [ 1996.306229] do_syscall_64+0x3f/0x90 [ 1996.306742] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1996.307425] RIP: 0033:0x7f9566faab19 [ 1996.307904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1996.310131] RSP: 002b:00007f95644ff188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1996.311072] RAX: ffffffffffffffda RBX: 00007f95670be020 RCX: 00007f9566faab19 [ 1996.311946] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000005 [ 1996.312824] RBP: 00007f95644ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1996.313702] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 1996.314600] R13: 00007ffc86a4213f R14: 00007f95644ff300 R15: 0000000000022000 [ 1996.315501] 05:28:00 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 20) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:28:00 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(0xffffffffffffffff, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:28:00 executing program 7: openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x767}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0xee) ftruncate(r1, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x100000001, 0x6c}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)=0x1) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) openat(r2, &(0x7f0000000180)='./file1\x00', 0x0, 0x122) pwritev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000200)='devices.list\x00', 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) [ 1996.600221] FAULT_INJECTION: forcing a failure. [ 1996.600221] name failslab, interval 1, probability 0, space 0, times 0 [ 1996.602003] CPU: 0 PID: 10371 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 1996.603018] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1996.603990] Call Trace: [ 1996.604315] [ 1996.604605] dump_stack_lvl+0xc1/0xf0 [ 1996.605107] should_fail_ex+0x4b4/0x5b0 [ 1996.605625] should_failslab+0x9/0x20 [ 1996.606121] kmem_cache_alloc_bulk+0x72/0x6a0 [ 1996.606701] ? mark_lock.part.0+0xef/0x2f30 [ 1996.607266] napi_skb_cache_get+0xbf/0x130 [ 1996.607808] __napi_build_skb+0x15/0x60 [ 1996.608330] __napi_alloc_skb+0x266/0x700 [ 1996.608868] ? num_digits+0x20/0x80 [ 1996.609350] ? __pfx___napi_alloc_skb+0x10/0x10 [ 1996.609970] ? lock_is_held_type+0x9f/0x120 [ 1996.610547] napi_get_frags+0x66/0x150 [ 1996.611076] napi_get_frags_check+0x2e/0xb0 [ 1996.611624] netif_napi_add_weight+0x4b6/0x970 [ 1996.612250] ? __pfx_tun_napi_poll+0x10/0x10 [ 1996.612985] tun_attach.isra.0+0x10b1/0x1690 [ 1996.613589] ? lock_is_held_type+0x9f/0x120 [ 1996.614180] ? __pfx_tun_flow_cleanup+0x10/0x10 [ 1996.614802] tun_net_init+0x4a1/0x6a0 [ 1996.615316] ? __pfx_tun_net_init+0x10/0x10 [ 1996.615884] register_netdevice+0x554/0x1530 [ 1996.616475] ? __pfx_register_netdevice+0x10/0x10 [ 1996.617112] ? dev_addr_mod+0x29e/0x350 [ 1996.617636] __tun_chr_ioctl+0x21aa/0x4220 [ 1996.618223] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1996.618834] ? __pfx___fget_files+0x10/0x10 [ 1996.619389] ? lock_acquire+0x32/0xc0 [ 1996.619904] ? __pfx___fget_files+0x10/0x10 [ 1996.620477] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1996.621068] __x64_sys_ioctl+0x19e/0x210 [ 1996.621607] do_syscall_64+0x3f/0x90 [ 1996.622128] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1996.622801] RIP: 0033:0x7fe31ab8cb19 [ 1996.623279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1996.625491] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1996.626445] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 1996.627329] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 1996.628213] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 1996.629104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1996.630001] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 1996.630918] 05:28:15 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000040)={0x7, 0x3e}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88b00, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000140)={'veth1_to_bond\x00'}) 05:28:15 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 21) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:28:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(0xffffffffffffffff, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:28:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffded) 05:28:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:28:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = syz_io_uring_complete(0x0) mount_setattr(r4, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r5}}, 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:28:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYBLOB="f75578c8208bfb72a3b33521cc35939e35626c8792ade1a9495f3ab3b8d79e9f61166769c5a779f83e3ccc89287aa56f1625965ad9a10541f8c1428b0d78c8f5216d91d6a472f9389c93baffbedb87f2bdb62ab72c", @ANYRESOCT, @ANYRESDEC=r2, @ANYRES16, @ANYRES32, @ANYRES32=r2], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = syz_io_uring_complete(0x0) mount_setattr(r3, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r4}}, 0x20) openat(r3, &(0x7f0000000040)='./file1\x00', 0x400040, 0x40) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) r7 = syz_io_uring_complete(0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r7}}, 0x20) write$P9_RLOCK(r7, &(0x7f00000000c0)={0x8, 0x35, 0x1}, 0x8) sendfile(r6, r5, 0x0, 0xfffffdef) chdir(&(0x7f0000000080)='./file0\x00') sendfile(r1, r0, 0x0, 0xfffffdef) 05:28:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 4) 05:28:15 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x343880, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) sendfile(r2, r1, 0x0, 0xfffffdef) 05:28:30 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:28:30 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 22) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:28:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x181242, 0x146) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) sendfile(r1, r0, 0x0, 0xfffffdef) 05:28:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:28:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffded) 05:28:30 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 5) 05:28:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = syz_io_uring_complete(0x0) mount_setattr(r4, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r5}}, 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:28:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) [ 2026.467036] FAULT_INJECTION: forcing a failure. [ 2026.467036] name failslab, interval 1, probability 0, space 0, times 0 [ 2026.468334] CPU: 1 PID: 10417 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2026.469151] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2026.469826] Call Trace: [ 2026.470052] [ 2026.470283] dump_stack_lvl+0xc1/0xf0 [ 2026.470740] should_fail_ex+0x4b4/0x5b0 [ 2026.471208] should_failslab+0x9/0x20 [ 2026.471545] __kmem_cache_alloc_node+0x5b/0x310 [ 2026.471952] ? device_add+0xd1f/0x1ab0 [ 2026.472407] kmalloc_trace+0x26/0x120 [ 2026.472750] device_add+0xd1f/0x1ab0 [ 2026.473176] ? dev_set_name+0xbf/0x100 [ 2026.473608] ? __pfx_dev_set_name+0x10/0x10 [ 2026.474013] ? __pfx_device_add+0x10/0x10 [ 2026.474404] ? __init_waitqueue_head+0xca/0x150 [ 2026.474837] netdev_register_kobject+0x17e/0x3b0 [ 2026.475271] register_netdevice+0xd60/0x1530 [ 2026.475734] ? __pfx_register_netdevice+0x10/0x10 [ 2026.476225] ? dev_addr_mod+0x29e/0x350 [ 2026.476577] __tun_chr_ioctl+0x21aa/0x4220 [ 2026.477054] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2026.477473] ? __pfx___fget_files+0x10/0x10 [ 2026.477972] ? lock_acquire+0x32/0xc0 [ 2026.478411] ? __pfx___fget_files+0x10/0x10 [ 2026.478815] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2026.479226] __x64_sys_ioctl+0x19e/0x210 [ 2026.479594] do_syscall_64+0x3f/0x90 [ 2026.479941] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2026.480404] RIP: 0033:0x7fe31ab8cb19 [ 2026.480722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2026.482193] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2026.482832] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 2026.483417] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2026.484005] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2026.484600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2026.485185] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 2026.485801] [ 2026.598608] FAULT_INJECTION: forcing a failure. [ 2026.598608] name failslab, interval 1, probability 0, space 0, times 0 [ 2026.599725] CPU: 1 PID: 10433 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2026.600461] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2026.601177] Call Trace: [ 2026.601426] [ 2026.601644] dump_stack_lvl+0xc1/0xf0 [ 2026.602020] should_fail_ex+0x4b4/0x5b0 [ 2026.602418] ? jbd2__journal_start+0x194/0x6b0 [ 2026.603059] should_failslab+0x9/0x20 [ 2026.603425] kmem_cache_alloc+0x5a/0x320 [ 2026.603902] jbd2__journal_start+0x194/0x6b0 [ 2026.604282] __ext4_journal_start_sb+0x4c2/0x6f0 [ 2026.604660] ? ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 2026.605098] ? ext4_meta_trans_blocks+0x252/0x310 [ 2026.605593] ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 2026.606049] ? rcu_read_lock_sched_held+0x42/0x80 [ 2026.606584] ? __mark_inode_dirty+0x249/0xee0 [ 2026.606971] ? __pfx_ext4_alloc_file_blocks.isra.0+0x10/0x10 [ 2026.607564] ? __mnt_drop_write_file+0x4e/0xf0 [ 2026.607938] ? __pfx_file_modified_flags+0x10/0x10 [ 2026.608339] ? lock_is_held_type+0x9f/0x120 [ 2026.608705] ext4_fallocate+0x1fc5/0x3f50 [ 2026.609086] ? __pfx_ext4_fallocate+0x10/0x10 [ 2026.609562] ? __x64_sys_fallocate+0xd3/0x140 [ 2026.609918] ? lock_is_held_type+0x9f/0x120 [ 2026.610312] ? __pfx_ext4_fallocate+0x10/0x10 [ 2026.610751] vfs_fallocate+0x48d/0xe30 [ 2026.611142] __x64_sys_fallocate+0xd3/0x140 [ 2026.611486] do_syscall_64+0x3f/0x90 [ 2026.611804] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2026.612344] RIP: 0033:0x7f9566faab19 [ 2026.612638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2026.614249] RSP: 002b:00007f95644ff188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2026.614874] RAX: ffffffffffffffda RBX: 00007f95670be020 RCX: 00007f9566faab19 [ 2026.615466] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000005 [ 2026.616149] RBP: 00007f95644ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2026.616679] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 2026.617215] R13: 00007ffc86a4213f R14: 00007f95644ff300 R15: 0000000000022000 [ 2026.617770] 05:28:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:28:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = syz_io_uring_complete(0x0) mount_setattr(r4, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r5}}, 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:28:45 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x11) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r3}}, 0x20) syz_io_uring_setup(0x65a2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:28:45 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 23) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:28:45 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 6) 05:28:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:28:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:28:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r5, r2, 0x0, 0xfffffdef) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2041.648368] FAULT_INJECTION: forcing a failure. [ 2041.648368] name failslab, interval 1, probability 0, space 0, times 0 [ 2041.649299] CPU: 0 PID: 10466 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2041.649826] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2041.650346] Call Trace: [ 2041.650536] [ 2041.650694] dump_stack_lvl+0xc1/0xf0 [ 2041.650978] should_fail_ex+0x4b4/0x5b0 [ 2041.651259] ? jbd2__journal_start+0x194/0x6b0 [ 2041.651580] should_failslab+0x9/0x20 [ 2041.651846] kmem_cache_alloc+0x5a/0x320 [ 2041.652127] jbd2__journal_start+0x194/0x6b0 [ 2041.652434] __ext4_journal_start_sb+0x4c2/0x6f0 [ 2041.652769] ? ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 2041.653136] ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 2041.653501] ? __pfx_ext4_alloc_file_blocks.isra.0+0x10/0x10 [ 2041.653882] ? __mnt_drop_write_file+0x4e/0xf0 [ 2041.654191] ? __pfx_file_modified_flags+0x10/0x10 [ 2041.654543] ? lock_is_held_type+0x9f/0x120 [ 2041.654866] ext4_fallocate+0x1fc5/0x3f50 [ 2041.655174] ? __pfx_ext4_fallocate+0x10/0x10 [ 2041.655506] ? __x64_sys_fallocate+0xd3/0x140 [ 2041.655871] ? lock_is_held_type+0x9f/0x120 [ 2041.656183] ? __pfx_ext4_fallocate+0x10/0x10 [ 2041.656508] vfs_fallocate+0x48d/0xe30 [ 2041.656790] __x64_sys_fallocate+0xd3/0x140 [ 2041.657098] do_syscall_64+0x3f/0x90 [ 2041.657377] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2041.657747] RIP: 0033:0x7f9566faab19 [ 2041.658010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2041.659168] RSP: 002b:00007f95644ff188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2041.659660] RAX: ffffffffffffffda RBX: 00007f95670be020 RCX: 00007f9566faab19 [ 2041.660115] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000005 [ 2041.660578] RBP: 00007f95644ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2041.661034] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 2041.661492] R13: 00007ffc86a4213f R14: 00007f95644ff300 R15: 0000000000022000 [ 2041.661964] 05:28:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:28:46 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 24) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:28:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:28:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:28:46 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 25) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:28:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:28:46 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 7) 05:28:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = syz_io_uring_complete(0x0) mount_setattr(r4, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r5}}, 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:28:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:28:46 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x3f, 0x8, 0x7f, 0x77, 0x0, 0x1ff, 0x1, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x100000006, 0x8000000000000000}, 0x8020, 0x7, 0x4, 0x1, 0x3, 0x13, 0x5, 0x0, 0x3, 0x0, 0x7f}, 0x0, 0x2, 0xffffffffffffffff, 0x2) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) [ 2042.746986] FAULT_INJECTION: forcing a failure. [ 2042.746986] name failslab, interval 1, probability 0, space 0, times 0 [ 2042.748485] CPU: 1 PID: 10506 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2042.749527] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2042.750556] Call Trace: [ 2042.750889] [ 2042.751190] dump_stack_lvl+0xc1/0xf0 [ 2042.751720] should_fail_ex+0x4b4/0x5b0 [ 2042.752300] ? jbd2__journal_start+0x194/0x6b0 [ 2042.753093] should_failslab+0x9/0x20 [ 2042.753604] kmem_cache_alloc+0x5a/0x320 [ 2042.754145] jbd2__journal_start+0x194/0x6b0 [ 2042.754899] __ext4_journal_start_sb+0x4c2/0x6f0 [ 2042.755520] ? ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 2042.756392] ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 2042.757092] ? __pfx_ext4_alloc_file_blocks.isra.0+0x10/0x10 [ 2042.757842] ? __mnt_drop_write_file+0x4e/0xf0 [ 2042.758460] ? __pfx_file_modified_flags+0x10/0x10 [ 2042.759154] ? lock_is_held_type+0x9f/0x120 [ 2042.759761] ext4_fallocate+0x1fc5/0x3f50 [ 2042.760351] ? __pfx_ext4_fallocate+0x10/0x10 [ 2042.760965] ? __x64_sys_fallocate+0xd3/0x140 [ 2042.761572] ? lock_is_held_type+0x9f/0x120 [ 2042.762154] ? __pfx_ext4_fallocate+0x10/0x10 [ 2042.762775] vfs_fallocate+0x48d/0xe30 [ 2042.763306] __x64_sys_fallocate+0xd3/0x140 [ 2042.763877] do_syscall_64+0x3f/0x90 [ 2042.764395] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2042.765077] RIP: 0033:0x7f9566faab19 [ 2042.765563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2042.767851] RSP: 002b:00007f95644ff188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2042.768810] RAX: ffffffffffffffda RBX: 00007f95670be020 RCX: 00007f9566faab19 [ 2042.769699] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000005 [ 2042.770619] RBP: 00007f95644ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2042.771531] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000001 [ 2042.772425] R13: 00007ffc86a4213f R14: 00007f95644ff300 R15: 0000000000022000 [ 2042.773348] 05:28:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:28:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:28:47 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x1d1040, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) sendfile(r2, r1, 0x0, 0xfffffdef) sendfile(r3, r0, &(0x7f0000000040)=0x8, 0x5) 05:28:47 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 26) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:28:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) faccessat(r3, &(0x7f0000000040)='./file1/file0\x00', 0x100) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r2, 0x0, 0xfffffdef) sendfile(r1, r0, 0x0, 0xfffffdef) 05:28:47 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000004, 0x100010, r1, 0x0) syz_io_uring_setup(0x4efe, &(0x7f0000000440), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x0) fcntl$setlease(r5, 0x400, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r5, 0x0, &(0x7f0000000340)="b10477ef79fcf4342613df6a3f8361befff4fea9151674ccb63bb7cc639bb940377a4cb6af56f15aa03b28da39c18b", 0x2f, 0x40012021, 0x0, {0x0, r6}}, 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) syz_io_uring_submit(r2, r4, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4004, @fd=r0, 0x6, 0xfff, 0xa092, 0x10, 0x1, {0x2, r6}}, 0x2) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000000c0)=""/26, &(0x7f0000000100)=0x1a) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="00010000", @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="e200330080040000000211000001080211"], 0x100}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r7, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7f}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x40) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 05:28:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x0, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:28:47 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 27) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:28:47 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:28:47 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 8) 05:28:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:28:48 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x0, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:28:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:29:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:29:03 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:29:03 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x0, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:29:03 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x216c3, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:29:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = syz_io_uring_complete(0x0) mount_setattr(r4, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r5}}, 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:29:03 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 28) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:29:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) stat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000700), 0x408080, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r5, 0x80047213, &(0x7f0000000740)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 05:29:03 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 9) 05:29:03 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:29:03 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/msg\x00', 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:29:03 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x0, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:29:03 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:29:03 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 29) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:29:04 executing program 7: ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:29:04 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x0, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:29:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:29:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4242, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x2, 0x104) sendfile(r3, r2, 0x0, 0xfffffdef) sendfile(r1, r0, 0x0, 0xfffffdef) 05:29:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:29:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = syz_io_uring_complete(0x0) mount_setattr(r4, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r5}}, 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:29:16 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x4fc8, &(0x7f0000000000)={0x0, 0x8200000, 0x20, 0x0, 0x39a}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'wg2\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'veth0_to_hsr\x00'}) 05:29:16 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x0, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:29:16 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 10) 05:29:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:29:16 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 30) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:29:16 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x0, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:29:16 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x6ae4) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:29:16 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 31) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:29:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:29:16 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x0, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:29:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:29:17 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getuid() r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(r1, 0x6e81, 0xa1dd, 0x1, &(0x7f0000000080)={[0x10001]}, 0x8) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:29:17 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 32) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) [ 2073.331871] FAULT_INJECTION: forcing a failure. [ 2073.331871] name failslab, interval 1, probability 0, space 0, times 0 [ 2073.333850] CPU: 1 PID: 10655 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2073.334967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2073.336145] Call Trace: [ 2073.336470] [ 2073.336783] dump_stack_lvl+0xc1/0xf0 [ 2073.337392] should_fail_ex+0x4b4/0x5b0 [ 2073.337920] ? kstrdup_const+0x57/0x80 [ 2073.338424] should_failslab+0x9/0x20 [ 2073.338929] __kmem_cache_alloc_node+0x5b/0x310 [ 2073.339535] ? kstrdup_const+0x57/0x80 [ 2073.340041] ? kstrdup_const+0x57/0x80 [ 2073.340546] __kmalloc_node_track_caller+0x43/0xb0 [ 2073.341172] kstrdup+0x3f/0x80 [ 2073.341593] kstrdup_const+0x57/0x80 [ 2073.342070] __kernfs_new_node+0x9d/0x870 [ 2073.342611] ? __pfx___lock_acquire+0x10/0x10 [ 2073.343206] ? kernfs_add_one+0x175/0x4f0 [ 2073.343724] ? lock_release+0x1e3/0x710 [ 2073.344242] ? __pfx___kernfs_new_node+0x10/0x10 [ 2073.344856] ? __pfx_lock_release+0x10/0x10 [ 2073.345409] ? kernfs_add_one+0x376/0x4f0 [ 2073.346124] ? kernfs_add_one+0x376/0x4f0 [ 2073.346955] ? lock_is_held_type+0x9f/0x120 [ 2073.347643] ? find_held_lock+0x2c/0x110 [ 2073.348294] ? sysfs_do_create_link_sd+0x82/0x140 [ 2073.349060] ? lock_release+0x1e3/0x710 [ 2073.349846] kernfs_new_node+0x97/0x120 [ 2073.350480] kernfs_create_link+0xcf/0x240 [ 2073.351190] sysfs_do_create_link_sd+0x90/0x140 [ 2073.351947] sysfs_create_link+0x63/0xc0 [ 2073.352594] device_add+0x575/0x1ab0 [ 2073.353202] ? __pfx_device_add+0x10/0x10 [ 2073.353872] ? __init_waitqueue_head+0xca/0x150 [ 2073.354635] netdev_register_kobject+0x17e/0x3b0 [ 2073.355424] register_netdevice+0xd60/0x1530 [ 2073.356023] ? __pfx_register_netdevice+0x10/0x10 [ 2073.356668] ? dev_addr_mod+0x29e/0x350 [ 2073.357193] __tun_chr_ioctl+0x21aa/0x4220 [ 2073.357763] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2073.358367] ? __pfx___fget_files+0x10/0x10 [ 2073.358926] ? lock_acquire+0x32/0xc0 [ 2073.359435] ? __pfx___fget_files+0x10/0x10 [ 2073.360016] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2073.360604] __x64_sys_ioctl+0x19e/0x210 [ 2073.361135] do_syscall_64+0x3f/0x90 [ 2073.361634] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2073.362297] RIP: 0033:0x7fe31ab8cb19 [ 2073.362770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2073.364934] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2073.365864] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 2073.366725] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2073.367617] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2073.368484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2073.369351] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 2073.370258] 05:29:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:29:30 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 11) 05:29:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) syz_io_uring_complete(0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:29:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x0, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:29:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:29:30 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) r3 = eventfd2(0x1, 0x80000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r5, 0x2) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000500), 0x68000, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r8, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r8, r7, 0x0, 0xffff7def) r9 = syz_io_uring_complete(0x0) mount_setattr(r8, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r9}}, 0x20) io_submit(0x0, 0x6, &(0x7f00000006c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xff, 0xffffffffffffffff, &(0x7f0000000100)="56d359d3584fd9c136a2be8e53a92c5ea9ab016b3b06618cd1c723008579c1323c38b0c2c5d21ad76fa3802ef479f10812ac929833fe60b21158c18e401926cb853cd20dbf2877ece7471c68efa76efa1c58a4668fe971ed217ac4ce4631e1b9", 0x60, 0x20}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x3ff, 0xffffffffffffffff, &(0x7f00000001c0)="f264792150d1f35476534aa8c3d3914f79a5e74c8cc1069aefa7b34292967ba9f9e1b7b508642f39af9b2f76bc48362c888cf842d76082b5a379a21467acd90a3e6642db9409a5d2821ef2c4f44d23e3ee118920308a098004fe97cd3632fc5e3a50f9fcbf7c3accdb506bcd609fd150198f968cf9717992fa5c5305ad", 0x7d, 0x8001, 0x0, 0x1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x7, r2, &(0x7f0000000300)="1fa79a0e2173851a103f00c9010bb7e94d9bd8e67fd21ffb34cdecbd", 0x1c, 0x1, 0x0, 0x1, r3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x1000, r4, &(0x7f00000003c0)="effd0a0e970cb68094a583ce42d9c6cafd0e31a67f94f74c98ad697d0caa0c5841a59599f9809ad6b708403749fcff2b99e6f66652d04bd18bd2a817025d5d3ef313af95f0b9adb6625a09763c3050d0bbffcd9ca7641897c176f461b2f265256b568b1d7cc6e1a22f2b1a9223bc40ab98b5afbf8ebecbe9c30b71885aea51e0971d3e2b07c50dc351722e95c5bcf76776f17fd4282a892fa1cba79a6f5129277a1f1f1d8fcf544c97e9b658fc178e0827c5074bd7890fc22d61b34912cfdb8cea9c45f47f5d60ec9005f59813af4e28c02e3895461adc3560abd0f13be7209a8e0bb90b5d5798bf8a907f062ada4e6be54b56c45e", 0xf5, 0x1400000, 0x0, 0x2, r5}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x2, r6, &(0x7f0000000540)="5f39047208426a478e2dacdb4bc8fa8319510b267e57fee0608eb52d952f38053622a817fb3bc3fe51422b934f797181827d3a2b30f249252e3df638ef750deb2e1c6200", 0x44, 0x7ff, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0xf800, r9, &(0x7f0000000600)="404186c5157de90149b57e20432a8da95ec37a72693819255a1e800be5272fe026b6cc23e28263229b131ed9feddd995955ab50884c1b284c7bdf6edfaaf322d9558a8cd2746f47a937b2fea74eb0a6f112ef9adb25d96c385b355deb0", 0x5d, 0x3ff, 0x0, 0x1}]) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:29:30 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 33) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:29:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b146, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x401}}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000240)={0x19, 0x5, {0x800000, @struct={0xffc00000, 0x1}, 0x0, 0x9, 0x50, 0x81, 0x1, 0x6c5, 0x40, @usage=0x4, 0x5, 0x0, [0xa, 0x7, 0x7fff, 0x20, 0x0, 0x5]}, {0x7, @usage=0x200, 0x0, 0x2, 0x5, 0x10000, 0x1, 0x0, 0x81, @struct={0x5, 0x2}, 0x9, 0x6, [0x7, 0x4, 0x1ff, 0xfda, 0x9, 0x3]}, {0x401, @struct={0x2, 0x7fffffff}, 0x0, 0x8, 0x6, 0x10000, 0x80, 0x7fff, 0x407, @struct={0x40, 0x237}, 0x81, 0x3, [0x2e83, 0x8000, 0x2, 0x3, 0x4, 0x7]}, {0x7, 0xf4, 0x7}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000640)={r4, 0xfffffffffffffff9, 0x0, 0x1}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r6, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[@ANYRESOCT=r6], 0x220) sendfile(r5, r3, 0x0, 0xfffffdef) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2086.890856] FAULT_INJECTION: forcing a failure. [ 2086.890856] name failslab, interval 1, probability 0, space 0, times 0 [ 2086.891992] CPU: 1 PID: 10674 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2086.892538] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2086.893095] Call Trace: [ 2086.893279] [ 2086.893444] dump_stack_lvl+0xc1/0xf0 [ 2086.893735] should_fail_ex+0x4b4/0x5b0 [ 2086.894025] ? kstrdup_const+0x57/0x80 [ 2086.894297] should_failslab+0x9/0x20 [ 2086.894571] __kmem_cache_alloc_node+0x5b/0x310 [ 2086.894896] ? kstrdup_const+0x57/0x80 [ 2086.895176] ? kstrdup_const+0x57/0x80 [ 2086.895443] __kmalloc_node_track_caller+0x43/0xb0 [ 2086.895791] kstrdup+0x3f/0x80 [ 2086.896021] kstrdup_const+0x57/0x80 [ 2086.896281] __kernfs_new_node+0x9d/0x870 [ 2086.896573] ? __pfx___lock_acquire+0x10/0x10 [ 2086.896897] ? kernfs_add_one+0x175/0x4f0 [ 2086.897192] ? lock_release+0x1e3/0x710 [ 2086.897481] ? __pfx___kernfs_new_node+0x10/0x10 [ 2086.897815] ? __pfx_lock_release+0x10/0x10 [ 2086.898114] ? kernfs_add_one+0x376/0x4f0 [ 2086.898403] ? kernfs_add_one+0x376/0x4f0 [ 2086.898691] ? lock_is_held_type+0x9f/0x120 [ 2086.898998] ? find_held_lock+0x2c/0x110 [ 2086.899301] ? sysfs_do_create_link_sd+0x82/0x140 [ 2086.899644] ? lock_release+0x1e3/0x710 [ 2086.899947] kernfs_new_node+0x97/0x120 [ 2086.900270] kernfs_create_link+0xcf/0x240 [ 2086.900693] sysfs_do_create_link_sd+0x90/0x140 [ 2086.901047] sysfs_create_link+0x63/0xc0 [ 2086.901353] device_add+0x575/0x1ab0 [ 2086.901644] ? __pfx_device_add+0x10/0x10 [ 2086.901959] ? __init_waitqueue_head+0xca/0x150 [ 2086.902316] netdev_register_kobject+0x17e/0x3b0 [ 2086.902792] register_netdevice+0xd60/0x1530 [ 2086.903225] ? __pfx_register_netdevice+0x10/0x10 [ 2086.903627] ? dev_addr_mod+0x29e/0x350 [ 2086.904038] __tun_chr_ioctl+0x21aa/0x4220 [ 2086.904352] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2086.904693] ? __pfx___fget_files+0x10/0x10 [ 2086.905104] ? lock_acquire+0x32/0xc0 [ 2086.905448] ? __pfx___fget_files+0x10/0x10 [ 2086.905853] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2086.906271] __x64_sys_ioctl+0x19e/0x210 [ 2086.906581] do_syscall_64+0x3f/0x90 [ 2086.906863] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2086.907238] RIP: 0033:0x7fe31ab8cb19 [ 2086.907509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2086.908776] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2086.909374] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 2086.909886] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2086.910403] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2086.910916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2086.911548] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 2086.912125] [ 2086.932972] FAULT_INJECTION: forcing a failure. [ 2086.932972] name failslab, interval 1, probability 0, space 0, times 0 [ 2086.935304] CPU: 0 PID: 10677 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2086.936806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2086.938175] Call Trace: [ 2086.938626] [ 2086.939027] dump_stack_lvl+0xc1/0xf0 [ 2086.939737] should_fail_ex+0x4b4/0x5b0 [ 2086.940446] ? jbd2__journal_start+0x194/0x6b0 [ 2086.941236] should_failslab+0x9/0x20 [ 2086.941906] kmem_cache_alloc+0x5a/0x320 [ 2086.942638] jbd2__journal_start+0x194/0x6b0 [ 2086.943445] __ext4_journal_start_sb+0x4c2/0x6f0 [ 2086.944263] ? ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 2086.945216] ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 2086.946140] ? __pfx_ext4_alloc_file_blocks.isra.0+0x10/0x10 [ 2086.947223] ? __mnt_drop_write_file+0x4e/0xf0 [ 2086.948024] ? __pfx_file_modified_flags+0x10/0x10 [ 2086.948875] ? inode_newsize_ok+0x69/0x210 [ 2086.949609] ? inode_newsize_ok+0xb7/0x210 [ 2086.950322] ext4_fallocate+0x1fc5/0x3f50 [ 2086.951097] ? __pfx_ext4_fallocate+0x10/0x10 [ 2086.951722] ? __x64_sys_fallocate+0xd3/0x140 [ 2086.952322] ? lock_is_held_type+0x9f/0x120 [ 2086.952905] ? __pfx_ext4_fallocate+0x10/0x10 [ 2086.953503] vfs_fallocate+0x48d/0xe30 [ 2086.954026] __x64_sys_fallocate+0xd3/0x140 [ 2086.954595] do_syscall_64+0x3f/0x90 [ 2086.955126] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2086.955814] RIP: 0033:0x7f9566faab19 [ 2086.956302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2086.958497] RSP: 002b:00007f95644ff188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2086.959431] RAX: ffffffffffffffda RBX: 00007f95670be020 RCX: 00007f9566faab19 [ 2086.960333] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000005 [ 2086.961233] RBP: 00007f95644ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2086.962131] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2086.963039] R13: 00007ffc86a4213f R14: 00007f95644ff300 R15: 0000000000022000 [ 2086.963982] 05:29:31 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 34) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:29:31 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x0, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) [ 2087.101935] FAULT_INJECTION: forcing a failure. [ 2087.101935] name failslab, interval 1, probability 0, space 0, times 0 [ 2087.103236] CPU: 1 PID: 10687 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2087.103800] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2087.104355] Call Trace: [ 2087.104612] [ 2087.104816] dump_stack_lvl+0xc1/0xf0 [ 2087.105160] should_fail_ex+0x4b4/0x5b0 [ 2087.105577] ? __kernfs_new_node+0xd4/0x870 [ 2087.105891] should_failslab+0x9/0x20 [ 2087.106214] kmem_cache_alloc+0x5a/0x320 [ 2087.106618] __kernfs_new_node+0xd4/0x870 [ 2087.106913] ? __pfx___lock_acquire+0x10/0x10 [ 2087.107310] ? kernfs_add_one+0x175/0x4f0 [ 2087.107677] ? lock_release+0x1e3/0x710 [ 2087.107980] ? __pfx___kernfs_new_node+0x10/0x10 [ 2087.108364] ? __pfx_lock_release+0x10/0x10 [ 2087.108731] ? kernfs_add_one+0x376/0x4f0 [ 2087.109012] ? kernfs_add_one+0x376/0x4f0 [ 2087.109305] ? lock_is_held_type+0x9f/0x120 [ 2087.109781] ? find_held_lock+0x2c/0x110 [ 2087.110063] ? sysfs_do_create_link_sd+0x82/0x140 [ 2087.110493] ? lock_release+0x1e3/0x710 [ 2087.110953] kernfs_new_node+0x97/0x120 [ 2087.111327] kernfs_create_link+0xcf/0x240 [ 2087.111624] sysfs_do_create_link_sd+0x90/0x140 [ 2087.111949] sysfs_create_link+0x63/0xc0 [ 2087.112265] device_add+0x575/0x1ab0 [ 2087.112641] ? __pfx_device_add+0x10/0x10 [ 2087.112941] ? __init_waitqueue_head+0xca/0x150 [ 2087.113309] netdev_register_kobject+0x17e/0x3b0 [ 2087.113736] register_netdevice+0xd60/0x1530 [ 2087.114071] ? __pfx_register_netdevice+0x10/0x10 [ 2087.114522] ? dev_addr_mod+0x29e/0x350 [ 2087.114877] __tun_chr_ioctl+0x21aa/0x4220 [ 2087.115260] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2087.115588] ? __pfx___fget_files+0x10/0x10 [ 2087.115892] ? lock_acquire+0x32/0xc0 [ 2087.116600] ? __pfx___fget_files+0x10/0x10 [ 2087.117381] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2087.118207] __x64_sys_ioctl+0x19e/0x210 [ 2087.118873] do_syscall_64+0x3f/0x90 [ 2087.119508] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2087.120450] RIP: 0033:0x7fe31ab8cb19 [ 2087.121080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2087.124069] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2087.125283] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 2087.126327] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2087.127333] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2087.128325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2087.129304] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 2087.130328] 05:29:45 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 35) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:29:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:29:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x0, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:29:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:29:45 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 12) 05:29:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) syz_io_uring_complete(0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:29:45 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'rose0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x7, 0x1, &(0x7f0000000140)="f8d6353f6cf449e13b2056001c7937f78bac28eb618f4b3b9048a955ab38ffed8588c77557df1bed561fb614188b8c67762021", 0x7, 0x0, 0x1, {0x3}}, 0x9) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:29:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) ioctl$VT_ACTIVATE(r3, 0x5606, 0x7a30800000000000) sendfile(r3, r2, 0x0, 0xfffffdef) sendfile(r1, r0, 0x0, 0xfffffdef) 05:29:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0xd1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) sendfile(r1, r0, 0x0, 0xfffffdef) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200, 0x12) 05:29:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:29:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:29:59 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 36) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:29:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:29:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:29:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x0, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:29:59 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 13) 05:29:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) [ 2114.992967] FAULT_INJECTION: forcing a failure. [ 2114.992967] name failslab, interval 1, probability 0, space 0, times 0 [ 2114.994567] CPU: 1 PID: 10741 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2114.995820] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2114.996870] Call Trace: [ 2114.997234] [ 2114.997559] dump_stack_lvl+0xc1/0xf0 [ 2114.998184] should_fail_ex+0x4b4/0x5b0 [ 2114.998762] ? jbd2__journal_start+0x194/0x6b0 [ 2114.999420] should_failslab+0x9/0x20 [ 2114.999945] kmem_cache_alloc+0x5a/0x320 [ 2115.000530] jbd2__journal_start+0x194/0x6b0 [ 2115.001170] __ext4_journal_start_sb+0x4c2/0x6f0 [ 2115.001834] ? ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 2115.002595] ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 2115.003343] ? __pfx_ext4_alloc_file_blocks.isra.0+0x10/0x10 [ 2115.004144] ? __mnt_drop_write_file+0x4e/0xf0 [ 2115.004789] ? __pfx_file_modified_flags+0x10/0x10 [ 2115.005491] ? lock_is_held_type+0x9f/0x120 [ 2115.006118] ext4_fallocate+0x1fc5/0x3f50 [ 2115.006679] ? __pfx_ext4_fallocate+0x10/0x10 [ 2115.007323] ? __x64_sys_fallocate+0xd3/0x140 [ 2115.007961] ? lock_is_held_type+0x9f/0x120 [ 2115.008576] ? __pfx_ext4_fallocate+0x10/0x10 [ 2115.009217] vfs_fallocate+0x48d/0xe30 [ 2115.009773] __x64_sys_fallocate+0xd3/0x140 [ 2115.010381] do_syscall_64+0x3f/0x90 [ 2115.010929] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2115.011688] RIP: 0033:0x7f9566faab19 05:29:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) [ 2115.011713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2115.011744] RSP: 002b:00007f95644ff188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2115.011776] RAX: ffffffffffffffda RBX: 00007f95670be020 RCX: 00007f9566faab19 [ 2115.011798] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000005 [ 2115.011818] RBP: 00007f95644ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2115.011838] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2115.011859] R13: 00007ffc86a4213f R14: 00007f95644ff300 R15: 0000000000022000 [ 2115.011911] 05:29:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:29:59 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 37) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:29:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x0, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:29:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:29:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:29:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x0, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:30:12 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000140)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8000, 0x1, @perf_bp={&(0x7f0000000080), 0x9}, 0x3800, 0x0, 0x6, 0x6, 0x3e2, 0xbbb, 0xff00, 0x0, 0xa85, 0x0, 0x7f}, 0x0, 0xa, 0xffffffffffffffff, 0x9) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:30:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = syz_io_uring_complete(0x0) mount_setattr(r3, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r4}}, 0x20) r5 = openat(r3, &(0x7f0000000080)='./file0\x00', 0x0, 0x5e) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r1, r0, 0x0, 0xfffffdef) 05:30:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x0, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:30:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:30:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:30:12 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 14) 05:30:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:30:12 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 38) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:30:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x0, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:30:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x0, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) [ 2128.392318] FAULT_INJECTION: forcing a failure. [ 2128.392318] name failslab, interval 1, probability 0, space 0, times 0 [ 2128.393188] CPU: 0 PID: 10786 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2128.393734] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2128.394277] Call Trace: [ 2128.394461] [ 2128.394618] dump_stack_lvl+0xc1/0xf0 [ 2128.394903] should_fail_ex+0x4b4/0x5b0 [ 2128.395238] ? __kernfs_new_node+0xd4/0x870 [ 2128.395648] should_failslab+0x9/0x20 [ 2128.395920] kmem_cache_alloc+0x5a/0x320 [ 2128.396205] ? kernfs_add_one+0x376/0x4f0 [ 2128.396495] __kernfs_new_node+0xd4/0x870 [ 2128.396787] ? kernfs_add_one+0x175/0x4f0 [ 2128.397076] ? lock_release+0x1e3/0x710 [ 2128.397359] ? __pfx___kernfs_new_node+0x10/0x10 [ 2128.397699] ? __pfx_lock_release+0x10/0x10 [ 2128.398004] ? kernfs_add_one+0x376/0x4f0 [ 2128.398288] ? kernfs_add_one+0x376/0x4f0 [ 2128.398575] ? down_write+0x11a/0x1f0 [ 2128.398859] ? up_write+0x196/0x510 [ 2128.399120] kernfs_new_node+0x97/0x120 [ 2128.399397] __kernfs_create_file+0x55/0x350 [ 2128.399716] sysfs_add_file_mode_ns+0x21c/0x440 [ 2128.400050] ? __pfx_dev_attr_store+0x10/0x10 [ 2128.400376] internal_create_group+0x322/0xb90 [ 2128.400705] ? __pfx_internal_create_group+0x10/0x10 [ 2128.401060] ? kernfs_add_one+0x17a/0x4f0 [ 2128.401350] ? kernfs_create_link+0x1bb/0x240 [ 2128.401668] internal_create_groups.part.0+0x90/0x140 [ 2128.402041] sysfs_create_groups+0x29/0x50 [ 2128.402344] device_add+0x60f/0x1ab0 [ 2128.402616] ? __pfx_device_add+0x10/0x10 [ 2128.402913] ? __init_waitqueue_head+0xca/0x150 [ 2128.403260] netdev_register_kobject+0x17e/0x3b0 [ 2128.403603] register_netdevice+0xd60/0x1530 [ 2128.403943] ? __pfx_register_netdevice+0x10/0x10 [ 2128.404283] ? dev_addr_mod+0x29e/0x350 [ 2128.404566] __tun_chr_ioctl+0x21aa/0x4220 [ 2128.404875] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2128.405200] ? __pfx___fget_files+0x10/0x10 [ 2128.405516] ? lock_acquire+0x32/0xc0 [ 2128.405812] ? __pfx___fget_files+0x10/0x10 [ 2128.406147] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2128.406489] __x64_sys_ioctl+0x19e/0x210 [ 2128.406798] do_syscall_64+0x3f/0x90 [ 2128.407086] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2128.407484] RIP: 0033:0x7fe31ab8cb19 [ 2128.407768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2128.409085] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2128.409648] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 2128.410166] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2128.410689] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2128.411215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2128.411733] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 2128.412247] 05:30:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:30:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) [ 2128.465704] FAULT_INJECTION: forcing a failure. [ 2128.465704] name failslab, interval 1, probability 0, space 0, times 0 [ 2128.467518] CPU: 1 PID: 10792 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2128.468611] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2128.469779] Call Trace: [ 2128.470147] [ 2128.470470] dump_stack_lvl+0xc1/0xf0 [ 2128.471034] should_fail_ex+0x4b4/0x5b0 [ 2128.471630] ? ext4_mb_new_blocks+0x666/0x4ad0 [ 2128.472283] should_failslab+0x9/0x20 [ 2128.472922] kmem_cache_alloc+0x5a/0x320 [ 2128.473520] ? __mark_inode_dirty+0x249/0xee0 [ 2128.474187] ext4_mb_new_blocks+0x666/0x4ad0 [ 2128.474830] ? lock_is_held_type+0x9f/0x120 [ 2128.475462] ? ext4_cache_extents+0x148/0x2d0 [ 2128.476132] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 2128.476810] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2128.477500] ext4_ext_map_blocks+0x2004/0x5dd0 [ 2128.478180] ? __pfx___lock_acquire+0x10/0x10 [ 2128.478888] ? __pfx___lock_acquire+0x10/0x10 [ 2128.479554] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 2128.480267] ? lock_acquire.part.0+0xec/0x320 [ 2128.480929] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2128.481626] ? ext4_map_blocks+0x704/0x19e0 [ 2128.482220] ? rcu_read_lock_sched_held+0x42/0x80 [ 2128.482897] ? trace_lock_acquire+0x170/0x1e0 [ 2128.483545] ? ext4_map_blocks+0x704/0x19e0 [ 2128.484149] ? lock_acquire+0x32/0xc0 [ 2128.484704] ? ext4_map_blocks+0x704/0x19e0 [ 2128.485312] ? __pfx_down_write+0x10/0x10 [ 2128.485903] ? ext4_es_lookup_extent+0xc8/0xc90 [ 2128.486589] ext4_map_blocks+0x776/0x19e0 [ 2128.487171] ? rcu_read_lock_sched_held+0x42/0x80 [ 2128.487857] ? trace_jbd2_handle_start+0x1b3/0x270 [ 2128.488552] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2128.489187] ? jbd2__journal_start+0xf7/0x6b0 [ 2128.489837] ? __ext4_journal_start_sb+0x4c2/0x6f0 [ 2128.490518] ? __ext4_journal_start_sb+0x1e0/0x6f0 [ 2128.491203] ? ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 2128.491983] ext4_alloc_file_blocks.isra.0+0x2df/0xbd0 [ 2128.492750] ? __pfx_ext4_alloc_file_blocks.isra.0+0x10/0x10 [ 2128.493533] ? __mnt_drop_write_file+0x4e/0xf0 [ 2128.494176] ? __pfx_file_modified_flags+0x10/0x10 [ 2128.494861] ? lock_is_held_type+0x9f/0x120 [ 2128.495470] ext4_fallocate+0x1fc5/0x3f50 [ 2128.496080] ? __pfx_ext4_fallocate+0x10/0x10 [ 2128.496704] ? __x64_sys_fallocate+0xd3/0x140 [ 2128.497311] ? lock_is_held_type+0x9f/0x120 [ 2128.497906] ? __pfx_ext4_fallocate+0x10/0x10 [ 2128.498533] vfs_fallocate+0x48d/0xe30 [ 2128.499088] __x64_sys_fallocate+0xd3/0x140 [ 2128.499692] do_syscall_64+0x3f/0x90 [ 2128.500224] entry_SYSCALL_64_after_hwframe+0x72/0xdc 05:30:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) [ 2128.500933] RIP: 0033:0x7f9566faab19 [ 2128.501622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2128.503924] RSP: 002b:00007f95644ff188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2128.504906] RAX: ffffffffffffffda RBX: 00007f95670be020 RCX: 00007f9566faab19 [ 2128.505839] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000005 [ 2128.506767] RBP: 00007f95644ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2128.507713] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2128.508638] R13: 00007ffc86a4213f R14: 00007f95644ff300 R15: 0000000000022000 [ 2128.509606] 05:30:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:30:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x0, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:30:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:30:12 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) syz_io_uring_setup(0x4efe, &(0x7f0000000440), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x16c8, &(0x7f0000000080)={0x0, 0xca6f, 0x4, 0x1, 0x227, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x0) fcntl$setlease(r5, 0x400, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r5, 0x0, &(0x7f0000000340)="b10477ef79fcf4342613df6a3f8361befff4fea9151674ccb63bb7cc639bb940377a4cb6af56f15aa03b28da39c18b", 0x2f, 0x40012021, 0x0, {0x0, r6}}, 0x2) syz_io_uring_submit(r2, r4, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@caif=@rfm={0x25, 0x8, "9bda67dde23fa76530db30e9d658c469"}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:30:25 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 39) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:30:25 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x0, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:30:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:30:25 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4efe, &(0x7f0000000440), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = eventfd(0x7) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)={0x14, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0']}, 0x14}], 0x1}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0x6, 0x3ad0c852, {0x0, r3}, 0x0, 0x4, 0x0, {0x0, 0x0, r4}}, 0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:30:25 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 15) 05:30:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:30:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x400800, 0x52) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) sendfile(r1, r0, 0x0, 0xfffffdef) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x20480, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x100, &(0x7f0000000300)={0x4, 0x71, 0x80000, {r1}}, 0x20) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000240)={0x0, 0xfb, 0x6c, 0x6, 0x6b, "d0555e6410feac5fcd9a938a04b1e535", "07261ff3b4179f3b77ede1dc2e91ad3c42004b5c5ac1689ba54412c95ae8d522b11827c5907cf096a07c93c425fe268bd20057d69a7a6c2437e3b0fc1929a39d7d531c99b2ae26e4b70d0240ec2292eb5c94656112f2eb"}, 0x6c, 0x3) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000080)={0x81, 0x3d, 0xfffffffffffffff7}) 05:30:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:30:26 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x8, 0xff, 0xe7, 0x3, 0x0, 0x4, 0x81, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x1, 0x9}, 0x8200, 0x4010000, 0x6, 0x5, 0x4, 0x3, 0x8001, 0x0, 0x4000000, 0x0, 0x98a5}, 0xffffffffffffffff, 0x2, r1, 0x1) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:30:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, 0x0, 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:30:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:30:26 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x0, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:30:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:30:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, 0x0, 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:30:26 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 40) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:30:26 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_io_uring_setup(0x5ef3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) syz_io_uring_setup(0x4eb9, &(0x7f00000001c0)={0x0, 0xec22, 0x20, 0x3, 0x33d, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) [ 2142.375312] FAULT_INJECTION: forcing a failure. [ 2142.375312] name failslab, interval 1, probability 0, space 0, times 0 [ 2142.377137] CPU: 1 PID: 10860 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2142.378137] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2142.379138] Call Trace: [ 2142.379466] [ 2142.379761] dump_stack_lvl+0xc1/0xf0 [ 2142.380292] should_fail_ex+0x4b4/0x5b0 [ 2142.380821] ? __kernfs_new_node+0xd4/0x870 [ 2142.381388] should_failslab+0x9/0x20 [ 2142.381884] kmem_cache_alloc+0x5a/0x320 [ 2142.382410] ? kernfs_add_one+0x376/0x4f0 [ 2142.382950] __kernfs_new_node+0xd4/0x870 [ 2142.383501] ? kernfs_add_one+0x175/0x4f0 [ 2142.384048] ? lock_release+0x1e3/0x710 [ 2142.384590] ? __pfx___kernfs_new_node+0x10/0x10 [ 2142.385215] ? __pfx_lock_release+0x10/0x10 [ 2142.385775] ? kernfs_add_one+0x376/0x4f0 [ 2142.386305] ? kernfs_add_one+0x376/0x4f0 [ 2142.386841] ? down_write+0x11a/0x1f0 [ 2142.387346] ? up_write+0x196/0x510 [ 2142.387845] kernfs_new_node+0x97/0x120 [ 2142.388366] __kernfs_create_file+0x55/0x350 [ 2142.388945] sysfs_add_file_mode_ns+0x21c/0x440 [ 2142.389541] ? __pfx_dev_attr_store+0x10/0x10 [ 2142.390139] internal_create_group+0x322/0xb90 [ 2142.390757] ? __pfx_internal_create_group+0x10/0x10 [ 2142.391419] ? kernfs_add_one+0x17a/0x4f0 [ 2142.391965] ? kernfs_create_link+0x1bb/0x240 [ 2142.392556] internal_create_groups.part.0+0x90/0x140 [ 2142.393229] sysfs_create_groups+0x29/0x50 [ 2142.393791] device_add+0x60f/0x1ab0 [ 2142.394300] ? __pfx_device_add+0x10/0x10 [ 2142.394853] ? __init_waitqueue_head+0xca/0x150 [ 2142.395487] netdev_register_kobject+0x17e/0x3b0 [ 2142.396132] register_netdevice+0xd60/0x1530 [ 2142.396735] ? __pfx_register_netdevice+0x10/0x10 [ 2142.397371] ? dev_addr_mod+0x29e/0x350 [ 2142.397896] __tun_chr_ioctl+0x21aa/0x4220 [ 2142.398465] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2142.399078] ? __pfx___fget_files+0x10/0x10 [ 2142.399644] ? lock_acquire+0x32/0xc0 [ 2142.400180] ? __pfx___fget_files+0x10/0x10 [ 2142.400761] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2142.401337] __x64_sys_ioctl+0x19e/0x210 [ 2142.401871] do_syscall_64+0x3f/0x90 [ 2142.402375] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2142.403041] RIP: 0033:0x7fe31ab8cb19 [ 2142.403515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2142.405728] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2142.406662] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 2142.407544] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2142.408431] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2142.409422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2142.410306] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 2142.411326] 05:30:40 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 41) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:30:40 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x0, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:30:40 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 16) 05:30:40 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xeb, 0x26e}}, './file0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'ip6_vti0\x00'}) 05:30:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:30:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x361042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) sendfile(r1, r0, 0x0, 0xfffffdef) 05:30:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:30:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, 0x0, 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:30:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 05:30:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:30:40 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r3}}, 0x20) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:30:40 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 42) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:30:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:30:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:30:41 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:30:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:30:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:30:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffded) 05:30:53 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) syz_io_uring_setup(0x100, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x0, 0x17a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x1, 0x1, 0x1, 0x5, 0x0, 0x1, 0x28, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x6d25, 0x6}, 0x4a140, 0x1, 0xc3, 0x4, 0x3, 0xfffffffd, 0x3, 0x0, 0x1, 0x0, 0x9}, r2, 0x10, r1, 0x1) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:30:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) chmod(&(0x7f0000000040)='./file1\x00', 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) sendfile(r1, r0, 0x0, 0xfffffdef) 05:30:53 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:30:53 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 17) 05:30:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:30:53 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 43) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) [ 2169.373238] FAULT_INJECTION: forcing a failure. [ 2169.373238] name failslab, interval 1, probability 0, space 0, times 0 [ 2169.374447] CPU: 0 PID: 10925 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2169.375106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2169.375641] Call Trace: [ 2169.375819] [ 2169.375979] dump_stack_lvl+0xc1/0xf0 [ 2169.376273] should_fail_ex+0x4b4/0x5b0 [ 2169.376568] ? __kernfs_new_node+0xd4/0x870 [ 2169.376877] should_failslab+0x9/0x20 [ 2169.377148] kmem_cache_alloc+0x5a/0x320 [ 2169.377429] ? kernfs_add_one+0x376/0x4f0 [ 2169.377731] __kernfs_new_node+0xd4/0x870 [ 2169.378025] ? kernfs_add_one+0x175/0x4f0 [ 2169.378310] ? lock_release+0x1e3/0x710 [ 2169.378601] ? __pfx___kernfs_new_node+0x10/0x10 [ 2169.378940] ? __pfx_lock_release+0x10/0x10 [ 2169.379248] ? kernfs_add_one+0x376/0x4f0 [ 2169.379526] ? kernfs_add_one+0x376/0x4f0 [ 2169.379823] ? down_write+0x11a/0x1f0 [ 2169.380101] ? up_write+0x196/0x510 [ 2169.380362] kernfs_new_node+0x97/0x120 [ 2169.380638] __kernfs_create_file+0x55/0x350 [ 2169.380955] sysfs_add_file_mode_ns+0x21c/0x440 [ 2169.381281] ? __pfx_dev_attr_store+0x10/0x10 [ 2169.381619] internal_create_group+0x322/0xb90 [ 2169.381952] ? __pfx_internal_create_group+0x10/0x10 [ 2169.382307] ? kernfs_add_one+0x17a/0x4f0 [ 2169.382599] ? kernfs_create_link+0x1bb/0x240 [ 2169.382911] internal_create_groups.part.0+0x90/0x140 [ 2169.383277] sysfs_create_groups+0x29/0x50 [ 2169.383575] device_add+0x60f/0x1ab0 [ 2169.383863] ? __pfx_device_add+0x10/0x10 [ 2169.384185] ? __init_waitqueue_head+0xca/0x150 [ 2169.384544] netdev_register_kobject+0x17e/0x3b0 [ 2169.384898] register_netdevice+0xd60/0x1530 [ 2169.385240] ? __pfx_register_netdevice+0x10/0x10 [ 2169.385585] ? dev_addr_mod+0x29e/0x350 [ 2169.385889] __tun_chr_ioctl+0x21aa/0x4220 [ 2169.386199] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2169.386555] ? __pfx___fget_files+0x10/0x10 [ 2169.386883] ? lock_acquire+0x32/0xc0 [ 2169.387157] ? __pfx___fget_files+0x10/0x10 [ 2169.387497] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2169.387821] __x64_sys_ioctl+0x19e/0x210 [ 2169.388134] do_syscall_64+0x3f/0x90 [ 2169.388412] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2169.388794] RIP: 0033:0x7fe31ab8cb19 [ 2169.389061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2169.390343] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2169.390882] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 2169.391401] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2169.391918] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2169.392435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2169.392966] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 2169.393496] 05:30:53 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0xfffffff9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x51) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/192]) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) syz_open_procfs(r2, &(0x7f0000000180)='clear_refs\x00') perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x7f, 0x95, 0xed, 0x73, 0x0, 0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x40, 0x1}, 0x10000, 0x6, 0x9, 0x9, 0x0, 0x5, 0x1, 0x0, 0x4, 0x0, 0xc3}, r2, 0xb, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x1000d308, 0x0, 0x0, 0x3c8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000080)={0x0, 0x5a9, [0x0, 0x1f, 0x46b, 0xa000000000, 0x8, 0x4]}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:30:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:30:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffded) 05:30:53 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="b8", 0x1}, {&(0x7f00000000c0)="5cf6c439d22de8588ddf6204cacd743aed1e219bf4c86c9db1", 0x19}], 0x2, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) r1 = memfd_secret(0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'veth1_to_bridge\x00'}) 05:30:53 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:30:54 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 44) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:30:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:30:54 executing program 7: fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f00000000c0)=0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = syz_io_uring_complete(0x0) mount_setattr(r3, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r4}}, 0x20) copy_file_range(r1, &(0x7f0000000640)=0x200, r3, &(0x7f0000000680)=0x4, 0x1f, 0x0) pwrite64(r1, &(0x7f0000000100)="1a473c900fb28b88b3e0b19159f06d4541a3dc36707aadd2fbefab3de74aaec83482c67269b9c95f86efcc8b0ca64b88e3986ce22ffb842cac95b8b5c24bec1795bd81e02d649d9085ea844d07f977578e2907b90774a4f39f23a97c5e7d88be807872114e34faa5a5eb140f670de1124a37c5014aba2ac7f5383a8665f59e8424ea1ee28a7ad73d5754fcfa4ed0b9399402f6e5782755a825a3d1b48eb27e369395c2069517c732f9d29e06138b2a1f3a5d36c56c199fb012830a418c73d8e39ff4fb0f91f3b8f411cff633761a743d9f06d27af0d74f2279dfadb22f5fd53d35b6f397543eb8232b02b5616cc20eb7ca593b470e8a", 0xf6, 0x8001) pwritev2(r2, &(0x7f00000005c0)=[{&(0x7f00000002c0)="3ff290f83cea79fa719a64ae86c4d74bfda5c57ca490f3e40dbd8d2b24bb6483f31e9064e4342923002a1ce4656800905d728ec7056bb53f0608182dae8b3c2751a5bafc2b12d3203d92e5c9b8beafceda570d0feabc32459474fe5086fbb3c200bd651ca7869ea424a56269a413acd6720c567115cf05a39b51dc6985ce0069f4abb497573a35c8ef581190947651372b50b7e21667f2369d43a5b80b2251daf74761025f47b2c1df91dc90", 0xac}, {&(0x7f0000000200)="847cf52b9be1049aced3e0a47b519ae94ff278ebb81ca7a238f9d700ffa38c8441", 0x21}, {&(0x7f0000000380)="d5877aa622b6352376f97e314c95dd82b134cae0061ad64c4accf9f5af822d40245f102bfdd17092130ec2b8386cebed89896b6b300d5db9d86570b27b2223aed15ef161b44d39debb6fd42fa031724ccbb9f54066e7b03fd69d769f54ef2614013d852e85415a254bf0e596ebba684814511800b3b48ce58c3f9a93c4a3b59bd44367a2e2d3c91b98aa6a4f09be489c4eb3c6f3a2c041", 0x97}, {&(0x7f0000000240)="31389b0daf869a9e6ef8085eee05e858719eb87cbe953a0a82b1349f207d88fe3e83c2b4e1c34a55d81b622d8de8977a19c45831a2a8460c1e21f9aa423745", 0x3f}, {&(0x7f0000000440)="af578006e17bd15901f5da36817ccd6b88925d0875d2a705e588fda899b48c204e4491fc10a33a892cb2d11558549f87d3125d942cd87e601e4a0bdd4819ca33bfff13131646f7d0751ee109461c6bff083aac4d7a8195d597177020a596190344ab45cf8d7e857afc23c651caa85ba3299597604ed8306b518c9d5b589b1c865e0006b08281ac8d95a59fd46ad853d80b16fddedf5a79cd3d1012129a30", 0x9e}, {&(0x7f0000000500)="4506704e994ee6b41bc44b8cf55046d3b633aed7bebd62137d3778a25c81b54dae84c541dea6aa00604e6c6cb4a4b52bba9d136bcec892f8327ad26a515801fc2a0b859aa5bfc1b73db84e2c143b66d5686eddef5d28f959f51256a1552ae79eb03eb292023e63b56ea993bd408f779f6dbd9cad671a767da65743db9528a4dd95e9cf1e44d84ba13665662d67b4f515faf928544ad8027984c461aacea5d7b223ca3faa94cab4fe62efc4e86b6ba52a066016725d", 0xb5}], 0x6, 0x80000001, 0xfcdc, 0xb) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) [ 2169.951125] FAULT_INJECTION: forcing a failure. [ 2169.951125] name failslab, interval 1, probability 0, space 0, times 0 [ 2169.952999] CPU: 0 PID: 10951 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2169.954011] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2169.954999] Call Trace: [ 2169.955332] [ 2169.955628] dump_stack_lvl+0xc1/0xf0 [ 2169.956147] should_fail_ex+0x4b4/0x5b0 [ 2169.956693] ? __kernfs_new_node+0xd4/0x870 [ 2169.957249] should_failslab+0x9/0x20 [ 2169.957743] kmem_cache_alloc+0x5a/0x320 [ 2169.958262] ? kernfs_add_one+0x376/0x4f0 [ 2169.958802] __kernfs_new_node+0xd4/0x870 [ 2169.959345] ? kernfs_add_one+0x175/0x4f0 [ 2169.959866] ? lock_release+0x1e3/0x710 [ 2169.960399] ? __pfx___kernfs_new_node+0x10/0x10 [ 2169.961015] ? __pfx_lock_release+0x10/0x10 [ 2169.961577] ? kernfs_add_one+0x376/0x4f0 [ 2169.962101] ? kernfs_add_one+0x376/0x4f0 [ 2169.962628] ? down_write+0x11a/0x1f0 [ 2169.963143] ? up_write+0x196/0x510 [ 2169.963624] kernfs_new_node+0x97/0x120 [ 2169.964135] __kernfs_create_file+0x55/0x350 [ 2169.964730] sysfs_add_file_mode_ns+0x21c/0x440 [ 2169.965347] ? __pfx_dev_attr_store+0x10/0x10 [ 2169.965940] internal_create_group+0x322/0xb90 [ 2169.966550] ? __pfx_internal_create_group+0x10/0x10 [ 2169.967209] ? kernfs_add_one+0x17a/0x4f0 [ 2169.967747] ? kernfs_create_link+0x1bb/0x240 [ 2169.968340] internal_create_groups.part.0+0x90/0x140 [ 2169.969006] sysfs_create_groups+0x29/0x50 [ 2169.969556] device_add+0x60f/0x1ab0 [ 2169.970050] ? __pfx_device_add+0x10/0x10 [ 2169.970599] ? __init_waitqueue_head+0xca/0x150 [ 2169.971220] netdev_register_kobject+0x17e/0x3b0 [ 2169.971849] register_netdevice+0xd60/0x1530 [ 2169.972445] ? __pfx_register_netdevice+0x10/0x10 [ 2169.973085] __tun_chr_ioctl+0x21aa/0x4220 [ 2169.973648] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2169.974248] ? __pfx___fget_files+0x10/0x10 [ 2169.974816] ? lock_acquire+0x32/0xc0 [ 2169.975318] ? __pfx___fget_files+0x10/0x10 [ 2169.975891] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2169.976491] __x64_sys_ioctl+0x19e/0x210 [ 2169.977018] do_syscall_64+0x3f/0x90 [ 2169.977517] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2169.978184] RIP: 0033:0x7fe31ab8cb19 [ 2169.978658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2169.980815] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2169.981739] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 2169.982614] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2169.983471] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2169.984344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2169.985199] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 2169.986094] 05:30:54 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 18) 05:30:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:30:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:30:54 executing program 4: unlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x3fffffff80000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) sendfile(r2, r1, 0x0, 0xfffffdef) [ 2170.544805] FAULT_INJECTION: forcing a failure. [ 2170.544805] name failslab, interval 1, probability 0, space 0, times 0 [ 2170.546514] CPU: 0 PID: 10972 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2170.547549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2170.548551] Call Trace: [ 2170.548881] [ 2170.549172] dump_stack_lvl+0xc1/0xf0 [ 2170.549685] should_fail_ex+0x4b4/0x5b0 [ 2170.550214] ? jbd2__journal_start+0x194/0x6b0 [ 2170.550800] should_failslab+0x9/0x20 [ 2170.551292] kmem_cache_alloc+0x5a/0x320 [ 2170.551826] jbd2__journal_start+0x194/0x6b0 [ 2170.552404] __ext4_journal_start_sb+0x4c2/0x6f0 [ 2170.553007] ? ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 2170.553697] ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 2170.554403] ? __pfx_ext4_alloc_file_blocks.isra.0+0x10/0x10 [ 2170.555136] ? __mnt_drop_write_file+0x4e/0xf0 [ 2170.555725] ? __pfx_file_modified_flags+0x10/0x10 [ 2170.556379] ? lock_is_held_type+0x9f/0x120 [ 2170.556946] ext4_fallocate+0x1fc5/0x3f50 [ 2170.557511] ? __pfx_ext4_fallocate+0x10/0x10 [ 2170.558088] ? __x64_sys_fallocate+0xd3/0x140 [ 2170.558667] ? lock_is_held_type+0x9f/0x120 [ 2170.559222] ? __pfx_ext4_fallocate+0x10/0x10 [ 2170.559811] vfs_fallocate+0x48d/0xe30 [ 2170.560329] __x64_sys_fallocate+0xd3/0x140 [ 2170.560885] do_syscall_64+0x3f/0x90 [ 2170.561387] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2170.562041] RIP: 0033:0x7f9566faab19 [ 2170.562513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2170.564683] RSP: 002b:00007f95644ff188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2170.565600] RAX: ffffffffffffffda RBX: 00007f95670be020 RCX: 00007f9566faab19 [ 2170.566458] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000005 [ 2170.567319] RBP: 00007f95644ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2170.568180] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2170.569065] R13: 00007ffc86a4213f R14: 00007f95644ff300 R15: 0000000000022000 [ 2170.569955] 05:31:07 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 45) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:31:07 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1010c2, 0xc0) acct(&(0x7f0000000040)='./file1\x00') write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) sendfile(r1, r0, 0x0, 0xfffffdef) 05:31:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 19) 05:31:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffded) 05:31:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:31:07 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:31:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:31:07 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x68a0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f00000002c0)={{r1}, "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"}) r2 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) dup2(r0, r2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x7, 0x9, 0xbb, 0x8}, 0x10) [ 2183.693712] Process accounting resumed 05:31:07 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) [ 2183.775757] FAULT_INJECTION: forcing a failure. [ 2183.775757] name failslab, interval 1, probability 0, space 0, times 0 [ 2183.777293] CPU: 1 PID: 10997 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2183.778388] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2183.779459] Call Trace: [ 2183.779807] [ 2183.780116] dump_stack_lvl+0xc1/0xf0 [ 2183.780716] should_fail_ex+0x4b4/0x5b0 [ 2183.781267] ? ext4_mb_new_blocks+0x666/0x4ad0 [ 2183.781889] should_failslab+0x9/0x20 [ 2183.782433] kmem_cache_alloc+0x5a/0x320 [ 2183.782993] ? __mark_inode_dirty+0x249/0xee0 [ 2183.783636] ext4_mb_new_blocks+0x666/0x4ad0 [ 2183.784247] ? __ext4_mark_inode_dirty+0x221/0x890 [ 2183.784952] ? do_raw_spin_unlock+0x53/0x220 [ 2183.785692] ? jbd2_journal_stop+0x185/0xed0 [ 2183.786284] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 2183.786957] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 2183.787709] ? jbd2__journal_start+0xf7/0x6b0 [ 2183.788481] ext4_new_meta_blocks+0x1e5/0x320 [ 2183.789093] ? __pfx_ext4_new_meta_blocks+0x10/0x10 [ 2183.789779] ? rcu_read_lock_sched_held+0x42/0x80 [ 2183.790463] ? ext4_can_extents_be_merged.constprop.0+0x2f9/0x390 [ 2183.791295] ext4_ext_insert_extent+0x102f/0x4210 [ 2183.791997] ? ext4_cache_extents+0x148/0x2d0 [ 2183.792659] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 2183.793311] ? __pfx_ext4_ext_insert_extent+0x10/0x10 [ 2183.794140] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2183.794834] ext4_ext_map_blocks+0x137c/0x5dd0 [ 2183.795500] ? __pfx___lock_acquire+0x10/0x10 [ 2183.796126] ? __pfx___lock_acquire+0x10/0x10 [ 2183.796802] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 2183.797490] ? lock_acquire.part.0+0xec/0x320 [ 2183.798130] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2183.798934] ? ext4_map_blocks+0x704/0x19e0 [ 2183.799502] ? rcu_read_lock_sched_held+0x42/0x80 [ 2183.800140] ? trace_lock_acquire+0x170/0x1e0 [ 2183.800807] ? ext4_map_blocks+0x704/0x19e0 [ 2183.801401] ? lock_acquire+0x32/0xc0 [ 2183.801929] ? ext4_map_blocks+0x704/0x19e0 [ 2183.802551] ? __pfx_down_write+0x10/0x10 [ 2183.803114] ? ext4_es_lookup_extent+0xc8/0xc90 [ 2183.803791] ext4_map_blocks+0x776/0x19e0 [ 2183.804370] ? rcu_read_lock_sched_held+0x42/0x80 [ 2183.804994] ? trace_jbd2_handle_start+0x1b3/0x270 [ 2183.805673] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2183.806282] ? jbd2__journal_start+0xf7/0x6b0 [ 2183.806934] ? __ext4_journal_start_sb+0x4c2/0x6f0 [ 2183.807610] ? __ext4_journal_start_sb+0x1e0/0x6f0 [ 2183.808275] ? ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 2183.809036] ext4_alloc_file_blocks.isra.0+0x2df/0xbd0 [ 2183.809791] ? __pfx_ext4_alloc_file_blocks.isra.0+0x10/0x10 [ 2183.810720] ? __mnt_drop_write_file+0x4e/0xf0 [ 2183.811543] ? __pfx_file_modified_flags+0x10/0x10 [ 2183.812392] ? lock_is_held_type+0x9f/0x120 [ 2183.813149] ext4_fallocate+0x1fc5/0x3f50 [ 2183.813878] ? __pfx_ext4_fallocate+0x10/0x10 [ 2183.814667] ? __x64_sys_fallocate+0xd3/0x140 [ 2183.815407] ? lock_is_held_type+0x9f/0x120 [ 2183.816176] ? __pfx_ext4_fallocate+0x10/0x10 [ 2183.816863] vfs_fallocate+0x48d/0xe30 [ 2183.817438] __x64_sys_fallocate+0xd3/0x140 [ 2183.818061] do_syscall_64+0x3f/0x90 [ 2183.818629] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2183.819352] RIP: 0033:0x7f9566faab19 [ 2183.819936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2183.822306] RSP: 002b:00007f95644ff188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2183.823331] RAX: ffffffffffffffda RBX: 00007f95670be020 RCX: 00007f9566faab19 [ 2183.824261] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000005 [ 2183.825210] RBP: 00007f95644ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2183.826134] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2183.827088] R13: 00007ffc86a4213f R14: 00007f95644ff300 R15: 0000000000022000 [ 2183.828071] 05:31:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) [ 2183.861050] Process accounting resumed 05:31:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x101000, 0x1ed) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r1, r0, 0x0, 0xfffffdef) 05:31:08 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:31:22 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 46) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:31:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:31:22 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'wg0\x00'}) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x7, 0x7fff, {0x0, r0}, 0x0, 0x16, 0x0, {0x0, 0x0, r1}}, 0x9) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:31:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:31:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:31:22 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 20) 05:31:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:31:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xe4800, 0x2) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)={0x14, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0']}, 0x14}], 0x1}, 0x0) dup2(r0, r4) sendfile(r1, r0, 0x0, 0xfffffdef) 05:31:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) [ 2198.037096] FAULT_INJECTION: forcing a failure. [ 2198.037096] name failslab, interval 1, probability 0, space 0, times 0 [ 2198.038676] CPU: 0 PID: 11040 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2198.040023] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2198.040973] Call Trace: [ 2198.041390] [ 2198.041678] dump_stack_lvl+0xc1/0xf0 [ 2198.042316] should_fail_ex+0x4b4/0x5b0 [ 2198.042827] ? jbd2__journal_start+0x194/0x6b0 [ 2198.042878] should_failslab+0x9/0x20 [ 2198.042915] kmem_cache_alloc+0x5a/0x320 [ 2198.042964] jbd2__journal_start+0x194/0x6b0 [ 2198.043018] __ext4_journal_start_sb+0x4c2/0x6f0 [ 2198.043058] ? ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 2198.043110] ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 2198.043172] ? __pfx_ext4_alloc_file_blocks.isra.0+0x10/0x10 [ 2198.043216] ? __mnt_drop_write_file+0x4e/0xf0 [ 2198.043260] ? __pfx_file_modified_flags+0x10/0x10 [ 2198.043317] ? lock_is_held_type+0x9f/0x120 [ 2198.043381] ext4_fallocate+0x1fc5/0x3f50 [ 2198.043477] ? __pfx_ext4_fallocate+0x10/0x10 [ 2198.043541] ? __x64_sys_fallocate+0xd3/0x140 [ 2198.043586] ? lock_is_held_type+0x9f/0x120 [ 2198.043648] ? __pfx_ext4_fallocate+0x10/0x10 [ 2198.043697] vfs_fallocate+0x48d/0xe30 [ 2198.043740] __x64_sys_fallocate+0xd3/0x140 [ 2198.054410] do_syscall_64+0x3f/0x90 [ 2198.055028] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2198.055702] RIP: 0033:0x7f9566faab19 [ 2198.056298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2198.058512] RSP: 002b:00007f95644ff188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2198.059669] RAX: ffffffffffffffda RBX: 00007f95670be020 RCX: 00007f9566faab19 [ 2198.060545] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000005 [ 2198.061441] RBP: 00007f95644ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2198.062332] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2198.063199] R13: 00007ffc86a4213f R14: 00007f95644ff300 R15: 0000000000022000 [ 2198.064111] 05:31:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:31:22 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 47) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:31:22 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r3}}, 0x20) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000002c0)={{r3}, 0x0, 0x2, @unused=[0x5, 0x3, 0x1f, 0x3], @devid}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) io_uring_enter(r4, 0x5fac, 0xbb03, 0x1, &(0x7f00000000c0)={[0x3]}, 0x8) 05:31:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:31:22 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 48) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) [ 2198.689961] FAULT_INJECTION: forcing a failure. [ 2198.689961] name failslab, interval 1, probability 0, space 0, times 0 [ 2198.691835] CPU: 1 PID: 11063 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2198.693226] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2198.694254] Call Trace: [ 2198.694667] [ 2198.694974] dump_stack_lvl+0xc1/0xf0 [ 2198.695708] should_fail_ex+0x4b4/0x5b0 [ 2198.696234] ? __kernfs_new_node+0xd4/0x870 [ 2198.696969] should_failslab+0x9/0x20 [ 2198.697438] kmem_cache_alloc+0x5a/0x320 [ 2198.698192] ? kernfs_add_one+0x376/0x4f0 [ 2198.698708] __kernfs_new_node+0xd4/0x870 [ 2198.699371] ? kernfs_add_one+0x175/0x4f0 [ 2198.699867] ? lock_release+0x1e3/0x710 [ 2198.700509] ? __pfx___kernfs_new_node+0x10/0x10 [ 2198.701108] ? __pfx_lock_release+0x10/0x10 [ 2198.701804] ? kernfs_add_one+0x376/0x4f0 [ 2198.702304] ? kernfs_add_one+0x376/0x4f0 [ 2198.702959] ? down_write+0x11a/0x1f0 [ 2198.703452] ? up_write+0x196/0x510 [ 2198.704047] kernfs_new_node+0x97/0x120 [ 2198.704536] __kernfs_create_file+0x55/0x350 [ 2198.705299] sysfs_add_file_mode_ns+0x21c/0x440 [ 2198.705972] ? __pfx_dev_attr_store+0x10/0x10 [ 2198.706707] internal_create_group+0x322/0xb90 [ 2198.707366] ? __pfx_internal_create_group+0x10/0x10 [ 2198.708296] ? kernfs_add_one+0x17a/0x4f0 [ 2198.708879] ? kernfs_create_link+0x1bb/0x240 [ 2198.709600] internal_create_groups.part.0+0x90/0x140 [ 2198.710306] sysfs_create_groups+0x29/0x50 [ 2198.711052] device_add+0x60f/0x1ab0 [ 2198.711609] ? __pfx_device_add+0x10/0x10 [ 2198.712285] ? __init_waitqueue_head+0xca/0x150 [ 2198.712922] netdev_register_kobject+0x17e/0x3b0 [ 2198.713793] register_netdevice+0xd60/0x1530 [ 2198.714478] ? __pfx_register_netdevice+0x10/0x10 [ 2198.715246] ? dev_addr_mod+0x29e/0x350 [ 2198.715762] __tun_chr_ioctl+0x21aa/0x4220 [ 2198.716591] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2198.717204] ? __pfx___fget_files+0x10/0x10 [ 2198.717901] ? lock_acquire+0x32/0xc0 [ 2198.718439] ? __pfx___fget_files+0x10/0x10 [ 2198.719241] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2198.719818] __x64_sys_ioctl+0x19e/0x210 [ 2198.720608] do_syscall_64+0x3f/0x90 [ 2198.721290] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2198.721966] RIP: 0033:0x7fe31ab8cb19 [ 2198.722558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2198.724748] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2198.725727] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 2198.726539] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2198.727458] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2198.728630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2198.729451] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 2198.730564] 05:31:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:31:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:31:23 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 21) 05:31:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:31:23 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) [ 2199.092726] FAULT_INJECTION: forcing a failure. [ 2199.092726] name failslab, interval 1, probability 0, space 0, times 0 [ 2199.094570] CPU: 0 PID: 11075 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2199.095571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2199.096597] Call Trace: [ 2199.096929] [ 2199.097224] dump_stack_lvl+0xc1/0xf0 [ 2199.097743] should_fail_ex+0x4b4/0x5b0 [ 2199.098271] ? __es_insert_extent+0x3a9/0x12f0 [ 2199.098878] should_failslab+0x9/0x20 [ 2199.099382] kmem_cache_alloc+0x5a/0x320 [ 2199.099919] __es_insert_extent+0x3a9/0x12f0 [ 2199.100537] ext4_es_insert_extent+0x2db/0xc20 [ 2199.101165] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 2199.101830] ? _raw_read_unlock+0x1e/0x40 [ 2199.102359] ? ext4_es_scan_range+0x11a/0x240 [ 2199.102958] ? __pfx_ext4_es_scan_range+0x10/0x10 [ 2199.103615] ? __pfx_down_write+0x10/0x10 [ 2199.104165] ? ext4_es_lookup_extent+0xc8/0xc90 [ 2199.104819] ext4_map_blocks+0xa0d/0x19e0 [ 2199.105370] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2199.105966] ? jbd2__journal_start+0xf7/0x6b0 [ 2199.106571] ? __ext4_journal_start_sb+0x4c2/0x6f0 [ 2199.107209] ? __ext4_journal_start_sb+0x1e0/0x6f0 [ 2199.107859] ? ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 2199.108857] ext4_alloc_file_blocks.isra.0+0x2df/0xbd0 [ 2199.109702] ? __pfx_ext4_alloc_file_blocks.isra.0+0x10/0x10 [ 2199.110612] ? __mnt_drop_write_file+0x4e/0xf0 [ 2199.111337] ? __pfx_file_modified_flags+0x10/0x10 [ 2199.112137] ? lock_is_held_type+0x9f/0x120 [ 2199.112836] ext4_fallocate+0x1fc5/0x3f50 [ 2199.113530] ? __pfx_ext4_fallocate+0x10/0x10 [ 2199.114149] ? __x64_sys_fallocate+0xd3/0x140 [ 2199.114750] ? lock_is_held_type+0x9f/0x120 [ 2199.115325] ? __pfx_ext4_fallocate+0x10/0x10 [ 2199.115934] vfs_fallocate+0x48d/0xe30 [ 2199.116462] __x64_sys_fallocate+0xd3/0x140 [ 2199.117035] do_syscall_64+0x3f/0x90 [ 2199.117557] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2199.118241] RIP: 0033:0x7f9566faab19 [ 2199.118710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2199.120982] RSP: 002b:00007f95644ff188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2199.121935] RAX: ffffffffffffffda RBX: 00007f95670be020 RCX: 00007f9566faab19 [ 2199.122833] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000005 [ 2199.123735] RBP: 00007f95644ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2199.124656] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2199.125552] R13: 00007ffc86a4213f R14: 00007f95644ff300 R15: 0000000000022000 [ 2199.126483] 05:31:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x840, 0x141) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 05:31:37 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0x800, 0x0, 0x1a}, 0x18) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x101042, 0x3f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) sendfile(r2, r1, 0x0, 0xfffffdef) 05:31:37 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 49) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:31:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:31:37 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:31:37 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x8000, 0x80000000, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000080)) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:31:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:31:37 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 22) 05:31:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) [ 2213.545318] FAULT_INJECTION: forcing a failure. [ 2213.545318] name failslab, interval 1, probability 0, space 0, times 0 [ 2213.547974] CPU: 0 PID: 11111 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2213.548571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2213.549127] Call Trace: [ 2213.549308] [ 2213.549467] dump_stack_lvl+0xc1/0xf0 [ 2213.549753] should_fail_ex+0x4b4/0x5b0 [ 2213.550042] ? __kernfs_new_node+0xd4/0x870 [ 2213.550352] should_failslab+0x9/0x20 [ 2213.550636] kmem_cache_alloc+0x5a/0x320 [ 2213.550925] ? kernfs_add_one+0x376/0x4f0 [ 2213.551243] __kernfs_new_node+0xd4/0x870 [ 2213.551552] ? kernfs_add_one+0x175/0x4f0 [ 2213.551840] ? lock_release+0x1e3/0x710 [ 2213.552128] ? __pfx___kernfs_new_node+0x10/0x10 [ 2213.552466] ? __pfx_lock_release+0x10/0x10 [ 2213.552789] ? kernfs_add_one+0x376/0x4f0 [ 2213.553079] ? kernfs_add_one+0x376/0x4f0 [ 2213.553369] ? down_write+0x11a/0x1f0 [ 2213.553663] ? up_write+0x196/0x510 [ 2213.553930] kernfs_new_node+0x97/0x120 [ 2213.554208] __kernfs_create_file+0x55/0x350 [ 2213.554525] sysfs_add_file_mode_ns+0x21c/0x440 [ 2213.554857] ? __pfx_dev_attr_store+0x10/0x10 [ 2213.555200] internal_create_group+0x322/0xb90 [ 2213.555552] ? __pfx_internal_create_group+0x10/0x10 [ 2213.555925] ? kernfs_add_one+0x17a/0x4f0 [ 2213.556234] ? kernfs_create_link+0x1bb/0x240 [ 2213.556572] internal_create_groups.part.0+0x90/0x140 [ 2213.556980] sysfs_create_groups+0x29/0x50 [ 2213.557302] device_add+0x60f/0x1ab0 [ 2213.557589] ? __pfx_device_add+0x10/0x10 [ 2213.557906] ? __init_waitqueue_head+0xca/0x150 [ 2213.558275] netdev_register_kobject+0x17e/0x3b0 [ 2213.558645] register_netdevice+0xd60/0x1530 [ 2213.558982] ? __pfx_register_netdevice+0x10/0x10 [ 2213.559350] ? dev_addr_mod+0x29e/0x350 [ 2213.559647] __tun_chr_ioctl+0x21aa/0x4220 [ 2213.559975] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2213.560338] ? __pfx___fget_files+0x10/0x10 [ 2213.560655] ? lock_acquire+0x32/0xc0 [ 2213.560960] ? __pfx___fget_files+0x10/0x10 [ 2213.561291] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2213.561630] __x64_sys_ioctl+0x19e/0x210 [ 2213.561939] do_syscall_64+0x3f/0x90 [ 2213.562227] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2213.562610] RIP: 0033:0x7fe31ab8cb19 [ 2213.562866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2213.564154] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2213.564753] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 2213.565287] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2213.565810] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2213.566309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2213.566850] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 2213.567375] 05:31:37 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 50) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:31:37 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) [ 2213.847267] FAULT_INJECTION: forcing a failure. [ 2213.847267] name failslab, interval 1, probability 0, space 0, times 0 [ 2213.848635] CPU: 0 PID: 11126 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2213.849226] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2213.849806] Call Trace: [ 2213.849988] [ 2213.850161] dump_stack_lvl+0xc1/0xf0 [ 2213.850460] should_fail_ex+0x4b4/0x5b0 [ 2213.850760] ? __kernfs_new_node+0xd4/0x870 [ 2213.851079] should_failslab+0x9/0x20 [ 2213.851356] kmem_cache_alloc+0x5a/0x320 [ 2213.851660] ? kernfs_add_one+0x376/0x4f0 [ 2213.851966] __kernfs_new_node+0xd4/0x870 [ 2213.852278] ? kernfs_add_one+0x175/0x4f0 [ 2213.852587] ? lock_release+0x1e3/0x710 [ 2213.852892] ? __pfx___kernfs_new_node+0x10/0x10 [ 2213.853250] ? __pfx_lock_release+0x10/0x10 [ 2213.853554] ? kernfs_add_one+0x376/0x4f0 [ 2213.853844] ? kernfs_add_one+0x376/0x4f0 [ 2213.854132] ? down_write+0x11a/0x1f0 [ 2213.854409] ? up_write+0x196/0x510 [ 2213.854674] kernfs_new_node+0x97/0x120 [ 2213.854955] __kernfs_create_file+0x55/0x350 [ 2213.855286] sysfs_add_file_mode_ns+0x21c/0x440 [ 2213.855628] ? __pfx_dev_attr_store+0x10/0x10 [ 2213.855963] internal_create_group+0x322/0xb90 [ 2213.856314] ? __pfx_internal_create_group+0x10/0x10 [ 2213.856686] ? kernfs_add_one+0x17a/0x4f0 [ 2213.857000] ? kernfs_create_link+0x1bb/0x240 [ 2213.857317] internal_create_groups.part.0+0x90/0x140 [ 2213.857710] sysfs_create_groups+0x29/0x50 [ 2213.858033] device_add+0x60f/0x1ab0 [ 2213.858332] ? __pfx_device_add+0x10/0x10 [ 2213.858652] ? __init_waitqueue_head+0xca/0x150 [ 2213.859016] netdev_register_kobject+0x17e/0x3b0 [ 2213.859372] register_netdevice+0xd60/0x1530 [ 2213.859714] ? __pfx_register_netdevice+0x10/0x10 [ 2213.860076] ? dev_addr_mod+0x29e/0x350 [ 2213.860378] __tun_chr_ioctl+0x21aa/0x4220 [ 2213.860689] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2213.861054] ? __pfx___fget_files+0x10/0x10 [ 2213.861372] ? lock_acquire+0x32/0xc0 [ 2213.861674] ? __pfx___fget_files+0x10/0x10 [ 2213.862008] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2213.862340] __x64_sys_ioctl+0x19e/0x210 [ 2213.862633] do_syscall_64+0x3f/0x90 [ 2213.862931] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2213.863328] RIP: 0033:0x7fe31ab8cb19 [ 2213.863603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2213.864881] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2213.865435] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 2213.865950] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2213.866467] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2213.866980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2213.867502] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 2213.868025] 05:31:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000040)={0x1, 0xffffffff, 0x401, 0x9413, 0x80, 0xf3d}) sendfile(r1, r0, 0x0, 0xfffffdef) 05:31:50 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x311001, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r1 = syz_io_uring_complete(0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r1}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, @out_args}, './file1\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = syz_io_uring_complete(0x0) mount_setattr(r3, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r4}}, 0x20) sendfile(0xffffffffffffffff, r3, &(0x7f0000000100)=0x4, 0xfff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd4(r5, &(0x7f00000000c0)={[0x8]}, 0x8, 0x80800) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:31:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:31:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:31:50 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 51) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:31:50 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 23) 05:31:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:31:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) [ 2226.548324] FAULT_INJECTION: forcing a failure. [ 2226.548324] name failslab, interval 1, probability 0, space 0, times 0 [ 2226.550706] CPU: 1 PID: 11146 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2226.551743] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2226.552772] Call Trace: [ 2226.553144] [ 2226.553462] dump_stack_lvl+0xc1/0xf0 [ 2226.553993] should_fail_ex+0x4b4/0x5b0 [ 2226.554610] ? __kernfs_new_node+0xd4/0x870 [ 2226.555256] should_failslab+0x9/0x20 [ 2226.555815] kmem_cache_alloc+0x5a/0x320 [ 2226.556431] ? kernfs_add_one+0x376/0x4f0 [ 2226.557069] __kernfs_new_node+0xd4/0x870 [ 2226.557674] ? kernfs_add_one+0x175/0x4f0 [ 2226.558307] ? lock_release+0x1e3/0x710 [ 2226.558922] ? __pfx___kernfs_new_node+0x10/0x10 [ 2226.559648] ? __pfx_lock_release+0x10/0x10 [ 2226.560323] ? kernfs_add_one+0x376/0x4f0 [ 2226.560898] ? kernfs_add_one+0x376/0x4f0 [ 2226.561548] ? down_write+0x11a/0x1f0 [ 2226.562132] ? up_write+0x196/0x510 [ 2226.562719] kernfs_new_node+0x97/0x120 [ 2226.563347] __kernfs_create_file+0x55/0x350 [ 2226.564048] sysfs_add_file_mode_ns+0x21c/0x440 [ 2226.564752] ? __pfx_dev_attr_store+0x10/0x10 [ 2226.565541] internal_create_group+0x322/0xb90 [ 2226.566273] ? __pfx_internal_create_group+0x10/0x10 [ 2226.567005] ? kernfs_add_one+0x17a/0x4f0 [ 2226.567630] ? kernfs_create_link+0x1bb/0x240 [ 2226.568333] internal_create_groups.part.0+0x90/0x140 [ 2226.569129] sysfs_create_groups+0x29/0x50 [ 2226.569784] device_add+0x60f/0x1ab0 [ 2226.570399] ? __pfx_device_add+0x10/0x10 [ 2226.571022] ? __init_waitqueue_head+0xca/0x150 [ 2226.571685] netdev_register_kobject+0x17e/0x3b0 [ 2226.572388] register_netdevice+0xd60/0x1530 [ 2226.573087] ? __pfx_register_netdevice+0x10/0x10 [ 2226.573759] ? dev_addr_mod+0x29e/0x350 [ 2226.574367] __tun_chr_ioctl+0x21aa/0x4220 [ 2226.574971] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2226.575663] ? __pfx___fget_files+0x10/0x10 [ 2226.576224] ? lock_acquire+0x32/0xc0 [ 2226.576823] ? __pfx___fget_files+0x10/0x10 [ 2226.577460] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2226.578082] __x64_sys_ioctl+0x19e/0x210 [ 2226.578753] do_syscall_64+0x3f/0x90 [ 2226.579291] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2226.580044] RIP: 0033:0x7fe31ab8cb19 [ 2226.580552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2226.583014] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2226.584014] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 2226.585012] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2226.586035] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2226.587028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2226.588151] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 2226.589383] 05:31:50 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) [ 2226.679806] FAULT_INJECTION: forcing a failure. [ 2226.679806] name failslab, interval 1, probability 0, space 0, times 0 [ 2226.680940] CPU: 0 PID: 11158 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2226.681690] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2226.682464] Call Trace: [ 2226.682721] [ 2226.682947] dump_stack_lvl+0xc1/0xf0 [ 2226.683502] should_fail_ex+0x4b4/0x5b0 [ 2226.683911] ? jbd2_journal_add_journal_head+0x367/0x5d0 [ 2226.684423] should_failslab+0x9/0x20 [ 2226.684792] kmem_cache_alloc+0x5a/0x320 [ 2226.685209] jbd2_journal_add_journal_head+0x367/0x5d0 [ 2226.685732] jbd2_journal_get_create_access+0x44/0x560 [ 2226.686244] ? lock_is_held_type+0x9f/0x120 [ 2226.686686] __ext4_journal_get_create_access+0x54/0x1f0 [ 2226.687203] ext4_ext_insert_extent+0x12aa/0x4210 [ 2226.687696] ? ext4_cache_extents+0x148/0x2d0 [ 2226.688128] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 2226.688586] ? __pfx_ext4_ext_insert_extent+0x10/0x10 [ 2226.689095] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2226.689566] ext4_ext_map_blocks+0x137c/0x5dd0 [ 2226.690029] ? __pfx___lock_acquire+0x10/0x10 [ 2226.690472] ? __pfx___lock_acquire+0x10/0x10 [ 2226.690924] ? lock_is_held_type+0x9f/0x120 [ 2226.691349] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 2226.691833] ? lock_acquire.part.0+0xec/0x320 [ 2226.692379] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2226.692860] ? ext4_map_blocks+0x704/0x19e0 [ 2226.693273] ? rcu_read_lock_sched_held+0x42/0x80 [ 2226.693738] ? trace_lock_acquire+0x170/0x1e0 [ 2226.694185] ? ext4_map_blocks+0x704/0x19e0 [ 2226.694591] ? lock_acquire+0x32/0xc0 [ 2226.694973] ? ext4_map_blocks+0x704/0x19e0 [ 2226.695400] ? __pfx_down_write+0x10/0x10 [ 2226.695805] ? ext4_es_lookup_extent+0xc8/0xc90 [ 2226.696279] ext4_map_blocks+0x776/0x19e0 [ 2226.696686] ? rcu_read_lock_sched_held+0x42/0x80 [ 2226.697157] ? trace_jbd2_handle_start+0x1b3/0x270 [ 2226.697637] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2226.698080] ? jbd2__journal_start+0xf7/0x6b0 [ 2226.698528] ? __ext4_journal_start_sb+0x4c2/0x6f0 [ 2226.698995] ? __ext4_journal_start_sb+0x1e0/0x6f0 [ 2226.699462] ? ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 2226.699983] ext4_alloc_file_blocks.isra.0+0x2df/0xbd0 [ 2226.700504] ? __pfx_ext4_alloc_file_blocks.isra.0+0x10/0x10 [ 2226.701069] ? __mnt_drop_write_file+0x4e/0xf0 [ 2226.701520] ? __pfx_file_modified_flags+0x10/0x10 [ 2226.702002] ? lock_is_held_type+0x9f/0x120 [ 2226.702443] ext4_fallocate+0x1fc5/0x3f50 [ 2226.702874] ? __pfx_ext4_fallocate+0x10/0x10 [ 2226.703315] ? __x64_sys_fallocate+0xd3/0x140 [ 2226.703742] ? lock_is_held_type+0x9f/0x120 [ 2226.704162] ? __pfx_ext4_fallocate+0x10/0x10 [ 2226.704606] vfs_fallocate+0x48d/0xe30 [ 2226.704994] __x64_sys_fallocate+0xd3/0x140 [ 2226.705412] do_syscall_64+0x3f/0x90 [ 2226.705794] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2226.706293] RIP: 0033:0x7f9566faab19 [ 2226.706646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2226.708267] RSP: 002b:00007f95644ff188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2226.708978] RAX: ffffffffffffffda RBX: 00007f95670be020 RCX: 00007f9566faab19 [ 2226.709629] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000005 [ 2226.710278] RBP: 00007f95644ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2226.710932] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2226.711577] R13: 00007ffc86a4213f R14: 00007f95644ff300 R15: 0000000000022000 [ 2226.712250] [ 2226.712627] ENOMEM in journal_alloc_journal_head, retrying. 05:31:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:31:51 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:31:51 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 52) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:31:51 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x2000000, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000380)={0x9, 0x438}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) r1 = syz_mount_image$nfs4(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000100)="6523b2ca4cafab31b2ca33efb44350a79522de7772cd9d1f36e227844ef58bfe12265aa384f23e5f455b300ab3de696c02c81ca803b99d1294df2d1e277436458e94edeaf24a", 0x46, 0x8001}, {&(0x7f0000000180)="e2192d8dab08b92ce26261bb743efdf358ebb92c7e46851451968c0ea7a226018db300220d59cd097fab69819aab5a278e7d24bdbd296dc3d59168e8bfffc34846bbbbd2bbc0c6a13e8463d20c4c58c0a6459a9e19c765308d170f7bf372bc05c1dee8bee5b1c2bede6f166c6059e65f54e758ed25bbaa7e006b2101e27a9fd0e7a57af2d3d897724a3a82d679a0ad9b2ea332e8b6d9c2861b842f196741373b4f3bc963021d8f8e3fafd683216dd1462419c4fe781a65145f82bfea79d0451ece6d96787b61b9e35661f645b7", 0xcd}], 0x0, &(0x7f0000000300)={[{']\'%-*%!'}], [{@subj_user={'subj_user', 0x3d, ':.'}}]}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) [ 2227.173105] FAULT_INJECTION: forcing a failure. [ 2227.173105] name failslab, interval 1, probability 0, space 0, times 0 [ 2227.174966] CPU: 1 PID: 11170 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2227.176034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2227.176917] Call Trace: [ 2227.177241] [ 2227.177503] dump_stack_lvl+0xc1/0xf0 [ 2227.178060] should_fail_ex+0x4b4/0x5b0 [ 2227.178540] ? __kernfs_new_node+0xd4/0x870 [ 2227.179175] should_failslab+0x9/0x20 [ 2227.179637] kmem_cache_alloc+0x5a/0x320 [ 2227.180204] ? kernfs_add_one+0x376/0x4f0 [ 2227.180770] __kernfs_new_node+0xd4/0x870 [ 2227.181371] ? kernfs_add_one+0x175/0x4f0 [ 2227.181865] ? lock_release+0x1e3/0x710 [ 2227.182357] ? __pfx___kernfs_new_node+0x10/0x10 [ 2227.183024] ? __pfx_lock_release+0x10/0x10 [ 2227.183644] ? kernfs_add_one+0x376/0x4f0 [ 2227.184141] ? kernfs_add_one+0x376/0x4f0 [ 2227.184707] ? down_write+0x11a/0x1f0 [ 2227.185302] ? up_write+0x196/0x510 [ 2227.185797] kernfs_new_node+0x97/0x120 [ 2227.186276] __kernfs_create_file+0x55/0x350 [ 2227.186862] sysfs_add_file_mode_ns+0x21c/0x440 [ 2227.187432] ? __pfx_dev_attr_store+0x10/0x10 [ 2227.188098] internal_create_group+0x322/0xb90 [ 2227.188672] ? __pfx_internal_create_group+0x10/0x10 [ 2227.189343] ? kernfs_add_one+0x17a/0x4f0 [ 2227.189867] ? kernfs_create_link+0x1bb/0x240 [ 2227.190485] internal_create_groups.part.0+0x90/0x140 [ 2227.191255] sysfs_create_groups+0x29/0x50 [ 2227.191781] device_add+0x60f/0x1ab0 [ 2227.192258] ? __pfx_device_add+0x10/0x10 [ 2227.192774] ? __init_waitqueue_head+0xca/0x150 [ 2227.193464] netdev_register_kobject+0x17e/0x3b0 [ 2227.194135] register_netdevice+0xd60/0x1530 [ 2227.194694] ? __pfx_register_netdevice+0x10/0x10 [ 2227.195388] ? dev_addr_mod+0x29e/0x350 [ 2227.195923] __tun_chr_ioctl+0x21aa/0x4220 [ 2227.196564] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2227.197162] ? __pfx___fget_files+0x10/0x10 [ 2227.197683] ? lock_acquire+0x32/0xc0 [ 2227.198163] ? __pfx___fget_files+0x10/0x10 [ 2227.198806] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2227.199350] __x64_sys_ioctl+0x19e/0x210 [ 2227.199869] do_syscall_64+0x3f/0x90 [ 2227.200358] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2227.201062] RIP: 0033:0x7fe31ab8cb19 [ 2227.201508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2227.203449] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2227.204372] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 2227.205281] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2227.206197] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2227.207050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2227.207873] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 2227.208859] 05:31:51 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) [ 2227.322925] loop7: detected capacity change from 0 to 128 [ 2227.327968] nfs4: Unknown parameter ']'%-*%!' [ 2227.412845] loop7: detected capacity change from 0 to 128 [ 2227.413694] nfs4: Unknown parameter ']'%-*%!' 05:31:51 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:31:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:31:51 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 24) 05:31:51 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 53) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:31:51 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/87, 0x57}], 0x1) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r2 = syz_io_uring_complete(0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r2}}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = syz_io_uring_complete(0x0) mount_setattr(r4, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r5}}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)={0x14, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0']}, 0x14}], 0x1}, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000140)=[r0, r0, r0, r4, r6], 0x5) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:31:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)={0x14, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0']}, 0x14}], 0x1}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000240)={{0x0, 0x3ff, 0x1, 0x3, 0x0, 0x2, 0xc8b8, 0x100, 0xfffffff8, 0x3c1, 0x8000, 0xa71c, 0x4, 0x400, 0x5}}) sendfile(r3, r2, 0x0, 0xfffffdef) sendfile(r1, r0, 0x0, 0xfffffdef) 05:31:51 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) [ 2227.695753] FAULT_INJECTION: forcing a failure. [ 2227.695753] name failslab, interval 1, probability 0, space 0, times 0 [ 2227.696904] CPU: 0 PID: 11194 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2227.697801] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2227.698547] Call Trace: [ 2227.698793] [ 2227.699013] dump_stack_lvl+0xc1/0xf0 [ 2227.699408] should_fail_ex+0x4b4/0x5b0 [ 2227.699810] ? ext4_mb_new_blocks+0x1901/0x4ad0 [ 2227.700254] should_failslab+0x9/0x20 [ 2227.700628] kmem_cache_alloc+0x5a/0x320 [ 2227.701058] ext4_mb_new_blocks+0x1901/0x4ad0 [ 2227.701502] ? lock_is_held_type+0x9f/0x120 [ 2227.701940] ? ext4_cache_extents+0x148/0x2d0 [ 2227.702381] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 2227.702841] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2227.703284] ext4_ext_map_blocks+0x2004/0x5dd0 [ 2227.703753] ? __pfx___lock_acquire+0x10/0x10 [ 2227.704195] ? __pfx___lock_acquire+0x10/0x10 [ 2227.704649] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 2227.705131] ? lock_acquire.part.0+0xec/0x320 [ 2227.705587] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2227.706067] ? ext4_map_blocks+0x704/0x19e0 [ 2227.706473] ? rcu_read_lock_sched_held+0x42/0x80 [ 2227.706936] ? trace_lock_acquire+0x170/0x1e0 [ 2227.707381] ? ext4_map_blocks+0x704/0x19e0 [ 2227.707788] ? lock_acquire+0x32/0xc0 [ 2227.708164] ? ext4_map_blocks+0x704/0x19e0 [ 2227.708555] ? __pfx_down_write+0x10/0x10 [ 2227.708970] ? ext4_es_lookup_extent+0xc8/0xc90 [ 2227.709444] ext4_map_blocks+0x776/0x19e0 [ 2227.709845] ? rcu_read_lock_sched_held+0x42/0x80 [ 2227.710304] ? trace_jbd2_handle_start+0x1b3/0x270 [ 2227.710788] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2227.711232] ? jbd2__journal_start+0xf7/0x6b0 [ 2227.711680] ? __ext4_journal_start_sb+0x4c2/0x6f0 [ 2227.712144] ? __ext4_journal_start_sb+0x1e0/0x6f0 [ 2227.712615] ? ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 2227.713123] ext4_alloc_file_blocks.isra.0+0x2df/0xbd0 [ 2227.713642] ? __pfx_ext4_alloc_file_blocks.isra.0+0x10/0x10 [ 2227.714190] ? __mnt_drop_write_file+0x4e/0xf0 [ 2227.714646] ? __pfx_file_modified_flags+0x10/0x10 [ 2227.715131] ? lock_is_held_type+0x9f/0x120 [ 2227.715563] ext4_fallocate+0x1fc5/0x3f50 [ 2227.715996] ? __pfx_ext4_fallocate+0x10/0x10 [ 2227.716440] ? __x64_sys_fallocate+0xd3/0x140 [ 2227.716871] ? lock_is_held_type+0x9f/0x120 [ 2227.717272] ? __pfx_ext4_fallocate+0x10/0x10 [ 2227.717724] vfs_fallocate+0x48d/0xe30 [ 2227.718086] __x64_sys_fallocate+0xd3/0x140 [ 2227.718508] do_syscall_64+0x3f/0x90 [ 2227.718872] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2227.719394] RIP: 0033:0x7f9566faab19 [ 2227.719744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2227.721453] RSP: 002b:00007f95644ff188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2227.722168] RAX: ffffffffffffffda RBX: 00007f95670be020 RCX: 00007f9566faab19 [ 2227.722832] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000005 [ 2227.723500] RBP: 00007f95644ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2227.724181] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2227.724862] R13: 00007ffc86a4213f R14: 00007f95644ff300 R15: 0000000000022000 [ 2227.725575] 05:31:51 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:31:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:31:52 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:31:52 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:31:52 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 54) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:31:52 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) [ 2228.253175] FAULT_INJECTION: forcing a failure. [ 2228.253175] name failslab, interval 1, probability 0, space 0, times 0 [ 2228.254773] CPU: 0 PID: 11217 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2228.255483] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2228.256354] Call Trace: [ 2228.256599] [ 2228.256821] dump_stack_lvl+0xc1/0xf0 [ 2228.257226] should_fail_ex+0x4b4/0x5b0 [ 2228.257621] ? __kernfs_new_node+0xd4/0x870 [ 2228.258045] should_failslab+0x9/0x20 [ 2228.258424] kmem_cache_alloc+0x5a/0x320 [ 2228.258822] ? kernfs_add_one+0x376/0x4f0 [ 2228.259199] __kernfs_new_node+0xd4/0x870 [ 2228.259613] ? kernfs_add_one+0x175/0x4f0 [ 2228.260006] ? lock_release+0x1e3/0x710 [ 2228.260379] ? __pfx___kernfs_new_node+0x10/0x10 [ 2228.260846] ? __pfx_lock_release+0x10/0x10 [ 2228.261251] ? kernfs_add_one+0x376/0x4f0 [ 2228.261648] ? kernfs_add_one+0x376/0x4f0 [ 2228.262026] ? down_write+0x11a/0x1f0 [ 2228.262416] ? up_write+0x196/0x510 [ 2228.262759] kernfs_new_node+0x97/0x120 [ 2228.263146] __kernfs_create_file+0x55/0x350 [ 2228.263549] sysfs_add_file_mode_ns+0x21c/0x440 [ 2228.264014] ? __pfx_dev_attr_store+0x10/0x10 [ 2228.264462] internal_create_group+0x322/0xb90 [ 2228.264922] ? __pfx_internal_create_group+0x10/0x10 [ 2228.265431] ? kernfs_add_one+0x17a/0x4f0 [ 2228.265838] ? kernfs_create_link+0x1bb/0x240 [ 2228.266281] internal_create_groups.part.0+0x90/0x140 [ 2228.266792] sysfs_create_groups+0x29/0x50 [ 2228.267214] device_add+0x60f/0x1ab0 [ 2228.267596] ? __pfx_device_add+0x10/0x10 [ 2228.267981] ? __init_waitqueue_head+0xca/0x150 [ 2228.268454] netdev_register_kobject+0x17e/0x3b0 [ 2228.268923] register_netdevice+0xd60/0x1530 [ 2228.269383] ? __pfx_register_netdevice+0x10/0x10 [ 2228.269861] ? dev_addr_mod+0x29e/0x350 [ 2228.270253] __tun_chr_ioctl+0x21aa/0x4220 [ 2228.270687] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2228.271141] ? __pfx___fget_files+0x10/0x10 [ 2228.271561] ? lock_acquire+0x32/0xc0 [ 2228.271940] ? __pfx___fget_files+0x10/0x10 [ 2228.272372] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2228.272791] __x64_sys_ioctl+0x19e/0x210 [ 2228.273197] do_syscall_64+0x3f/0x90 [ 2228.273571] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2228.274077] RIP: 0033:0x7fe31ab8cb19 [ 2228.274442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2228.276115] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2228.276839] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 2228.277536] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2228.278210] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2228.278873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2228.279546] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 2228.280238] 05:31:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:31:52 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:31:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 25) 05:31:52 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 55) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) [ 2228.832508] FAULT_INJECTION: forcing a failure. [ 2228.832508] name failslab, interval 1, probability 0, space 0, times 0 [ 2228.833898] CPU: 0 PID: 11235 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2228.834930] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2228.835965] Call Trace: [ 2228.836305] [ 2228.836616] dump_stack_lvl+0xc1/0xf0 [ 2228.837156] should_fail_ex+0x4b4/0x5b0 [ 2228.837697] ? ext4_mb_new_blocks+0x666/0x4ad0 [ 2228.838298] should_failslab+0x9/0x20 [ 2228.838813] kmem_cache_alloc+0x5a/0x320 [ 2228.839354] ? __mark_inode_dirty+0x249/0xee0 [ 2228.839977] ext4_mb_new_blocks+0x666/0x4ad0 [ 2228.840586] ? lock_is_held_type+0x9f/0x120 [ 2228.841181] ? ext4_cache_extents+0x148/0x2d0 [ 2228.841780] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 2228.842409] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2228.843052] ext4_ext_map_blocks+0x2004/0x5dd0 [ 2228.843694] ? __pfx___lock_acquire+0x10/0x10 [ 2228.844309] ? __pfx___lock_acquire+0x10/0x10 [ 2228.844933] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 2228.845612] ? lock_acquire.part.0+0xec/0x320 [ 2228.846238] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2228.846896] ? ext4_map_blocks+0x704/0x19e0 [ 2228.847459] ? rcu_read_lock_sched_held+0x42/0x80 [ 2228.848099] ? trace_lock_acquire+0x170/0x1e0 [ 2228.848713] ? ext4_map_blocks+0x704/0x19e0 [ 2228.849280] ? lock_acquire+0x32/0xc0 [ 2228.849814] ? ext4_map_blocks+0x704/0x19e0 [ 2228.850369] ? __pfx_down_write+0x10/0x10 [ 2228.850898] ? ext4_es_lookup_extent+0xc8/0xc90 [ 2228.851520] ext4_map_blocks+0x776/0x19e0 [ 2228.852039] ? rcu_read_lock_sched_held+0x42/0x80 [ 2228.852641] ? trace_jbd2_handle_start+0x1b3/0x270 [ 2228.853272] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2228.853844] ? jbd2__journal_start+0xf7/0x6b0 [ 2228.854430] ? __ext4_journal_start_sb+0x4c2/0x6f0 [ 2228.855061] ? __ext4_journal_start_sb+0x1e0/0x6f0 [ 2228.855673] ? ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 2228.856370] ext4_alloc_file_blocks.isra.0+0x2df/0xbd0 [ 2228.857088] ? __pfx_ext4_alloc_file_blocks.isra.0+0x10/0x10 [ 2228.857831] ? __mnt_drop_write_file+0x4e/0xf0 [ 2228.858423] ? __pfx_file_modified_flags+0x10/0x10 [ 2228.859070] ? lock_is_held_type+0x9f/0x120 [ 2228.859631] ext4_fallocate+0x1fc5/0x3f50 [ 2228.860192] ? __pfx_ext4_fallocate+0x10/0x10 [ 2228.860771] ? __x64_sys_fallocate+0xd3/0x140 [ 2228.861346] ? lock_is_held_type+0x9f/0x120 [ 2228.861897] ? __pfx_ext4_fallocate+0x10/0x10 [ 2228.862475] vfs_fallocate+0x48d/0xe30 [ 2228.862980] __x64_sys_fallocate+0xd3/0x140 [ 2228.863522] do_syscall_64+0x3f/0x90 [ 2228.864021] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2228.864671] RIP: 0033:0x7f9566faab19 [ 2228.865151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2228.867263] RSP: 002b:00007f95644ff188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2228.868168] RAX: ffffffffffffffda RBX: 00007f95670be020 RCX: 00007f9566faab19 [ 2228.869035] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000005 [ 2228.869886] RBP: 00007f95644ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2228.870724] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2228.871575] R13: 00007ffc86a4213f R14: 00007f95644ff300 R15: 0000000000022000 [ 2228.872449] 05:32:06 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 26) 05:32:06 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 56) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:32:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:32:06 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) sendfile(r2, r1, 0x0, 0xfffffdef) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x800, 0x9, 0x4, 0x79}, {0xb5, 0x9, 0x40, 0x200}, {0x0, 0x2, 0x81, 0x293}, {0x5, 0xcd, 0x2, 0x97b8}]}) 05:32:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:32:06 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x4, 0x259}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0, 0x0) io_uring_setup(0x5563, &(0x7f0000000080)={0x0, 0x2255, 0x2, 0x0, 0xdd}) r2 = memfd_secret(0x80000) io_uring_enter(r2, 0x0, 0xa5f1, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x2000004, 0x20910, r2, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)={0x0, 0x0}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x2201, 0x0) fcntl$setpipe(r6, 0x407, 0x3f) fcntl$setownex(r0, 0xf, &(0x7f0000000440)={0x1, r5}) syz_io_uring_submit(0x0, r3, &(0x7f0000000200), 0x8000) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000100)="15d790e8b2246705074eec46d44ba2b1f0d78a67ee171ab163a2af739872ded4540ae419c85156b09bbc02f21e8642ddd6938855e09a7dff5f0e0129d525950b7690c1f1f71843e338842c2af0bf69c9cd17c803725c50dd5b4d95904a2497a0887f05e4cb05bb661f4696e42c22f0032063d8b4c01beb3a036eda4f86e6de110b", 0x81, 0x40010003, 0x0, {0x0, r4}}, 0x9) io_uring_enter(r1, 0x617, 0x880a, 0x3, &(0x7f0000000240)={[0x4]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) syz_io_uring_setup(0x6eca, &(0x7f0000000300)={0x0, 0xce61, 0x4, 0x0, 0x62, 0x0, r7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:32:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:32:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:32:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) [ 2242.153166] FAULT_INJECTION: forcing a failure. [ 2242.153166] name failslab, interval 1, probability 0, space 0, times 0 [ 2242.154854] CPU: 1 PID: 11254 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2242.155974] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2242.157326] Call Trace: [ 2242.157793] [ 2242.158263] dump_stack_lvl+0xc1/0xf0 [ 2242.159050] should_fail_ex+0x4b4/0x5b0 [ 2242.159704] ? ext4_mb_new_blocks+0x1901/0x4ad0 [ 2242.160439] should_failslab+0x9/0x20 [ 2242.161172] kmem_cache_alloc+0x5a/0x320 [ 2242.161851] ext4_mb_new_blocks+0x1901/0x4ad0 [ 2242.162708] ? lock_is_held_type+0x9f/0x120 [ 2242.163414] ? ext4_cache_extents+0x148/0x2d0 [ 2242.164154] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 2242.164814] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2242.165610] ext4_ext_map_blocks+0x2004/0x5dd0 [ 2242.166388] ? __pfx___lock_acquire+0x10/0x10 [ 2242.167119] ? __pfx___lock_acquire+0x10/0x10 [ 2242.167871] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 2242.168648] ? lock_acquire.part.0+0xec/0x320 [ 2242.169403] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2242.170179] ? ext4_map_blocks+0x704/0x19e0 [ 2242.170847] ? rcu_read_lock_sched_held+0x42/0x80 [ 2242.171470] ? trace_lock_acquire+0x170/0x1e0 [ 2242.172197] ? ext4_map_blocks+0x704/0x19e0 [ 2242.172733] ? lock_acquire+0x32/0xc0 [ 2242.173255] ? ext4_map_blocks+0x704/0x19e0 [ 2242.173809] ? __pfx_down_write+0x10/0x10 [ 2242.174348] ? ext4_es_lookup_extent+0xc8/0xc90 [ 2242.174974] ext4_map_blocks+0x776/0x19e0 [ 2242.175506] ? rcu_read_lock_sched_held+0x42/0x80 [ 2242.176121] ? trace_jbd2_handle_start+0x1b3/0x270 [ 2242.176766] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2242.177366] ? jbd2__journal_start+0xf7/0x6b0 [ 2242.177971] ? __ext4_journal_start_sb+0x4c2/0x6f0 [ 2242.178590] ? __ext4_journal_start_sb+0x1e0/0x6f0 [ 2242.179365] ? ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 2242.180252] ext4_alloc_file_blocks.isra.0+0x2df/0xbd0 [ 2242.180954] ? __pfx_ext4_alloc_file_blocks.isra.0+0x10/0x10 [ 2242.181689] ? __mnt_drop_write_file+0x4e/0xf0 [ 2242.182285] ? __pfx_file_modified_flags+0x10/0x10 [ 2242.182927] ? lock_is_held_type+0x9f/0x120 [ 2242.183498] ext4_fallocate+0x1fc5/0x3f50 [ 2242.184063] ? __pfx_ext4_fallocate+0x10/0x10 [ 2242.184656] ? __x64_sys_fallocate+0xd3/0x140 [ 2242.185253] ? lock_is_held_type+0x9f/0x120 [ 2242.185813] ? __pfx_ext4_fallocate+0x10/0x10 [ 2242.186410] vfs_fallocate+0x48d/0xe30 [ 2242.186926] __x64_sys_fallocate+0xd3/0x140 [ 2242.187487] do_syscall_64+0x3f/0x90 [ 2242.187991] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2242.188654] RIP: 0033:0x7f9566faab19 [ 2242.189126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2242.191398] RSP: 002b:00007f95644ff188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2242.192318] RAX: ffffffffffffffda RBX: 00007f95670be020 RCX: 00007f9566faab19 [ 2242.193199] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000005 [ 2242.194066] RBP: 00007f95644ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2242.194930] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2242.195793] R13: 00007ffc86a4213f R14: 00007f95644ff300 R15: 0000000000022000 [ 2242.196704] 05:32:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:32:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:32:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:32:06 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 57) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:32:06 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) pwritev2(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="6110aba83eb5892e8a780161ce0aeaafe5df84a53cc253d053e98b0aa62f5a4140864a72ddf805ac2ad3c1f6c260f90fc836987fe2a8a3a189e95a749bb203c00e7a6db9a90af3aad918b8", 0x4b}, {&(0x7f0000000100)="64acd4590f99b5dca9b9dced6137a0a8c058cf565e594a00d57e42c30468971d3c3236b1eaa867da7ff5394957131ceea073b0923ad950f1b195c09f959af1d23cae96f444931858a56776a63a632e9180265183225852562445cee9f71b2e1b95a5727ac1f1ae35ecee2d94a7807374aa4b7e20105658c24ea627e6c5ba961f9ccb6dc17f50af1e313f41dbdafdbb4590951f0de31d9d432dca83c33705ad00483cd1a6377941d46bfe0751c636aabe48d8ec0351c2e8e2b5d5da3820be99d60b7091f7f5d8ca2fb9a992622cc27cb945ee1dc02e0b8b1ad35eafe1372c2708bebf565df5ff6748e90b40bfe916c3260415ab1b", 0xf4}, {&(0x7f00000002c0)="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", 0xfb}], 0x3, 0x8, 0x5, 0x9) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:32:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) [ 2242.735048] FAULT_INJECTION: forcing a failure. [ 2242.735048] name failslab, interval 1, probability 0, space 0, times 0 [ 2242.737065] CPU: 0 PID: 11277 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2242.738097] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2242.739073] Call Trace: [ 2242.739394] [ 2242.739686] dump_stack_lvl+0xc1/0xf0 [ 2242.740195] should_fail_ex+0x4b4/0x5b0 [ 2242.740706] ? __kernfs_new_node+0xd4/0x870 [ 2242.741269] should_failslab+0x9/0x20 [ 2242.741757] kmem_cache_alloc+0x5a/0x320 [ 2242.742265] ? kernfs_add_one+0x376/0x4f0 [ 2242.742788] __kernfs_new_node+0xd4/0x870 [ 2242.743307] ? kernfs_add_one+0x175/0x4f0 [ 2242.743801] ? lock_release+0x1e3/0x710 [ 2242.744309] ? __pfx___kernfs_new_node+0x10/0x10 [ 2242.744893] ? __pfx_lock_release+0x10/0x10 [ 2242.745436] ? kernfs_add_one+0x376/0x4f0 [ 2242.745931] ? kernfs_add_one+0x376/0x4f0 [ 2242.746440] ? down_write+0x11a/0x1f0 [ 2242.746950] ? up_write+0x196/0x510 [ 2242.747419] kernfs_new_node+0x97/0x120 [ 2242.747925] __kernfs_create_file+0x55/0x350 [ 2242.748486] sysfs_add_file_mode_ns+0x21c/0x440 [ 2242.749097] ? __pfx_dev_attr_store+0x10/0x10 [ 2242.749738] internal_create_group+0x322/0xb90 [ 2242.750335] ? __pfx_internal_create_group+0x10/0x10 [ 2242.750954] ? kernfs_add_one+0x17a/0x4f0 [ 2242.751477] ? kernfs_create_link+0x1bb/0x240 [ 2242.752030] internal_create_groups.part.0+0x90/0x140 [ 2242.752692] sysfs_create_groups+0x29/0x50 [ 2242.753224] device_add+0x60f/0x1ab0 [ 2242.753715] ? __pfx_device_add+0x10/0x10 [ 2242.754235] ? __init_waitqueue_head+0xca/0x150 [ 2242.754849] netdev_register_kobject+0x17e/0x3b0 [ 2242.755441] register_netdevice+0xd60/0x1530 [ 2242.756020] ? __pfx_register_netdevice+0x10/0x10 [ 2242.756608] ? dev_addr_mod+0x29e/0x350 [ 2242.757114] __tun_chr_ioctl+0x21aa/0x4220 [ 2242.757679] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2242.758253] ? __pfx___fget_files+0x10/0x10 [ 2242.758800] ? lock_acquire+0x32/0xc0 [ 2242.759287] ? __pfx___fget_files+0x10/0x10 [ 2242.759851] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2242.760418] __x64_sys_ioctl+0x19e/0x210 [ 2242.760947] do_syscall_64+0x3f/0x90 [ 2242.761440] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2242.762107] RIP: 0033:0x7fe31ab8cb19 [ 2242.762570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2242.764725] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2242.765608] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 2242.766475] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2242.767353] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2242.768214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2242.769080] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 2242.769990] 05:32:07 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:32:19 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 27) 05:32:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:32:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:32:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f0000000040)='./file1\x00', 0x80, 0x1ec) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) sendfile(r1, r0, 0x0, 0xfffffdef) 05:32:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:32:19 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 58) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:32:19 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r1, 0x2) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x3, 0x98, 0x8, 0x6, 0x0, 0x9, 0x80, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xf7, 0x400}, 0x8800, 0x4, 0x9, 0x2, 0x647d, 0x3ff, 0x1, 0x0, 0x8000, 0x0, 0x7f}, 0xffffffffffffffff, 0x6, r1, 0xb) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:32:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:32:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400), 0x2, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000440), 0x4100, 0x0) openat(r4, &(0x7f00000004c0)='./file0\x00', 0xc100, 0x4) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000480)=0xffffff72) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x80000001, 0x3, &(0x7f0000000300)=[{&(0x7f00000000c0)="62046593a7b778929b5d544f8f85ded67c219f220efe135fea41368647e9d6007a93869d", 0x24, 0x1000}, {&(0x7f0000000180)="8283400f73ea383a04754251184de3d56e6b7e4440f2e285fc82a88f71586f3b4e59fc0242657289aee8af8d45c7ddaf62e55e91b754587e3b9fe72a8a8581b889e4d055085aff76622a826d41042599e5ebb2dd1cbac5c3369376e16f7fa1da2ad55f98de", 0x65, 0x13c}, {&(0x7f0000000240)="42be5eed5f16c75f970fc2f7d38f6656e32fd6ca7f4a65fef665f1d969694aa675e7b1ed40182322badd8cae1a4247d3a7a6cf457b9503b706fa52d4d6d8221b3be93cc49a9dfe1214d507e401320551fd1bc08bb2eae47a30e10d9dfd265d868f7d72170877232f6963cbcc5a74b7a2d903ac309c9543ca59572549697d412dd3f8d5bf52e4af6a2b2556a60baee4d7c671b0090a7832fe9512aa5cdcd9a644f4d2ea56158bd17306340f7775c34ee3b2bbd46a18", 0xb5, 0x6}], 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="756d61736b3d30303030133030303030303030303030303030303031b12c6e6f646f74732c646f74732c6e66732c636865636b3d72656c617865642c6e66732c657569643ce88fdea941328da9c29407edc33e0400483660da6bbf4415f44d8164640656f84d26164bb2f935e7826d4945dc23e13e50c1ecf573e1877553fad7f1cc97c76dc35383d8dea61ed9b55fd73951dc7ab8b808093b5b14d650c06d0be62f83fc665fd76012fabeca66ccc386", @ANYRESDEC=r5, @ANYBLOB=',smackfsdef=,subj_role=,pcr=00000000000000000057,measure,obj_user=,fscontext=sysadm_u,dont_appraise,func=KEXEC_KERNEL_CHECK,\x00']) sendfile(r1, r0, 0x0, 0xfffffdef) 05:32:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:32:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:32:19 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 59) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:32:19 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = getpid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r2, 0x2) r3 = syz_open_dev$mouse(&(0x7f0000000080), 0x9, 0x400100) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={r2, r3, 0x7b4}) syz_io_uring_setup(0x424, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x1000, 0x39d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:32:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:32:20 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 60) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:32:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) [ 2256.032306] FAULT_INJECTION: forcing a failure. [ 2256.032306] name failslab, interval 1, probability 0, space 0, times 0 [ 2256.033608] CPU: 1 PID: 11332 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2256.034172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2256.034729] Call Trace: [ 2256.034911] [ 2256.035076] dump_stack_lvl+0xc1/0xf0 [ 2256.035364] should_fail_ex+0x4b4/0x5b0 [ 2256.035658] ? __kernfs_new_node+0xd4/0x870 [ 2256.035970] should_failslab+0x9/0x20 [ 2256.036246] kmem_cache_alloc+0x5a/0x320 [ 2256.036538] ? kernfs_add_one+0x376/0x4f0 [ 2256.036827] __kernfs_new_node+0xd4/0x870 [ 2256.037133] ? kernfs_add_one+0x175/0x4f0 [ 2256.037439] ? lock_release+0x1e3/0x710 [ 2256.037735] ? __pfx___kernfs_new_node+0x10/0x10 [ 2256.038081] ? __pfx_lock_release+0x10/0x10 [ 2256.038380] ? kernfs_add_one+0x376/0x4f0 [ 2256.038670] ? kernfs_add_one+0x376/0x4f0 [ 2256.038971] ? down_write+0x11a/0x1f0 [ 2256.039258] ? up_write+0x196/0x510 [ 2256.039514] kernfs_new_node+0x97/0x120 [ 2256.039802] __kernfs_create_file+0x55/0x350 [ 2256.040122] sysfs_add_file_mode_ns+0x21c/0x440 [ 2256.040447] ? __pfx_dev_attr_store+0x10/0x10 [ 2256.040782] internal_create_group+0x322/0xb90 [ 2256.041105] ? __pfx_internal_create_group+0x10/0x10 [ 2256.041482] ? kernfs_add_one+0x17a/0x4f0 [ 2256.041782] ? kernfs_create_link+0x1bb/0x240 [ 2256.042091] internal_create_groups.part.0+0x90/0x140 [ 2256.042464] sysfs_create_groups+0x29/0x50 [ 2256.042773] device_add+0x60f/0x1ab0 [ 2256.043052] ? __pfx_device_add+0x10/0x10 [ 2256.043346] ? __init_waitqueue_head+0xca/0x150 [ 2256.043691] netdev_register_kobject+0x17e/0x3b0 [ 2256.044029] register_netdevice+0xd60/0x1530 [ 2256.044362] ? __pfx_register_netdevice+0x10/0x10 [ 2256.044702] ? dev_addr_mod+0x29e/0x350 [ 2256.044988] __tun_chr_ioctl+0x21aa/0x4220 [ 2256.045291] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2256.045659] ? __pfx___fget_files+0x10/0x10 [ 2256.046064] ? lock_acquire+0x32/0xc0 [ 2256.046347] ? __pfx___fget_files+0x10/0x10 [ 2256.046654] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2256.046980] __x64_sys_ioctl+0x19e/0x210 [ 2256.047261] do_syscall_64+0x3f/0x90 [ 2256.047539] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2256.047888] RIP: 0033:0x7fe31ab8cb19 [ 2256.048151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2256.049343] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2256.049942] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 2256.050434] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2256.050919] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2256.051403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2256.051892] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 2256.052493] 05:32:35 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 28) 05:32:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:32:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) stat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) sendfile(r1, r0, 0x0, 0xfffffdef) r4 = socket(0x3, 0x5, 0x713) close(r4) 05:32:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:32:35 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 61) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:32:35 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:32:35 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0xfffffffe, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:32:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:32:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:32:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:32:35 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r3}}, 0x20) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x80, 0x75, 0xfa, 0x4, 0x0, 0x80000001, 0x40800, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x52, 0x2, @perf_config_ext={0xfd, 0x4800000}, 0x40856, 0x141b, 0x8d48, 0x7, 0x7ff, 0x90, 0x800, 0x0, 0x9, 0x0, 0xfff}, 0x0, 0x2, r3, 0x1) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:32:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:32:35 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:32:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:32:35 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 62) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:32:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:32:48 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 29) 05:32:48 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:32:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:32:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:32:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:32:48 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0xdcd23e74710125d6, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES16]) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r2) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000001600)=0x0) r5 = getpgid(0x0) r6 = getpgrp(0xffffffffffffffff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000000000004d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000008080000000000000000000000000000000000000000005372d9d4efbfdd4b0000000000000000000000000000000000000000003b85a0da463fc6548ba873c44a425b258abc29d4412f4835619551929bdfafd803f010e4cc3e2e69fb7f22d0501adaf335f966817290"]) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) syz_open_procfs(r8, &(0x7f0000000180)='clear_refs\x00') pipe(&(0x7f0000001a80)={0xffffffffffffffff}) clone3(&(0x7f0000001ac0)={0x40020300, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x39}, &(0x7f00000002c0)=""/255, 0xff, &(0x7f00000001c0), &(0x7f0000001a40)=[r4, r5, 0xffffffffffffffff, r6, r8, 0x0], 0x6, {r9}}, 0x58) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:32:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = syz_io_uring_complete(0x0) mount_setattr(r1, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r2}}, 0x20) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x200, &(0x7f0000000180)={0x10, 0x0, 0x20000, {r2}}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ftruncate(r6, 0x3ff) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r6, r3, &(0x7f0000000080)=0x707d, 0x4) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000040)) sendfile(r4, r3, 0x0, 0xfffffdef) 05:32:48 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 63) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:32:48 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) splice(r1, &(0x7f0000000080)=0x250d800000000000, r0, &(0x7f00000000c0)=0xfffffffffffffeff, 0x20, 0xc) 05:32:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:32:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:32:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:32:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:32:48 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:32:48 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x420000, 0x2) syncfs(r1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10000, 0x40) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) lseek(r2, 0x200, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'veth1_to_bond\x00'}) 05:32:48 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 64) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:33:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 30) 05:33:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:33:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:33:02 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 65) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:33:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, 0x0, 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:33:02 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg(r1, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll={0x11, 0x4305, r3}, 0x80, 0x0}}], 0x1, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)=r3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 05:33:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:33:02 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) openat(r1, &(0x7f0000000080)='./file1\x00', 0x40000, 0x101) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) sendmsg$unix(r6, &(0x7f0000000380)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000240)="b8f962e7466e1dcea5caa1e8b817d320aad48497829bc5feb22735d6072e582878f725e3fa0ea9c4d24ce948bfc47d89d6d420d670a2ac922bb6fa21d89e21a39701ae67eba0d8d9405e7d267b92713eb430a3482adbaecae155995b9781a5c95432d13cfad3e10298f28d8268e7e6a736e4f909dfe85e65797ef07b2d1837e2a09764d766716dd7faf0", 0x8a}, {&(0x7f00000001c0)="8cf8f17568798181964e96419e009e1503eb8d8c385d76658a6872", 0x1b}, {&(0x7f0000000300)="68dac851b1be2083703b5050b2ef7b9895d746587d4439c2e07689a9ea186df246d51d07d0307ff4d365076f92a88819136de9637433e33885", 0x39}], 0x3, 0x0, 0x0, 0x44}, 0x4010) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) accept4$unix(r2, 0x0, &(0x7f0000000400), 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r3, r2, 0x0, 0xfffffdef) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000003c0)=0x200) [ 2298.771833] FAULT_INJECTION: forcing a failure. [ 2298.771833] name failslab, interval 1, probability 0, space 0, times 0 [ 2298.773164] CPU: 0 PID: 11455 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2298.773706] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2298.774249] Call Trace: [ 2298.774428] [ 2298.774590] dump_stack_lvl+0xc1/0xf0 [ 2298.774868] should_fail_ex+0x4b4/0x5b0 [ 2298.775156] ? __kernfs_new_node+0xd4/0x870 [ 2298.775457] should_failslab+0x9/0x20 [ 2298.775727] kmem_cache_alloc+0x5a/0x320 [ 2298.776005] ? kernfs_add_one+0x376/0x4f0 [ 2298.776290] __kernfs_new_node+0xd4/0x870 [ 2298.776586] ? kernfs_add_one+0x175/0x4f0 [ 2298.776869] ? lock_release+0x1e3/0x710 [ 2298.777155] ? __pfx___kernfs_new_node+0x10/0x10 [ 2298.777487] ? __pfx_lock_release+0x10/0x10 [ 2298.777787] ? kernfs_add_one+0x376/0x4f0 [ 2298.778074] ? kernfs_add_one+0x376/0x4f0 [ 2298.778356] ? down_write+0x11a/0x1f0 [ 2298.778642] ? up_write+0x196/0x510 [ 2298.778901] kernfs_new_node+0x97/0x120 [ 2298.779176] __kernfs_create_file+0x55/0x350 [ 2298.779490] sysfs_add_file_mode_ns+0x21c/0x440 [ 2298.779825] ? __pfx_dev_attr_store+0x10/0x10 [ 2298.780146] internal_create_group+0x322/0xb90 [ 2298.780473] ? __pfx_internal_create_group+0x10/0x10 [ 2298.780824] ? kernfs_add_one+0x17a/0x4f0 [ 2298.781111] ? kernfs_create_link+0x1bb/0x240 [ 2298.781429] internal_create_groups.part.0+0x90/0x140 [ 2298.781793] sysfs_create_groups+0x29/0x50 [ 2298.782111] device_add+0x60f/0x1ab0 [ 2298.782383] ? __pfx_device_add+0x10/0x10 [ 2298.782683] ? __init_waitqueue_head+0xca/0x150 [ 2298.783032] netdev_register_kobject+0x17e/0x3b0 [ 2298.783384] register_netdevice+0xd60/0x1530 [ 2298.783715] ? __pfx_register_netdevice+0x10/0x10 [ 2298.784062] ? dev_addr_mod+0x29e/0x350 [ 2298.784355] __tun_chr_ioctl+0x21aa/0x4220 [ 2298.784671] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2298.785005] ? __pfx___fget_files+0x10/0x10 [ 2298.785313] ? lock_acquire+0x32/0xc0 [ 2298.785608] ? __pfx___fget_files+0x10/0x10 [ 2298.785938] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2298.786284] __x64_sys_ioctl+0x19e/0x210 [ 2298.786685] do_syscall_64+0x3f/0x90 [ 2298.786963] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2298.787336] RIP: 0033:0x7fe31ab8cb19 [ 2298.787597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2298.788827] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2298.789351] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 2298.789842] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2298.790348] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2298.790838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2298.791325] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 2298.791835] 05:33:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, 0x0, 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:33:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, 0x0, 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:33:03 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_io_uring_setup(0x400, &(0x7f0000000000)={0x0, 0x8ee5, 0x0, 0x1, 0x839a}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xfcc, &(0x7f0000000080)={0x0, 0xa49d, 0x10, 0x3, 0x2a2, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:33:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:33:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:33:15 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 66) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:33:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:33:15 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0xfffffffffffffffc, 0x10080) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'team_slave_0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x4, 0x1f}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:33:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:33:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 31) 05:33:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'vfat\x00'}, &(0x7f0000000240)=""/4096, 0x1000) sendfile(r1, r0, 0x0, 0xfffffdef) 05:33:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:33:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:33:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:33:16 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 67) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:33:16 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:33:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:33:16 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 32) 05:33:16 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 68) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:33:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) [ 2312.559966] FAULT_INJECTION: forcing a failure. [ 2312.559966] name failslab, interval 1, probability 0, space 0, times 0 [ 2312.561352] CPU: 0 PID: 11527 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2312.562112] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2312.562861] Call Trace: [ 2312.563142] [ 2312.563438] dump_stack_lvl+0xc1/0xf0 [ 2312.563833] should_fail_ex+0x4b4/0x5b0 [ 2312.564227] ? __kernfs_new_node+0xd4/0x870 [ 2312.564654] should_failslab+0x9/0x20 [ 2312.565029] kmem_cache_alloc+0x5a/0x320 [ 2312.565417] ? kernfs_add_one+0x376/0x4f0 [ 2312.565817] __kernfs_new_node+0xd4/0x870 [ 2312.566244] ? kernfs_add_one+0x175/0x4f0 [ 2312.566637] ? lock_release+0x1e3/0x710 [ 2312.567038] ? __pfx___kernfs_new_node+0x10/0x10 [ 2312.567498] ? __pfx_lock_release+0x10/0x10 [ 2312.567924] ? kernfs_add_one+0x376/0x4f0 [ 2312.568317] ? kernfs_add_one+0x376/0x4f0 [ 2312.568713] ? down_write+0x11a/0x1f0 [ 2312.569101] ? up_write+0x196/0x510 [ 2312.569460] kernfs_new_node+0x97/0x120 [ 2312.569847] __kernfs_create_file+0x55/0x350 [ 2312.570299] sysfs_add_file_mode_ns+0x21c/0x440 [ 2312.570774] ? __pfx_dev_attr_store+0x10/0x10 [ 2312.571229] internal_create_group+0x322/0xb90 [ 2312.571696] ? __pfx_internal_create_group+0x10/0x10 [ 2312.572201] ? kernfs_add_one+0x17a/0x4f0 [ 2312.572604] ? kernfs_create_link+0x1bb/0x240 [ 2312.573056] internal_create_groups.part.0+0x90/0x140 [ 2312.573561] sysfs_create_groups+0x29/0x50 [ 2312.573988] device_add+0x60f/0x1ab0 [ 2312.574382] ? __pfx_device_add+0x10/0x10 [ 2312.574803] ? __init_waitqueue_head+0xca/0x150 [ 2312.575279] netdev_register_kobject+0x17e/0x3b0 [ 2312.575758] register_netdevice+0xd60/0x1530 [ 2312.576210] ? __pfx_register_netdevice+0x10/0x10 [ 2312.576686] ? dev_addr_mod+0x29e/0x350 [ 2312.577081] __tun_chr_ioctl+0x21aa/0x4220 [ 2312.577506] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2312.577958] ? __pfx___fget_files+0x10/0x10 [ 2312.578381] ? lock_acquire+0x32/0xc0 [ 2312.578757] ? __pfx___fget_files+0x10/0x10 [ 2312.579187] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2312.579628] __x64_sys_ioctl+0x19e/0x210 [ 2312.580025] do_syscall_64+0x3f/0x90 [ 2312.580396] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2312.580894] RIP: 0033:0x7fe31ab8cb19 [ 2312.581249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2312.582888] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2312.583582] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 2312.584237] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2312.584883] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2312.585535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2312.586199] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 2312.586874] 05:33:30 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 33) 05:33:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:33:30 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 69) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:33:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r3}}, 0x20) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getsockname$unix(r3, &(0x7f0000000240)=@abs, &(0x7f0000000080)=0x6e) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r7, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r7, r6, 0x0, 0xfffffdef) sendfile(r5, r0, 0x0, 0xfffffdef) 05:33:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:33:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:33:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:33:30 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x4000000, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x1, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x410281, 0x81) [ 2326.057349] FAULT_INJECTION: forcing a failure. [ 2326.057349] name failslab, interval 1, probability 0, space 0, times 0 [ 2326.059171] CPU: 1 PID: 11546 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2326.060180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2326.061188] Call Trace: [ 2326.061516] [ 2326.061836] dump_stack_lvl+0xc1/0xf0 [ 2326.062417] should_fail_ex+0x4b4/0x5b0 [ 2326.062945] ? ext4_mb_new_blocks+0x1901/0x4ad0 [ 2326.063525] should_failslab+0x9/0x20 [ 2326.064048] kmem_cache_alloc+0x5a/0x320 [ 2326.064595] ext4_mb_new_blocks+0x1901/0x4ad0 [ 2326.065188] ? lock_is_held_type+0x9f/0x120 [ 2326.065741] ? ext4_cache_extents+0x148/0x2d0 [ 2326.066415] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 2326.067016] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2326.067645] ext4_ext_map_blocks+0x2004/0x5dd0 [ 2326.068267] ? __pfx___lock_acquire+0x10/0x10 [ 2326.068860] ? __pfx___lock_acquire+0x10/0x10 [ 2326.069555] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 2326.070220] ? lock_acquire.part.0+0xec/0x320 [ 2326.070827] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2326.071564] ? ext4_map_blocks+0x704/0x19e0 [ 2326.072101] ? rcu_read_lock_sched_held+0x42/0x80 [ 2326.072713] ? trace_lock_acquire+0x170/0x1e0 [ 2326.073295] ? ext4_map_blocks+0x704/0x19e0 [ 2326.073826] ? lock_acquire+0x32/0xc0 [ 2326.074334] ? ext4_map_blocks+0x704/0x19e0 [ 2326.074882] ? __pfx_down_write+0x10/0x10 [ 2326.075411] ? ext4_es_lookup_extent+0xc8/0xc90 [ 2326.076188] ext4_map_blocks+0x776/0x19e0 [ 2326.076228] ? rcu_read_lock_sched_held+0x42/0x80 [ 2326.076266] ? trace_jbd2_handle_start+0x1b3/0x270 [ 2326.076313] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2326.076346] ? jbd2__journal_start+0xf7/0x6b0 [ 2326.076402] ? __ext4_journal_start_sb+0x4c2/0x6f0 [ 2326.076438] ? __ext4_journal_start_sb+0x1e0/0x6f0 [ 2326.076475] ? ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 2326.076530] ext4_alloc_file_blocks.isra.0+0x2df/0xbd0 [ 2326.076592] ? __pfx_ext4_alloc_file_blocks.isra.0+0x10/0x10 [ 2326.076636] ? __mnt_drop_write_file+0x4e/0xf0 [ 2326.076680] ? __pfx_file_modified_flags+0x10/0x10 [ 2326.076737] ? lock_is_held_type+0x9f/0x120 [ 2326.076793] ext4_fallocate+0x1fc5/0x3f50 [ 2326.076863] ? __pfx_ext4_fallocate+0x10/0x10 [ 2326.076915] ? __x64_sys_fallocate+0xd3/0x140 [ 2326.076949] ? lock_is_held_type+0x9f/0x120 [ 2326.076996] ? __pfx_ext4_fallocate+0x10/0x10 [ 2326.077046] vfs_fallocate+0x48d/0xe30 [ 2326.077092] __x64_sys_fallocate+0xd3/0x140 [ 2326.077134] do_syscall_64+0x3f/0x90 [ 2326.077185] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2326.077236] RIP: 0033:0x7f9566faab19 [ 2326.077258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2326.077288] RSP: 002b:00007f95644ff188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2326.077319] RAX: ffffffffffffffda RBX: 00007f95670be020 RCX: 00007f9566faab19 [ 2326.077340] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000005 [ 2326.077360] RBP: 00007f95644ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2326.077379] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2326.077399] R13: 00007ffc86a4213f R14: 00007f95644ff300 R15: 0000000000022000 [ 2326.077451] 05:33:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:33:30 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) fsetxattr(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000001c00"], &(0x7f00000000c0)='\x00', 0x1, 0x3) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:33:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:33:30 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 70) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:33:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:33:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:33:31 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:33:31 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 34) [ 2327.184105] FAULT_INJECTION: forcing a failure. [ 2327.184105] name failslab, interval 1, probability 0, space 0, times 0 [ 2327.185498] CPU: 0 PID: 11581 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2327.186499] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2327.187477] Call Trace: [ 2327.187806] [ 2327.188105] dump_stack_lvl+0xc1/0xf0 [ 2327.188623] should_fail_ex+0x4b4/0x5b0 [ 2327.189145] should_failslab+0x9/0x20 [ 2327.189639] __kmem_cache_alloc_node+0x5b/0x310 [ 2327.190226] ? ext4_find_extent+0xa41/0xd30 [ 2327.190805] ? __pfx_mark_lock.part.0+0x10/0x10 [ 2327.191416] ? ext4_find_extent+0xa41/0xd30 [ 2327.191963] __kmalloc+0x46/0xc0 [ 2327.192410] ext4_find_extent+0xa41/0xd30 [ 2327.192962] ext4_ext_map_blocks+0x1c7/0x5dd0 [ 2327.193555] ? __pfx___lock_acquire+0x10/0x10 [ 2327.194146] ? __pfx___lock_acquire+0x10/0x10 [ 2327.194745] ? __pfx___lock_acquire+0x10/0x10 [ 2327.195338] ? lock_is_held_type+0x9f/0x120 [ 2327.195894] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 2327.196531] ? lock_acquire.part.0+0xec/0x320 [ 2327.197116] ? ext4_map_blocks+0x704/0x19e0 [ 2327.197650] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2327.198276] ? ext4_map_blocks+0x704/0x19e0 [ 2327.198819] ? rcu_read_lock_sched_held+0x42/0x80 [ 2327.199428] ? trace_lock_acquire+0x170/0x1e0 [ 2327.200021] ? ext4_map_blocks+0x704/0x19e0 [ 2327.200551] ? lock_acquire+0x32/0xc0 [ 2327.201059] ? ext4_map_blocks+0x704/0x19e0 [ 2327.201610] ? down_write+0x11a/0x1f0 [ 2327.202115] ? __pfx_down_write+0x10/0x10 [ 2327.202672] ? ext4_es_lookup_extent+0xc8/0xc90 [ 2327.203300] ext4_map_blocks+0x776/0x19e0 [ 2327.203832] ? rcu_read_lock_sched_held+0x42/0x80 [ 2327.204443] ? trace_jbd2_handle_start+0x1b3/0x270 [ 2327.205075] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2327.205659] ? jbd2__journal_start+0xf7/0x6b0 [ 2327.206247] ? __ext4_journal_start_sb+0x4c2/0x6f0 [ 2327.206875] ? __ext4_journal_start_sb+0x1e0/0x6f0 [ 2327.207503] ? ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 2327.208228] ext4_alloc_file_blocks.isra.0+0x2df/0xbd0 [ 2327.208936] ? __pfx_ext4_alloc_file_blocks.isra.0+0x10/0x10 [ 2327.209701] ? __mnt_drop_write_file+0x4e/0xf0 [ 2327.210343] ? __pfx_file_modified_flags+0x10/0x10 [ 2327.211012] ? lock_is_held_type+0x9f/0x120 [ 2327.211611] ext4_fallocate+0x1fc5/0x3f50 [ 2327.212193] ? __pfx_ext4_fallocate+0x10/0x10 [ 2327.212807] ? __x64_sys_fallocate+0xd3/0x140 [ 2327.213401] ? lock_is_held_type+0x9f/0x120 [ 2327.214007] ? __pfx_ext4_fallocate+0x10/0x10 [ 2327.214726] vfs_fallocate+0x48d/0xe30 [ 2327.215251] __x64_sys_fallocate+0xd3/0x140 [ 2327.215826] do_syscall_64+0x3f/0x90 [ 2327.216353] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2327.217050] RIP: 0033:0x7f9566faab19 [ 2327.217541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2327.219842] RSP: 002b:00007f95644ff188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2327.220818] RAX: ffffffffffffffda RBX: 00007f95670be020 RCX: 00007f9566faab19 [ 2327.221709] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000005 [ 2327.222607] RBP: 00007f95644ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2327.223509] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2327.224427] R13: 00007ffc86a4213f R14: 00007f95644ff300 R15: 0000000000022000 [ 2327.225364] 05:33:46 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 35) 05:33:46 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = syz_io_uring_complete(0x0) mount_setattr(r2, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r3}}, 0x20) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 05:33:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:33:46 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 71) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:33:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:33:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:33:46 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r1, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1) r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x210300, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)={0x80400}, 0x18) r4 = epoll_create1(0x80000) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) 05:33:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) [ 2342.434235] FAULT_INJECTION: forcing a failure. [ 2342.434235] name failslab, interval 1, probability 0, space 0, times 0 [ 2342.435934] CPU: 1 PID: 11604 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2342.437208] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2342.438383] Call Trace: [ 2342.438776] [ 2342.439130] dump_stack_lvl+0xc1/0xf0 [ 2342.439722] should_fail_ex+0x4b4/0x5b0 [ 2342.440331] ? jbd2_journal_add_journal_head+0x367/0x5d0 [ 2342.441124] should_failslab+0x9/0x20 [ 2342.441698] kmem_cache_alloc+0x5a/0x320 [ 2342.442333] jbd2_journal_add_journal_head+0x367/0x5d0 [ 2342.443103] jbd2_journal_get_create_access+0x44/0x560 [ 2342.443895] ? lock_is_held_type+0x9f/0x120 [ 2342.444537] __ext4_journal_get_create_access+0x54/0x1f0 [ 2342.445332] ext4_ext_insert_extent+0x12aa/0x4210 [ 2342.446063] ? ext4_cache_extents+0x148/0x2d0 [ 2342.446741] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 2342.447430] ? __pfx_ext4_ext_insert_extent+0x10/0x10 [ 2342.448165] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2342.448858] ext4_ext_map_blocks+0x137c/0x5dd0 [ 2342.449550] ? __pfx___lock_acquire+0x10/0x10 [ 2342.450216] ? __pfx___lock_acquire+0x10/0x10 [ 2342.450922] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 2342.451687] ? lock_acquire.part.0+0xec/0x320 [ 2342.452393] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2342.453145] ? ext4_map_blocks+0x704/0x19e0 [ 2342.453770] ? rcu_read_lock_sched_held+0x42/0x80 [ 2342.454494] ? trace_lock_acquire+0x170/0x1e0 [ 2342.455203] ? ext4_map_blocks+0x704/0x19e0 [ 2342.455844] ? lock_acquire+0x32/0xc0 [ 2342.456439] ? ext4_map_blocks+0x704/0x19e0 [ 2342.457107] ? __pfx_down_write+0x10/0x10 [ 2342.457743] ? ext4_es_lookup_extent+0xc8/0xc90 [ 2342.458511] ext4_map_blocks+0x776/0x19e0 [ 2342.459127] ? rcu_read_lock_sched_held+0x42/0x80 [ 2342.459812] ? trace_jbd2_handle_start+0x1b3/0x270 [ 2342.460689] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2342.461348] ? jbd2__journal_start+0xf7/0x6b0 [ 2342.462168] ? __ext4_journal_start_sb+0x4c2/0x6f0 [ 2342.462896] ? __ext4_journal_start_sb+0x1e0/0x6f0 [ 2342.463609] ? ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 2342.464410] ext4_alloc_file_blocks.isra.0+0x2df/0xbd0 [ 2342.465202] ? __pfx_ext4_alloc_file_blocks.isra.0+0x10/0x10 [ 2342.466040] ? __mnt_drop_write_file+0x4e/0xf0 [ 2342.466750] ? __pfx_file_modified_flags+0x10/0x10 [ 2342.467479] ? lock_is_held_type+0x9f/0x120 [ 2342.468127] ext4_fallocate+0x1fc5/0x3f50 [ 2342.468765] ? __pfx_ext4_fallocate+0x10/0x10 [ 2342.469473] ? __x64_sys_fallocate+0xd3/0x140 [ 2342.470112] ? lock_is_held_type+0x9f/0x120 [ 2342.470786] ? __pfx_ext4_fallocate+0x10/0x10 [ 2342.471443] vfs_fallocate+0x48d/0xe30 [ 2342.472046] __x64_sys_fallocate+0xd3/0x140 [ 2342.472651] do_syscall_64+0x3f/0x90 [ 2342.473242] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2342.474025] RIP: 0033:0x7f9566faab19 [ 2342.474571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2342.477135] RSP: 002b:00007f95644ff188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2342.478221] RAX: ffffffffffffffda RBX: 00007f95670be020 RCX: 00007f9566faab19 [ 2342.479245] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000005 [ 2342.480276] RBP: 00007f95644ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2342.481311] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2342.482305] R13: 00007ffc86a4213f R14: 00007f95644ff300 R15: 0000000000022000 [ 2342.483375] [ 2342.484576] ENOMEM in journal_alloc_journal_head, retrying. 05:33:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:33:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 05:33:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:33:47 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 72) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:33:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) [ 2342.938275] FAULT_INJECTION: forcing a failure. [ 2342.938275] name failslab, interval 1, probability 0, space 0, times 0 [ 2342.940357] CPU: 0 PID: 11620 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2342.941446] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2342.942441] Call Trace: [ 2342.942798] [ 2342.943102] dump_stack_lvl+0xc1/0xf0 [ 2342.943624] should_fail_ex+0x4b4/0x5b0 [ 2342.944145] ? __kernfs_new_node+0xd4/0x870 [ 2342.944714] should_failslab+0x9/0x20 [ 2342.945207] kmem_cache_alloc+0x5a/0x320 [ 2342.945737] ? kernfs_add_one+0x376/0x4f0 [ 2342.946272] __kernfs_new_node+0xd4/0x870 [ 2342.946820] ? kernfs_add_one+0x175/0x4f0 [ 2342.947339] ? lock_release+0x1e3/0x710 [ 2342.947867] ? __pfx___kernfs_new_node+0x10/0x10 [ 2342.948489] ? __pfx_lock_release+0x10/0x10 [ 2342.949052] ? kernfs_add_one+0x376/0x4f0 [ 2342.949583] ? kernfs_add_one+0x376/0x4f0 [ 2342.950128] ? down_write+0x11a/0x1f0 [ 2342.950648] ? up_write+0x196/0x510 [ 2342.951129] kernfs_new_node+0x97/0x120 [ 2342.951661] __kernfs_create_file+0x55/0x350 [ 2342.952246] sysfs_add_file_mode_ns+0x21c/0x440 [ 2342.952882] ? __pfx_dev_attr_store+0x10/0x10 [ 2342.953473] internal_create_group+0x322/0xb90 [ 2342.954071] ? __pfx_internal_create_group+0x10/0x10 [ 2342.954732] ? kernfs_add_one+0x17a/0x4f0 [ 2342.955268] ? kernfs_create_link+0x1bb/0x240 [ 2342.955872] internal_create_groups.part.0+0x90/0x140 [ 2342.956530] sysfs_create_groups+0x29/0x50 [ 2342.957099] device_add+0x60f/0x1ab0 [ 2342.957599] ? __pfx_device_add+0x10/0x10 [ 2342.958179] ? __init_waitqueue_head+0xca/0x150 [ 2342.958839] netdev_register_kobject+0x17e/0x3b0 [ 2342.959498] register_netdevice+0xd60/0x1530 [ 2342.960106] ? __pfx_register_netdevice+0x10/0x10 [ 2342.960734] ? dev_addr_mod+0x29e/0x350 [ 2342.961244] __tun_chr_ioctl+0x21aa/0x4220 [ 2342.961810] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2342.962415] ? __pfx___fget_files+0x10/0x10 [ 2342.963007] ? lock_acquire+0x32/0xc0 [ 2342.963515] ? __pfx___fget_files+0x10/0x10 [ 2342.964095] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2342.964711] __x64_sys_ioctl+0x19e/0x210 [ 2342.965235] do_syscall_64+0x3f/0x90 [ 2342.965735] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2342.966429] RIP: 0033:0x7fe31ab8cb19 [ 2342.966913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2342.969210] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2342.970147] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 2342.971050] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2342.971981] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2342.972895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2342.973831] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 2342.974791] 05:33:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:33:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffded) 05:33:47 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 36) 05:33:47 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 73) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:33:47 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x501000, 0x0) fsetxattr$security_capability(r1, &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0xffffff4c, 0x25}, {0x4d99, 0xb}]}, 0x14, 0x1) [ 2343.575354] FAULT_INJECTION: forcing a failure. [ 2343.575354] name failslab, interval 1, probability 0, space 0, times 0 [ 2343.577593] CPU: 0 PID: 11634 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2343.578614] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2343.579624] Call Trace: [ 2343.579955] [ 2343.580254] dump_stack_lvl+0xc1/0xf0 [ 2343.580763] should_fail_ex+0x4b4/0x5b0 [ 2343.581300] ? __kernfs_new_node+0xd4/0x870 [ 2343.581879] should_failslab+0x9/0x20 [ 2343.582377] kmem_cache_alloc+0x5a/0x320 [ 2343.582927] ? kernfs_add_one+0x376/0x4f0 [ 2343.583484] __kernfs_new_node+0xd4/0x870 [ 2343.584043] ? kernfs_add_one+0x175/0x4f0 [ 2343.584592] ? lock_release+0x1e3/0x710 [ 2343.585162] ? __pfx___kernfs_new_node+0x10/0x10 [ 2343.585806] ? __pfx_lock_release+0x10/0x10 [ 2343.586386] ? kernfs_add_one+0x376/0x4f0 [ 2343.586944] ? kernfs_add_one+0x376/0x4f0 [ 2343.587486] ? down_write+0x11a/0x1f0 [ 2343.588031] ? up_write+0x196/0x510 [ 2343.588507] kernfs_new_node+0x97/0x120 [ 2343.589054] __kernfs_create_file+0x55/0x350 [ 2343.589660] sysfs_add_file_mode_ns+0x21c/0x440 [ 2343.590287] ? __pfx_dev_attr_store+0x10/0x10 [ 2343.590931] internal_create_group+0x322/0xb90 [ 2343.591648] ? __pfx_internal_create_group+0x10/0x10 [ 2343.592302] ? kernfs_add_one+0x17a/0x4f0 [ 2343.592871] ? kernfs_create_link+0x1bb/0x240 [ 2343.593480] internal_create_groups.part.0+0x90/0x140 [ 2343.594180] sysfs_create_groups+0x29/0x50 [ 2343.594759] device_add+0x60f/0x1ab0 [ 2343.595296] ? __pfx_device_add+0x10/0x10 [ 2343.595858] ? __init_waitqueue_head+0xca/0x150 [ 2343.596525] netdev_register_kobject+0x17e/0x3b0 [ 2343.597159] register_netdevice+0xd60/0x1530 [ 2343.597756] ? __pfx_register_netdevice+0x10/0x10 [ 2343.598395] ? dev_addr_mod+0x29e/0x350 [ 2343.598933] __tun_chr_ioctl+0x21aa/0x4220 [ 2343.599501] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2343.600101] ? __pfx___fget_files+0x10/0x10 [ 2343.600660] ? lock_acquire+0x32/0xc0 [ 2343.601168] ? __pfx___fget_files+0x10/0x10 [ 2343.601760] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2343.602350] __x64_sys_ioctl+0x19e/0x210 [ 2343.602897] do_syscall_64+0x3f/0x90 [ 2343.603403] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2343.604082] RIP: 0033:0x7fe31ab8cb19 [ 2343.604554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2343.606789] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2343.607743] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 2343.608628] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2343.609511] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2343.610380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2343.611295] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 2343.612179] 05:34:04 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 37) 05:34:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffded) 05:34:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:34:04 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) sendfile(r1, r0, 0x0, 0xfffffdef) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000640)={{{@in=@initdev, @in6=@local}}, {{@in6=@private1}}}, &(0x7f0000000740)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000940)={0x0, 0x0}, &(0x7f0000000980)=0xc) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x2, 0x8, &(0x7f0000000580)=[{&(0x7f00000000c0)="6da478adb081d195aa3cc698c86f569b5a5d2ea1a14d00cac7fd3d9472296b72", 0x20, 0x81}, {&(0x7f0000000180)="65a185a5727b7c28bc57da2cb874c1ef18ff8539e38af14704e30f3d45c7a52467", 0x21, 0x100000001}, {&(0x7f0000000240)="ce2c8fe95a3a72d87caf031e8ca8a0a9c9ad993eb62ffd96e9d61c0b5e239bcf96d8b163fba6acd940735c7e2c259e0cedc40369ca0ac3017443c737d50e13e5aba171be5831f9ba7f50aeec279d3e1dfdf50fa07c72d313ca9d446e884c6d96a4dd09bc4234d3f008dfcd9d152a6ea2579ce35048c7c128ac123388ce440de0e52ac247d6926a3bdab7aa4a1fb6810fa8f0f165a0f4d886c39f0247b90cee60ff8e2f9046c4a8d8e9f351be297eca709ae25080", 0xb4, 0x3}, {&(0x7f0000000300)="da43f795be7b2d41e0e149d0279054ee3f11f6efd52dd5ba4f04ce056ca6157d4fc966a534de0f7dfe2bbabd6f66b433bcc7bc87b0c393de2dd792e0199cbaf32ce3b4c3140d81ba1416e20fd041042e4d77e4f5c7fe3ae4c513e39413468e6a6170d64ceefaf3957dcbc4c21a7383a561ac666dde06b0c49770b8bdda25000c2318bb3ceb21e879c48866f53c3d7d0cd962939696dba457db0b0a9e035f49a4971c7b5064145c3439ba74e62b70022b8ceda898c5dd1136d12c96b29b544e309db34d72d1e02d31965b1ed2c1a2b8", 0xcf, 0x4821}, {&(0x7f0000000400)="711076a59411f23797f34be4231105d8311ab007080f22395f86576d84fe130954f200c95a701b4971099f8a8e95cc6ffabe64b16794e6c0f90792aa58beb837cb563abaac4f6313a34244efd91c69e6a6d30e49ef73cf67d7cabf9030f31d5aac08a2634f72315867ec0ee88d", 0x6d}, {&(0x7f0000000480)="f3db1399882d70c48e534fbf52a9a798b15ac9a8d41396684b3baf8d112029866ffadd7c1fc220489e9e079e316547c0e5ff228968bd470bbf24858688b74214088afd6a1d9f4b2966af1f", 0x4b, 0x1}, {&(0x7f0000000500)="569f744765c36b8eb1167ee31ab263683140bd241912ad9aeb68b70bcf018c0d8aaf89772f9d8e753278d970f30fb0cd5cc2515a6095e396fca01f20460569eff2ed4cb84091777af0ed662b8fc65480388f75b4f041f3c38d78ab45e44d4b76986ea6f52b3477404047dd44fadf96f78546b714", 0x74, 0xfffffffffffffffa}, {&(0x7f00000001c0)="6b76e4f0622bcdd9edbd6d9f954aa10730f265f66f1994b2eb34e03ebd5dbe2c97ae4c", 0x23, 0x292}], 0x4000, &(0x7f0000000780)={[], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@fowner_eq={'fowner', 0x3d, r4}}, {@euid_eq={'euid', 0x3d, r5}}, {@obj_role={'obj_role', 0x3d, '@/'}}, {@euid_lt={'euid<', 0xee00}}, {@smackfshat={'smackfshat', 0x3d, 'vfat\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x80000001}}, {@func={'func', 0x3d, 'FILE_CHECK'}}]}) 05:34:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:34:04 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:34:04 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:34:04 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 74) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) [ 2360.794770] FAULT_INJECTION: forcing a failure. [ 2360.794770] name failslab, interval 1, probability 0, space 0, times 0 [ 2360.795692] CPU: 0 PID: 11665 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2360.796306] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2360.796838] Call Trace: [ 2360.797018] [ 2360.797176] dump_stack_lvl+0xc1/0xf0 [ 2360.797457] should_fail_ex+0x4b4/0x5b0 [ 2360.797741] ? ext4_mb_new_blocks+0x666/0x4ad0 [ 2360.798052] should_failslab+0x9/0x20 [ 2360.798318] kmem_cache_alloc+0x5a/0x320 [ 2360.798601] ? __mark_inode_dirty+0x249/0xee0 [ 2360.798940] ext4_mb_new_blocks+0x666/0x4ad0 [ 2360.799256] ? lock_is_held_type+0x9f/0x120 [ 2360.799580] ? ext4_cache_extents+0x148/0x2d0 [ 2360.799896] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 2360.800226] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2360.800562] ext4_ext_map_blocks+0x2004/0x5dd0 [ 2360.800895] ? __pfx___lock_acquire+0x10/0x10 [ 2360.801212] ? __pfx___lock_acquire+0x10/0x10 [ 2360.801542] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 2360.801890] ? lock_acquire.part.0+0xec/0x320 [ 2360.802214] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2360.802552] ? ext4_map_blocks+0x704/0x19e0 [ 2360.802849] ? rcu_read_lock_sched_held+0x42/0x80 [ 2360.803177] ? trace_lock_acquire+0x170/0x1e0 [ 2360.803501] ? ext4_map_blocks+0x704/0x19e0 [ 2360.803795] ? lock_acquire+0x32/0xc0 [ 2360.804071] ? ext4_map_blocks+0x704/0x19e0 [ 2360.804373] ? __pfx_down_write+0x10/0x10 [ 2360.804666] ? ext4_es_lookup_extent+0xc8/0xc90 [ 2360.805001] ext4_map_blocks+0x776/0x19e0 [ 2360.805293] ? rcu_read_lock_sched_held+0x42/0x80 [ 2360.805625] ? trace_jbd2_handle_start+0x1b3/0x270 [ 2360.805979] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2360.806297] ? jbd2__journal_start+0xf7/0x6b0 [ 2360.806616] ? __ext4_journal_start_sb+0x4c2/0x6f0 [ 2360.806965] ? __ext4_journal_start_sb+0x1e0/0x6f0 [ 2360.807304] ? ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 2360.807684] ext4_alloc_file_blocks.isra.0+0x2df/0xbd0 [ 2360.808056] ? __pfx_ext4_alloc_file_blocks.isra.0+0x10/0x10 [ 2360.808450] ? __mnt_drop_write_file+0x4e/0xf0 [ 2360.808779] ? __pfx_file_modified_flags+0x10/0x10 [ 2360.809140] ? lock_is_held_type+0x9f/0x120 [ 2360.809447] ext4_fallocate+0x1fc5/0x3f50 [ 2360.809762] ? __pfx_ext4_fallocate+0x10/0x10 [ 2360.810083] ? __x64_sys_fallocate+0xd3/0x140 [ 2360.810400] ? lock_is_held_type+0x9f/0x120 [ 2360.810719] ? __pfx_ext4_fallocate+0x10/0x10 [ 2360.811054] vfs_fallocate+0x48d/0xe30 [ 2360.811332] __x64_sys_fallocate+0xd3/0x140 [ 2360.811652] do_syscall_64+0x3f/0x90 [ 2360.811925] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2360.812304] RIP: 0033:0x7f9566faab19 [ 2360.812563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2360.813830] RSP: 002b:00007f95644ff188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2360.814328] RAX: ffffffffffffffda RBX: 00007f95670be020 RCX: 00007f9566faab19 [ 2360.814805] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000005 [ 2360.815276] RBP: 00007f95644ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2360.815780] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2360.816085] FAULT_INJECTION: forcing a failure. [ 2360.816085] name failslab, interval 1, probability 0, space 0, times 0 [ 2360.816274] R13: 00007ffc86a4213f R14: 00007f95644ff300 R15: 0000000000022000 [ 2360.816304] [ 2360.818244] CPU: 1 PID: 11666 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2360.819285] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2360.820549] Call Trace: [ 2360.820884] [ 2360.821244] dump_stack_lvl+0xc1/0xf0 [ 2360.821760] should_fail_ex+0x4b4/0x5b0 [ 2360.822412] ? __kernfs_new_node+0xd4/0x870 [ 2360.822990] should_failslab+0x9/0x20 [ 2360.823595] kmem_cache_alloc+0x5a/0x320 [ 2360.824111] ? kernfs_add_one+0x376/0x4f0 [ 2360.824774] __kernfs_new_node+0xd4/0x870 [ 2360.825318] ? kernfs_add_one+0x175/0x4f0 [ 2360.825974] ? lock_release+0x1e3/0x710 [ 2360.826512] ? __pfx___kernfs_new_node+0x10/0x10 [ 2360.827300] ? __pfx_lock_release+0x10/0x10 [ 2360.827854] ? kernfs_add_one+0x376/0x4f0 [ 2360.828499] ? kernfs_add_one+0x376/0x4f0 [ 2360.829006] ? down_write+0x11a/0x1f0 [ 2360.829638] ? up_write+0x196/0x510 [ 2360.830098] kernfs_new_node+0x97/0x120 [ 2360.830735] __kernfs_create_file+0x55/0x350 [ 2360.831286] sysfs_add_file_mode_ns+0x21c/0x440 [ 2360.832047] ? __pfx_dev_attr_store+0x10/0x10 [ 2360.832664] internal_create_group+0x322/0xb90 [ 2360.833413] ? __pfx_internal_create_group+0x10/0x10 [ 2360.834048] ? kernfs_add_one+0x17a/0x4f0 [ 2360.834710] ? kernfs_create_link+0x1bb/0x240 [ 2360.835271] internal_create_groups.part.0+0x90/0x140 [ 2360.836114] sysfs_create_groups+0x29/0x50 [ 2360.836644] device_add+0x60f/0x1ab0 [ 2360.837254] ? __pfx_device_add+0x10/0x10 [ 2360.837777] ? __init_waitqueue_head+0xca/0x150 [ 2360.838545] netdev_register_kobject+0x17e/0x3b0 [ 2360.839166] register_netdevice+0xd60/0x1530 [ 2360.839889] ? __pfx_register_netdevice+0x10/0x10 [ 2360.840490] ? dev_addr_mod+0x29e/0x350 [ 2360.841134] __tun_chr_ioctl+0x21aa/0x4220 [ 2360.841681] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2360.842431] ? __pfx___fget_files+0x10/0x10 [ 2360.842967] ? lock_acquire+0x32/0xc0 [ 2360.843601] ? __pfx___fget_files+0x10/0x10 [ 2360.844192] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2360.844919] __x64_sys_ioctl+0x19e/0x210 [ 2360.845468] do_syscall_64+0x3f/0x90 [ 2360.846093] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2360.846792] RIP: 0033:0x7fe31ab8cb19 [ 2360.847383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2360.849590] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2360.850775] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 2360.851650] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2360.852509] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2360.853617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2360.854442] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 2360.855295] 05:34:05 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:34:05 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) openat(r1, &(0x7f0000000080)='./file1\x00', 0x40000, 0x101) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) sendmsg$unix(r6, &(0x7f0000000380)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000240)="b8f962e7466e1dcea5caa1e8b817d320aad48497829bc5feb22735d6072e582878f725e3fa0ea9c4d24ce948bfc47d89d6d420d670a2ac922bb6fa21d89e21a39701ae67eba0d8d9405e7d267b92713eb430a3482adbaecae155995b9781a5c95432d13cfad3e10298f28d8268e7e6a736e4f909dfe85e65797ef07b2d1837e2a09764d766716dd7faf0", 0x8a}, {&(0x7f00000001c0)="8cf8f17568798181964e96419e009e1503eb8d8c385d76658a6872", 0x1b}, {&(0x7f0000000300)="68dac851b1be2083703b5050b2ef7b9895d746587d4439c2e07689a9ea186df246d51d07d0307ff4d365076f92a88819136de9637433e33885", 0x39}], 0x3, 0x0, 0x0, 0x44}, 0x4010) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) accept4$unix(r2, 0x0, &(0x7f0000000400), 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r3, r2, 0x0, 0xfffffdef) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000003c0)=0x200) [ 2361.110366] loop7: detected capacity change from 0 to 40 05:34:05 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 75) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:34:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x114) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)={0x14, 0x6a, 0x1, 0x0, 0x0, "", [@generic='0']}, 0x14}], 0x1}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r6, r5, 0x0, 0xfffffdef) r7 = syz_io_uring_complete(0x0) mount_setattr(r6, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x78, 0x0, {r7}}, 0x20) openat(r6, &(0x7f0000000040)='./file0\x00', 0x187700, 0x2) write$binfmt_aout(r4, &(0x7f0000000240)={{0x0, 0x3, 0x3f, 0x1ca, 0x22b, 0x8, 0x373, 0x3}, "d048596e0a753768c3bdfce75d39d5ca70b2d7238cee5b3da38e2d6d0dadd8edb0c961c0c8868568941a73608cb6ef4cb4a6091bcf1eb8d3d15f87cfe3d225133abd1738c6962135ef5cc9ae0cd9", ['\x00', '\x00', '\x00', '\x00']}, 0x46e) sendfile(r3, r2, 0x0, 0xfffffdef) sendfile(r1, r0, 0x0, 0xfffffdef) 05:34:05 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:34:05 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 76) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:34:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:34:19 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 38) 05:34:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffded) 05:34:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:34:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:34:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendto(r3, &(0x7f0000000240)="83a5c56b66b37d1a92927a79a6b1545e999e78211b36edb1c74c70717234a5139b4ec2595b825ebc1cd40cc19e43e0c44a77b4c4f6d980efb8ca250c76702a317de5764ccef1ecd2d4c0fb6f2caae2037404e297b806a9fa58387c964d9c0c3828f42f4b041fdc47abb23ae3232113f060f35d57db7cc1186e32f6fe998edab27177", 0x82, 0x20000000, &(0x7f0000000300)=@rc={0x1f, @none, 0x8}, 0x80) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x4, 0xfffffffffffff801, 0x3}) sendfile(r1, r0, 0x0, 0xfffffdef) 05:34:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:34:19 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 77) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:34:19 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:34:19 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 78) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:34:19 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg(r1, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll={0x11, 0x4305, r3}, 0x80, 0x0}}], 0x1, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)=r3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2375.582286] FAULT_INJECTION: forcing a failure. [ 2375.582286] name failslab, interval 1, probability 0, space 0, times 0 [ 2375.583621] CPU: 1 PID: 11723 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2375.584334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2375.584890] Call Trace: [ 2375.585073] [ 2375.585242] dump_stack_lvl+0xc1/0xf0 [ 2375.585531] should_fail_ex+0x4b4/0x5b0 [ 2375.585900] ? __kernfs_new_node+0xd4/0x870 [ 2375.586246] should_failslab+0x9/0x20 [ 2375.586522] kmem_cache_alloc+0x5a/0x320 [ 2375.586814] ? kernfs_add_one+0x376/0x4f0 [ 2375.587128] __kernfs_new_node+0xd4/0x870 [ 2375.587437] ? kernfs_add_one+0x175/0x4f0 [ 2375.587728] ? lock_release+0x1e3/0x710 [ 2375.588067] ? __pfx___kernfs_new_node+0x10/0x10 [ 2375.588467] ? __pfx_lock_release+0x10/0x10 [ 2375.588891] ? kernfs_add_one+0x376/0x4f0 [ 2375.589191] ? kernfs_add_one+0x376/0x4f0 [ 2375.589486] ? down_write+0x11a/0x1f0 [ 2375.589775] ? up_write+0x196/0x510 [ 2375.590043] kernfs_new_node+0x97/0x120 [ 2375.590327] __kernfs_create_file+0x55/0x350 [ 2375.590673] sysfs_add_file_mode_ns+0x21c/0x440 [ 2375.591145] ? __pfx_dev_attr_store+0x10/0x10 [ 2375.591560] internal_create_group+0x322/0xb90 [ 2375.591887] ? __pfx_internal_create_group+0x10/0x10 [ 2375.592251] ? kernfs_add_one+0x17a/0x4f0 [ 2375.592538] ? kernfs_create_link+0x1bb/0x240 [ 2375.592867] internal_create_groups.part.0+0x90/0x140 [ 2375.593317] sysfs_create_groups+0x29/0x50 [ 2375.593629] device_add+0x60f/0x1ab0 [ 2375.593995] ? __pfx_device_add+0x10/0x10 [ 2375.594289] ? netdev_register_kobject+0x176/0x3b0 [ 2375.594651] netdev_register_kobject+0x17e/0x3b0 [ 2375.594982] register_netdevice+0xd60/0x1530 [ 2375.595315] ? __pfx_register_netdevice+0x10/0x10 [ 2375.595658] ? dev_addr_mod+0x29e/0x350 [ 2375.595944] __tun_chr_ioctl+0x21aa/0x4220 [ 2375.596250] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2375.596584] ? __pfx___fget_files+0x10/0x10 [ 2375.596882] ? lock_acquire+0x32/0xc0 [ 2375.597277] ? __pfx___fget_files+0x10/0x10 [ 2375.597694] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2375.598087] __x64_sys_ioctl+0x19e/0x210 [ 2375.598366] do_syscall_64+0x3f/0x90 [ 2375.598642] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2375.599093] RIP: 0033:0x7fe31ab8cb19 [ 2375.599417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2375.600569] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2375.601119] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 2375.601767] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2375.602365] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2375.603027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2375.603517] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 2375.604015] 05:34:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:34:19 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg(r1, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll={0x11, 0x4305, r3}, 0x80, 0x0}}], 0x1, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)=r3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 05:34:19 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 79) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:34:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:34:20 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg(r1, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll={0x11, 0x4305, r3}, 0x80, 0x0}}], 0x1, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)=r3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 05:34:20 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg(r1, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll={0x11, 0x4305, r3}, 0x80, 0x0}}], 0x1, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)=r3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) 05:34:20 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 39) 05:34:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:34:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:34:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:34:35 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 80) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:34:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17, 0x80}, {0x0, 0x0, 0x27ff}], 0x20, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r1 = memfd_secret(0x0) fspick(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000c0da1e6de96ed5b53f4fdd3859f2d1262cad92843fe50cb01deff4c913aa313477a5f27f2fb76e98e2c317f273ed78189750a2ea74cd73d4df39d9c4555fb4da3dc336b4e9c9f9c9f65c02e24ed00421731cb5671ff35445372e9035d673fe366a92124a02039e9e898f192fa8f90eb4721255531403229b30e224dd565ee8d340d110e607dbab7fb42bed04dc71726bec9b067df0d215bd32463bb6ea3e813300df22a46fe047", @ANYRES32=r1, @ANYBLOB="00000006000000000000003000000000"]) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x181a00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) openat(r0, &(0x7f0000000300)='./file0\x00', 0x42040, 0x2) r5 = dup(r0) getsockname(r5, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f00000002c0)=0x80) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x6, 0x1f, 0x2, 0x7}, {0x3e5, 0x0, 0x9, 0x3}]}) sendfile(r2, r6, 0x0, 0x6) r7 = signalfd(r4, &(0x7f0000000040)={[0x8001]}, 0x8) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000080)={0x81, 0x8, 0x44, 0x3, 0xb, "06a334054c62145e61e246183e6a5112263eaa"}) sendfile(r3, r2, 0x0, 0xfffffdef) 05:34:35 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 40) 05:34:35 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:34:35 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg(r1, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll={0x11, 0x4305, r3}, 0x80, 0x0}}], 0x1, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)=r3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) 05:34:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r5, r4, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) [ 2391.269793] FAULT_INJECTION: forcing a failure. [ 2391.269793] name failslab, interval 1, probability 0, space 0, times 0 [ 2391.270877] CPU: 1 PID: 11768 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2391.271575] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2391.272343] Call Trace: [ 2391.272571] [ 2391.272821] dump_stack_lvl+0xc1/0xf0 [ 2391.273241] should_fail_ex+0x4b4/0x5b0 [ 2391.273663] ? __kernfs_new_node+0xd4/0x870 [ 2391.274105] should_failslab+0x9/0x20 [ 2391.274487] kmem_cache_alloc+0x5a/0x320 [ 2391.274842] ? kernfs_add_one+0x376/0x4f0 [ 2391.275230] __kernfs_new_node+0xd4/0x870 [ 2391.275604] ? kernfs_add_one+0x175/0x4f0 [ 2391.276023] ? lock_release+0x1e3/0x710 [ 2391.276400] ? __pfx___kernfs_new_node+0x10/0x10 [ 2391.276869] ? __pfx_lock_release+0x10/0x10 [ 2391.277298] ? kernfs_add_one+0x376/0x4f0 [ 2391.277658] ? kernfs_add_one+0x376/0x4f0 [ 2391.278025] ? down_write+0x11a/0x1f0 [ 2391.278373] ? up_write+0x196/0x510 [ 2391.278703] kernfs_new_node+0x97/0x120 [ 2391.279080] __kernfs_create_file+0x55/0x350 [ 2391.279512] sysfs_add_file_mode_ns+0x21c/0x440 [ 2391.279982] ? __pfx_dev_attr_store+0x10/0x10 [ 2391.280387] internal_create_group+0x322/0xb90 [ 2391.280795] ? __pfx_internal_create_group+0x10/0x10 [ 2391.281304] ? kernfs_add_one+0x17a/0x4f0 [ 2391.281677] ? kernfs_create_link+0x1bb/0x240 [ 2391.282138] internal_create_groups.part.0+0x90/0x140 [ 2391.282654] sysfs_create_groups+0x29/0x50 [ 2391.283030] device_add+0x60f/0x1ab0 [ 2391.283387] ? __pfx_device_add+0x10/0x10 [ 2391.283764] ? __init_waitqueue_head+0xca/0x150 [ 2391.284201] netdev_register_kobject+0x17e/0x3b0 [ 2391.284688] register_netdevice+0xd60/0x1530 [ 2391.285148] ? __pfx_register_netdevice+0x10/0x10 [ 2391.285573] ? dev_addr_mod+0x29e/0x350 [ 2391.285929] __tun_chr_ioctl+0x21aa/0x4220 [ 2391.286329] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2391.286773] ? __pfx___fget_files+0x10/0x10 [ 2391.287210] ? lock_acquire+0x32/0xc0 [ 2391.287600] ? __pfx___fget_files+0x10/0x10 [ 2391.288043] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2391.288429] __x64_sys_ioctl+0x19e/0x210 [ 2391.288796] do_syscall_64+0x3f/0x90 [ 2391.289134] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2391.289600] RIP: 0033:0x7fe31ab8cb19 [ 2391.290012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2391.291612] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2391.292264] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 2391.292941] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2391.293545] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2391.294142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2391.294791] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 2391.295419] [ 2391.362324] FAULT_INJECTION: forcing a failure. [ 2391.362324] name failslab, interval 1, probability 0, space 0, times 0 [ 2391.363719] CPU: 0 PID: 11777 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2391.364413] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2391.365138] Call Trace: [ 2391.365366] [ 2391.365569] dump_stack_lvl+0xc1/0xf0 [ 2391.365906] should_fail_ex+0x4b4/0x5b0 [ 2391.366274] ? ext4_mb_new_blocks+0x1901/0x4ad0 [ 2391.366662] should_failslab+0x9/0x20 [ 2391.366987] kmem_cache_alloc+0x5a/0x320 [ 2391.367350] ext4_mb_new_blocks+0x1901/0x4ad0 [ 2391.367754] ? lock_is_held_type+0x9f/0x120 [ 2391.368132] ? ext4_cache_extents+0x148/0x2d0 [ 2391.368518] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 2391.368912] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2391.369314] ext4_ext_map_blocks+0x2004/0x5dd0 [ 2391.369717] ? __pfx___lock_acquire+0x10/0x10 [ 2391.370110] ? __pfx___lock_acquire+0x10/0x10 [ 2391.370547] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 2391.370975] ? lock_acquire.part.0+0xec/0x320 [ 2391.371427] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2391.371854] ? ext4_map_blocks+0x704/0x19e0 [ 2391.372208] ? rcu_read_lock_sched_held+0x42/0x80 [ 2391.372599] ? trace_lock_acquire+0x170/0x1e0 [ 2391.372971] ? ext4_map_blocks+0x704/0x19e0 [ 2391.373326] ? lock_acquire+0x32/0xc0 [ 2391.373659] ? ext4_map_blocks+0x704/0x19e0 [ 2391.374031] ? __pfx_down_write+0x10/0x10 [ 2391.374395] ? ext4_es_lookup_extent+0xc8/0xc90 [ 2391.374819] ext4_map_blocks+0x776/0x19e0 [ 2391.375224] ? rcu_read_lock_sched_held+0x42/0x80 [ 2391.375626] ? trace_jbd2_handle_start+0x1b3/0x270 [ 2391.376025] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2391.376398] ? jbd2__journal_start+0xf7/0x6b0 [ 2391.376791] ? __ext4_journal_start_sb+0x4c2/0x6f0 [ 2391.377202] ? __ext4_journal_start_sb+0x1e0/0x6f0 [ 2391.377615] ? ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 2391.378077] ext4_alloc_file_blocks.isra.0+0x2df/0xbd0 [ 2391.378529] ? __pfx_ext4_alloc_file_blocks.isra.0+0x10/0x10 [ 2391.378998] ? __mnt_drop_write_file+0x4e/0xf0 [ 2391.379387] ? __pfx_file_modified_flags+0x10/0x10 [ 2391.379811] ? lock_is_held_type+0x9f/0x120 [ 2391.380190] ext4_fallocate+0x1fc5/0x3f50 [ 2391.380570] ? __pfx_ext4_fallocate+0x10/0x10 [ 2391.380960] ? __x64_sys_fallocate+0xd3/0x140 [ 2391.381323] ? lock_is_held_type+0x9f/0x120 [ 2391.381674] ? __pfx_ext4_fallocate+0x10/0x10 [ 2391.382058] vfs_fallocate+0x48d/0xe30 [ 2391.382394] __x64_sys_fallocate+0xd3/0x140 [ 2391.382788] do_syscall_64+0x3f/0x90 [ 2391.383128] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2391.383569] RIP: 0033:0x7f9566faab19 [ 2391.383881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2391.385269] RSP: 002b:00007f95644ff188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2391.385870] RAX: ffffffffffffffda RBX: 00007f95670be020 RCX: 00007f9566faab19 [ 2391.386435] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000005 [ 2391.387003] RBP: 00007f95644ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2391.387583] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2391.388139] R13: 00007ffc86a4213f R14: 00007f95644ff300 R15: 0000000000022000 [ 2391.388733] 05:34:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000180)="391a3d3bad07c8d87f97d094e150bf7b925f54e70f820000", 0x18, 0x8040000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)={0x20, 0x6a, 0x100, 0x0, 0x0, "", [@nested={0x10, 0x11, 0x0, 0x1, [@typed={0x4, 0x1f}, @typed={0x8, 0x883, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}, 0x20}], 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5}, './file2\x00'}) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) sendfile(r1, r0, 0x0, 0xfffffdef) 05:34:35 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg(r1, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll={0x11, 0x4305, r3}, 0x80, 0x0}}], 0x1, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)=r3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) 05:34:35 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 81) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:34:35 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:34:35 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg(r1, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll={0x11, 0x4305, r3}, 0x80, 0x0}}], 0x1, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)=r3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) 05:34:35 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 82) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:34:36 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={0x0, 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:34:36 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg(r1, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll={0x11, 0x4305, r3}, 0x80, 0x0}}], 0x1, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)=r3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) [ 2391.910827] FAULT_INJECTION: forcing a failure. [ 2391.910827] name failslab, interval 1, probability 0, space 0, times 0 [ 2391.912047] CPU: 0 PID: 11799 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2391.912577] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2391.913075] Call Trace: [ 2391.913241] [ 2391.913390] dump_stack_lvl+0xc1/0xf0 [ 2391.913652] should_fail_ex+0x4b4/0x5b0 [ 2391.913919] ? __kernfs_new_node+0xd4/0x870 [ 2391.914202] should_failslab+0x9/0x20 [ 2391.914452] kmem_cache_alloc+0x5a/0x320 [ 2391.914710] ? kernfs_add_one+0x376/0x4f0 [ 2391.914979] __kernfs_new_node+0xd4/0x870 [ 2391.915261] ? kernfs_add_one+0x175/0x4f0 [ 2391.915523] ? lock_release+0x1e3/0x710 [ 2391.915786] ? __pfx___kernfs_new_node+0x10/0x10 [ 2391.916095] ? __pfx_lock_release+0x10/0x10 [ 2391.916398] ? kernfs_add_one+0x376/0x4f0 [ 2391.916663] ? kernfs_add_one+0x376/0x4f0 [ 2391.916927] ? down_write+0x11a/0x1f0 [ 2391.917186] ? up_write+0x196/0x510 [ 2391.917427] kernfs_new_node+0x97/0x120 [ 2391.917688] __kernfs_create_file+0x55/0x350 [ 2391.917974] sysfs_add_file_mode_ns+0x21c/0x440 [ 2391.918278] ? __pfx_dev_attr_store+0x10/0x10 [ 2391.918583] internal_create_group+0x322/0xb90 [ 2391.918892] ? __pfx_internal_create_group+0x10/0x10 [ 2391.919247] ? kernfs_add_one+0x17a/0x4f0 [ 2391.919519] ? kernfs_create_link+0x1bb/0x240 [ 2391.919815] internal_create_groups.part.0+0x90/0x140 [ 2391.920158] sysfs_create_groups+0x29/0x50 [ 2391.920441] device_add+0x60f/0x1ab0 [ 2391.920694] ? __pfx_device_add+0x10/0x10 [ 2391.920988] ? __init_waitqueue_head+0xca/0x150 [ 2391.921318] netdev_register_kobject+0x17e/0x3b0 [ 2391.921655] register_netdevice+0xd60/0x1530 [ 2391.922001] ? __pfx_register_netdevice+0x10/0x10 [ 2391.922331] ? dev_addr_mod+0x29e/0x350 [ 2391.922630] __tun_chr_ioctl+0x21aa/0x4220 [ 2391.922931] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2391.923290] ? __pfx___fget_files+0x10/0x10 [ 2391.923586] ? lock_acquire+0x32/0xc0 [ 2391.923850] ? __pfx___fget_files+0x10/0x10 [ 2391.924152] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2391.924488] __x64_sys_ioctl+0x19e/0x210 [ 2391.924768] do_syscall_64+0x3f/0x90 [ 2391.925055] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2391.925408] RIP: 0033:0x7fe31ab8cb19 [ 2391.925688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2391.926799] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2391.927286] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 2391.927736] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2391.928189] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2391.928634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2391.929078] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 2391.929552] 05:34:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000180)='./file0\x00', 0x9, 0x2, &(0x7f00000001c0)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) getpeername(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x80) sendfile(r3, r2, 0x0, 0xfffffdef) sendfile(r1, r0, 0x0, 0xfffffdef) 05:34:50 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 83) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:34:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:34:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={0x0, 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:34:50 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 41) 05:34:50 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg(r1, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll={0x11, 0x4305, r3}, 0x80, 0x0}}], 0x1, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)=r3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) 05:34:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:34:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:34:50 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg(r1, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll={0x11, 0x4305, r3}, 0x80, 0x0}}], 0x1, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)=r3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) 05:34:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={0x0, 0xc}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) [ 2406.683448] FAULT_INJECTION: forcing a failure. [ 2406.683448] name failslab, interval 1, probability 0, space 0, times 0 [ 2406.685225] CPU: 0 PID: 11830 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2406.686450] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2406.687621] Call Trace: [ 2406.687998] [ 2406.688340] dump_stack_lvl+0xc1/0xf0 [ 2406.688923] should_fail_ex+0x4b4/0x5b0 [ 2406.689522] ? jbd2__journal_start+0x194/0x6b0 [ 2406.690194] should_failslab+0x9/0x20 [ 2406.690761] kmem_cache_alloc+0x5a/0x320 [ 2406.691395] jbd2__journal_start+0x194/0x6b0 [ 2406.692061] __ext4_journal_start_sb+0x4c2/0x6f0 [ 2406.692753] ? ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 2406.693553] ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 2406.694334] ? __pfx_ext4_alloc_file_blocks.isra.0+0x10/0x10 [ 2406.695156] ? __mnt_drop_write_file+0x4e/0xf0 [ 2406.695851] ? __pfx_file_modified_flags+0x10/0x10 [ 2406.696582] ? lock_is_held_type+0x9f/0x120 [ 2406.697232] ext4_fallocate+0x1fc5/0x3f50 [ 2406.697883] ? __pfx_ext4_fallocate+0x10/0x10 [ 2406.698552] ? __x64_sys_fallocate+0xd3/0x140 [ 2406.699203] ? lock_is_held_type+0x9f/0x120 [ 2406.699850] ? __pfx_ext4_fallocate+0x10/0x10 [ 2406.700522] vfs_fallocate+0x48d/0xe30 [ 2406.701103] __x64_sys_fallocate+0xd3/0x140 [ 2406.701727] do_syscall_64+0x3f/0x90 [ 2406.702287] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2406.703026] RIP: 0033:0x7f9566faab19 [ 2406.703587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2406.705987] RSP: 002b:00007f95644ff188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2406.706924] RAX: ffffffffffffffda RBX: 00007f95670be020 RCX: 00007f9566faab19 [ 2406.707884] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000005 [ 2406.708841] RBP: 00007f95644ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2406.709795] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2406.710779] R13: 00007ffc86a4213f R14: 00007f95644ff300 R15: 0000000000022000 [ 2406.711817] 05:34:50 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg(r1, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll={0x11, 0x4305, r3}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) 05:35:07 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg(r1, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll={0x11, 0x4305, r3}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) 05:35:07 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, r3, &(0x7f0000000040)=0x6, 0x8) sendfile(r3, r2, 0x0, 0xfffffdef) sendfile(r1, r0, 0x0, 0xfffffdef) 05:35:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:35:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:35:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:35:07 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 84) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:35:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 42) 05:35:07 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240)}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) [ 2423.798748] FAULT_INJECTION: forcing a failure. [ 2423.798748] name failslab, interval 1, probability 0, space 0, times 0 [ 2423.799819] CPU: 0 PID: 11862 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2423.800599] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2423.801320] Call Trace: [ 2423.801555] [ 2423.801764] dump_stack_lvl+0xc1/0xf0 [ 2423.802131] should_fail_ex+0x4b4/0x5b0 [ 2423.802510] ? ext4_mb_new_blocks+0x666/0x4ad0 [ 2423.802964] should_failslab+0x9/0x20 [ 2423.803393] kmem_cache_alloc+0x5a/0x320 [ 2423.803703] ? __mark_inode_dirty+0x249/0xee0 [ 2423.804056] ext4_mb_new_blocks+0x666/0x4ad0 [ 2423.804391] ? lock_is_held_type+0x9f/0x120 [ 2423.804728] ? ext4_cache_extents+0x148/0x2d0 [ 2423.805068] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 2423.805427] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2423.805795] ext4_ext_map_blocks+0x2004/0x5dd0 [ 2423.806157] ? __pfx___lock_acquire+0x10/0x10 [ 2423.806506] ? __pfx___lock_acquire+0x10/0x10 [ 2423.806858] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 2423.807231] ? lock_acquire.part.0+0xec/0x320 [ 2423.807594] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2423.807965] ? ext4_map_blocks+0x704/0x19e0 [ 2423.808281] ? rcu_read_lock_sched_held+0x42/0x80 [ 2423.808656] ? trace_lock_acquire+0x170/0x1e0 [ 2423.809026] ? ext4_map_blocks+0x704/0x19e0 [ 2423.809357] ? lock_acquire+0x32/0xc0 [ 2423.809659] ? ext4_map_blocks+0x704/0x19e0 [ 2423.809996] ? __pfx_down_write+0x10/0x10 [ 2423.810327] ? ext4_es_lookup_extent+0xc8/0xc90 [ 2423.810709] ext4_map_blocks+0x776/0x19e0 [ 2423.811038] ? rcu_read_lock_sched_held+0x42/0x80 [ 2423.811391] ? trace_jbd2_handle_start+0x1b3/0x270 [ 2423.811788] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2423.812142] ? jbd2__journal_start+0xf7/0x6b0 [ 2423.812491] ? __ext4_journal_start_sb+0x4c2/0x6f0 [ 2423.812875] ? __ext4_journal_start_sb+0x1e0/0x6f0 [ 2423.813257] ? ext4_alloc_file_blocks.isra.0+0x2a2/0xbd0 [ 2423.813680] ext4_alloc_file_blocks.isra.0+0x2df/0xbd0 [ 2423.814100] ? __pfx_ext4_alloc_file_blocks.isra.0+0x10/0x10 [ 2423.814541] ? __mnt_drop_write_file+0x4e/0xf0 [ 2423.814900] ? __pfx_file_modified_flags+0x10/0x10 [ 2423.815294] ? lock_is_held_type+0x9f/0x120 [ 2423.815645] ext4_fallocate+0x1fc5/0x3f50 [ 2423.815977] ? __pfx_ext4_fallocate+0x10/0x10 [ 2423.816333] ? __x64_sys_fallocate+0xd3/0x140 [ 2423.816683] ? lock_is_held_type+0x9f/0x120 [ 2423.817027] ? __pfx_ext4_fallocate+0x10/0x10 [ 2423.817382] vfs_fallocate+0x48d/0xe30 [ 2423.817695] __x64_sys_fallocate+0xd3/0x140 [ 2423.818034] do_syscall_64+0x3f/0x90 [ 2423.818333] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2423.818731] RIP: 0033:0x7f9566faab19 [ 2423.819019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2423.820262] RSP: 002b:00007f95644ff188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2423.820816] RAX: ffffffffffffffda RBX: 00007f95670be020 RCX: 00007f9566faab19 [ 2423.821332] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000005 [ 2423.821844] RBP: 00007f95644ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2423.822360] R10: 00000000087ffffc R11: 0000000000000246 R12: 0000000000000002 [ 2423.822880] R13: 00007ffc86a4213f R14: 00007f95644ff300 R15: 0000000000022000 [ 2423.823391] [ 2423.826206] FAULT_INJECTION: forcing a failure. [ 2423.826206] name failslab, interval 1, probability 0, space 0, times 0 [ 2423.827331] CPU: 0 PID: 11860 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2423.827895] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2423.828448] Call Trace: [ 2423.828631] [ 2423.828795] dump_stack_lvl+0xc1/0xf0 [ 2423.829082] should_fail_ex+0x4b4/0x5b0 [ 2423.829373] ? __kernfs_new_node+0xd4/0x870 [ 2423.829690] should_failslab+0x9/0x20 [ 2423.830041] kmem_cache_alloc+0x5a/0x320 [ 2423.830333] ? kernfs_add_one+0x376/0x4f0 [ 2423.830635] __kernfs_new_node+0xd4/0x870 [ 2423.830943] ? kernfs_add_one+0x175/0x4f0 [ 2423.831249] ? lock_release+0x1e3/0x710 [ 2423.831550] ? __pfx___kernfs_new_node+0x10/0x10 [ 2423.831915] ? __pfx_lock_release+0x10/0x10 [ 2423.832227] ? kernfs_add_one+0x376/0x4f0 [ 2423.832517] ? kernfs_add_one+0x376/0x4f0 [ 2423.832814] ? down_write+0x11a/0x1f0 [ 2423.833111] ? up_write+0x196/0x510 [ 2423.833388] kernfs_new_node+0x97/0x120 [ 2423.833680] __kernfs_create_file+0x55/0x350 [ 2423.833997] sysfs_add_file_mode_ns+0x21c/0x440 [ 2423.834330] ? __pfx_dev_attr_store+0x10/0x10 [ 2423.834666] internal_create_group+0x322/0xb90 [ 2423.835000] ? __pfx_internal_create_group+0x10/0x10 [ 2423.835367] ? kernfs_add_one+0x17a/0x4f0 [ 2423.835674] ? kernfs_create_link+0x1bb/0x240 [ 2423.836005] internal_create_groups.part.0+0x90/0x140 [ 2423.836377] sysfs_create_groups+0x29/0x50 [ 2423.836683] device_add+0x60f/0x1ab0 [ 2423.836959] ? __pfx_device_add+0x10/0x10 [ 2423.837263] ? __init_waitqueue_head+0xca/0x150 [ 2423.837614] netdev_register_kobject+0x17e/0x3b0 [ 2423.837975] register_netdevice+0xd60/0x1530 [ 2423.838307] ? __pfx_register_netdevice+0x10/0x10 [ 2423.838653] ? dev_addr_mod+0x29e/0x350 [ 2423.838962] __tun_chr_ioctl+0x21aa/0x4220 [ 2423.839277] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2423.839650] ? __pfx___fget_files+0x10/0x10 [ 2423.839961] ? lock_acquire+0x32/0xc0 [ 2423.840266] ? __pfx___fget_files+0x10/0x10 [ 2423.840590] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2423.840940] __x64_sys_ioctl+0x19e/0x210 [ 2423.841239] do_syscall_64+0x3f/0x90 [ 2423.841531] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2423.841903] RIP: 0033:0x7fe31ab8cb19 [ 2423.842187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2423.843387] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2423.843951] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 2423.844437] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2423.844907] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2423.845382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2423.845864] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 2423.846354] 05:35:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:35:08 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg(r1, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll={0x11, 0x4305, r3}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) 05:35:08 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)=r2) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) 05:35:08 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240)}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:35:08 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) 05:35:08 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 85) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:35:08 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) 05:35:23 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 43) 05:35:23 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:35:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:35:23 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 86) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:35:23 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) 05:35:23 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240)}, 0x22, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:35:23 executing program 4: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200, 0x13) sendfile(r1, r0, 0x0, 0xfffffdef) 05:35:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) [ 2439.063883] FAULT_INJECTION: forcing a failure. [ 2439.063883] name failslab, interval 1, probability 0, space 0, times 0 [ 2439.064781] CPU: 1 PID: 11901 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2439.065320] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2439.065859] Call Trace: [ 2439.066039] [ 2439.066200] dump_stack_lvl+0xc1/0xf0 [ 2439.066482] should_fail_ex+0x4b4/0x5b0 [ 2439.066766] ? __kernfs_new_node+0xd4/0x870 [ 2439.067070] should_failslab+0x9/0x20 [ 2439.067424] kmem_cache_alloc+0x5a/0x320 [ 2439.067764] ? kernfs_add_one+0x376/0x4f0 [ 2439.068054] __kernfs_new_node+0xd4/0x870 [ 2439.068357] ? kernfs_add_one+0x175/0x4f0 [ 2439.068667] ? lock_release+0x1e3/0x710 [ 2439.069025] ? __pfx___kernfs_new_node+0x10/0x10 [ 2439.069363] ? __pfx_lock_release+0x10/0x10 [ 2439.069669] ? kernfs_add_one+0x376/0x4f0 [ 2439.070032] ? kernfs_add_one+0x376/0x4f0 [ 2439.070331] ? down_write+0x11a/0x1f0 [ 2439.070686] ? up_write+0x196/0x510 [ 2439.071018] kernfs_new_node+0x97/0x120 [ 2439.071350] __kernfs_create_file+0x55/0x350 [ 2439.071663] sysfs_add_file_mode_ns+0x21c/0x440 [ 2439.071999] ? __pfx_dev_attr_store+0x10/0x10 [ 2439.072407] internal_create_group+0x322/0xb90 [ 2439.072811] ? __pfx_internal_create_group+0x10/0x10 [ 2439.073250] ? kernfs_add_one+0x17a/0x4f0 [ 2439.073588] ? kernfs_create_link+0x1bb/0x240 [ 2439.073933] internal_create_groups.part.0+0x90/0x140 [ 2439.074314] sysfs_create_groups+0x29/0x50 [ 2439.074640] device_add+0x60f/0x1ab0 [ 2439.074928] ? __pfx_device_add+0x10/0x10 [ 2439.075239] ? __init_waitqueue_head+0xca/0x150 [ 2439.075583] netdev_register_kobject+0x17e/0x3b0 [ 2439.076016] register_netdevice+0xd60/0x1530 [ 2439.076362] ? __pfx_register_netdevice+0x10/0x10 [ 2439.076716] ? dev_addr_mod+0x29e/0x350 [ 2439.077556] __tun_chr_ioctl+0x21aa/0x4220 [ 2439.078349] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2439.079203] ? __pfx___fget_files+0x10/0x10 [ 2439.079965] ? lock_acquire+0x32/0xc0 [ 2439.080625] ? __pfx___fget_files+0x10/0x10 [ 2439.081503] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2439.082216] __x64_sys_ioctl+0x19e/0x210 [ 2439.082870] do_syscall_64+0x3f/0x90 [ 2439.083561] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2439.084396] RIP: 0033:0x7fe31ab8cb19 [ 2439.085066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2439.087419] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2439.088142] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 2439.088685] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2439.089163] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2439.089669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2439.090171] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 2439.090779] 05:35:23 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)=r1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) 05:35:23 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 87) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:35:23 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)=r1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) 05:35:23 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x0, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:35:23 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x0, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:35:23 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)=r1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) 05:35:23 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 88) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) [ 2439.828020] FAULT_INJECTION: forcing a failure. [ 2439.828020] name failslab, interval 1, probability 0, space 0, times 0 [ 2439.830081] CPU: 0 PID: 11934 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2439.831223] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2439.832362] Call Trace: [ 2439.832734] [ 2439.833065] dump_stack_lvl+0xc1/0xf0 [ 2439.833727] should_fail_ex+0x4b4/0x5b0 [ 2439.834326] ? __kernfs_new_node+0xd4/0x870 [ 2439.834974] should_failslab+0x9/0x20 [ 2439.835526] kmem_cache_alloc+0x5a/0x320 [ 2439.836134] ? kernfs_add_one+0x376/0x4f0 [ 2439.836754] __kernfs_new_node+0xd4/0x870 [ 2439.837363] ? kernfs_add_one+0x175/0x4f0 [ 2439.837959] ? lock_release+0x1e3/0x710 [ 2439.838560] ? __pfx___kernfs_new_node+0x10/0x10 [ 2439.839257] ? __pfx_lock_release+0x10/0x10 [ 2439.839894] ? kernfs_add_one+0x376/0x4f0 [ 2439.840481] ? kernfs_add_one+0x376/0x4f0 [ 2439.841080] ? down_write+0x11a/0x1f0 [ 2439.841667] ? up_write+0x196/0x510 [ 2439.842209] kernfs_new_node+0x97/0x120 [ 2439.842786] __kernfs_create_file+0x55/0x350 [ 2439.843432] sysfs_add_file_mode_ns+0x21c/0x440 [ 2439.844125] ? __pfx_dev_attr_store+0x10/0x10 [ 2439.844792] internal_create_group+0x322/0xb90 [ 2439.845478] ? __pfx_internal_create_group+0x10/0x10 [ 2439.846208] ? kernfs_add_one+0x17a/0x4f0 [ 2439.846806] ? kernfs_create_link+0x1bb/0x240 [ 2439.847461] internal_create_groups.part.0+0x90/0x140 [ 2439.848234] sysfs_create_groups+0x29/0x50 [ 2439.848851] device_add+0x60f/0x1ab0 [ 2439.849419] ? __pfx_device_add+0x10/0x10 [ 2439.850032] ? __init_waitqueue_head+0xca/0x150 [ 2439.850741] netdev_register_kobject+0x17e/0x3b0 [ 2439.851446] register_netdevice+0xd60/0x1530 [ 2439.852111] ? __pfx_register_netdevice+0x10/0x10 [ 2439.852815] ? dev_addr_mod+0x29e/0x350 [ 2439.853396] __tun_chr_ioctl+0x21aa/0x4220 [ 2439.854032] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2439.854713] ? __pfx___fget_files+0x10/0x10 [ 2439.855331] ? lock_acquire+0x32/0xc0 [ 2439.855917] ? __pfx___fget_files+0x10/0x10 [ 2439.856565] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2439.857231] __x64_sys_ioctl+0x19e/0x210 [ 2439.857834] do_syscall_64+0x3f/0x90 [ 2439.858397] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2439.859143] RIP: 0033:0x7fe31ab8cb19 [ 2439.859671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2439.861964] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2439.863016] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 2439.864018] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2439.864992] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2439.865965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2439.866938] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 2439.867955] 05:35:24 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)=r2) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) 05:35:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), 0x80, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_none}, {@mmap}, {@nodevmap}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@nodevmap}, {@privport}, {@mmap}, {@noextend}, {@fscache}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@hash}, {@subj_user={'subj_user', 0x3d, '\'\xc5%'}}, {@subj_type={'subj_type', 0x3d, ']}'}}, {@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}]}}) sendfile(r3, r2, 0x0, 0xfffffdef) sendfile(r1, r0, 0x0, 0xfffffdef) 05:35:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:35:37 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x87ffffc) (fail_nth: 44) 05:35:37 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 89) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:35:37 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)=r2) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) 05:35:37 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x0, 0x40, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:35:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:35:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) sendfile(r0, r0, 0x0, 0xfffffded) 05:35:37 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)=r1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) 05:35:37 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x0, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:35:37 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 90) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:35:37 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)=r1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) [ 2453.229949] FAULT_INJECTION: forcing a failure. [ 2453.229949] name failslab, interval 1, probability 0, space 0, times 0 [ 2453.230906] CPU: 0 PID: 11975 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230216 #1 [ 2453.231592] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2453.232240] Call Trace: [ 2453.232417] [ 2453.232576] dump_stack_lvl+0xc1/0xf0 [ 2453.232861] should_fail_ex+0x4b4/0x5b0 [ 2453.233149] ? __kernfs_new_node+0xd4/0x870 [ 2453.233452] should_failslab+0x9/0x20 [ 2453.233722] kmem_cache_alloc+0x5a/0x320 [ 2453.234009] ? kernfs_add_one+0x376/0x4f0 [ 2453.234305] __kernfs_new_node+0xd4/0x870 [ 2453.234591] ? kernfs_add_one+0x175/0x4f0 [ 2453.234874] ? lock_release+0x1e3/0x710 [ 2453.235155] ? __pfx___kernfs_new_node+0x10/0x10 [ 2453.235491] ? __pfx_lock_release+0x10/0x10 [ 2453.235801] ? kernfs_add_one+0x376/0x4f0 [ 2453.236096] ? kernfs_add_one+0x376/0x4f0 [ 2453.236377] ? down_write+0x11a/0x1f0 [ 2453.236662] ? up_write+0x196/0x510 [ 2453.236928] kernfs_new_node+0x97/0x120 [ 2453.237206] __kernfs_create_file+0x55/0x350 [ 2453.237518] sysfs_add_file_mode_ns+0x21c/0x440 [ 2453.237846] ? __pfx_dev_attr_store+0x10/0x10 [ 2453.238169] internal_create_group+0x322/0xb90 [ 2453.238500] ? __pfx_internal_create_group+0x10/0x10 [ 2453.238859] ? kernfs_add_one+0x17a/0x4f0 [ 2453.239145] ? kernfs_create_link+0x1bb/0x240 [ 2453.239461] internal_create_groups.part.0+0x90/0x140 [ 2453.239826] sysfs_create_groups+0x29/0x50 [ 2453.240157] device_add+0x60f/0x1ab0 [ 2453.240439] ? __pfx_device_add+0x10/0x10 [ 2453.240758] ? netdev_register_kobject+0x176/0x3b0 [ 2453.241134] netdev_register_kobject+0x17e/0x3b0 [ 2453.241511] register_netdevice+0xd60/0x1530 [ 2453.241858] ? __pfx_register_netdevice+0x10/0x10 [ 2453.242219] ? dev_addr_mod+0x29e/0x350 [ 2453.242529] __tun_chr_ioctl+0x21aa/0x4220 [ 2453.242834] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2453.243176] ? __pfx___fget_files+0x10/0x10 [ 2453.243477] ? lock_acquire+0x32/0xc0 [ 2453.243765] ? __pfx___fget_files+0x10/0x10 [ 2453.244079] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2453.244410] __x64_sys_ioctl+0x19e/0x210 [ 2453.244706] do_syscall_64+0x3f/0x90 [ 2453.245002] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2453.245361] RIP: 0033:0x7fe31ab8cb19 [ 2453.245640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2453.246821] RSP: 002b:00007fe318102188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2453.247377] RAX: ffffffffffffffda RBX: 00007fe31ac9ff60 RCX: 00007fe31ab8cb19 [ 2453.247904] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 2453.248424] RBP: 00007fe3181021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2453.248930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2453.249430] R13: 00007fff7b525bff R14: 00007fe318102300 R15: 0000000000022000 [ 2453.249970] 05:35:37 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)=r1) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) 05:35:37 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x40, 0x0, 0x1, 0x15890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a701, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x4242, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/158, 0x9e) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001f42a8a00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x7f, 0x1f, 0x12, 0x0, 0x7, 0xc3b6e17f8c891c31, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4f8f401f, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x100, 0x5, 0x5, 0x0, 0x9, 0xf08e, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0xb) read$hiddev(r2, &(0x7f0000000700)=""/240, 0xf0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7, 0x3, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x22, 0x0, 0x10001, 0x6, 0xf7e, 0x2, 0x5, 0x0, 0x3, 0x0, 0xff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000800)={0x0, 0x17, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="ac141400788600ffffffff7ffc000237d2bd16611afe0a8e7c2161a65874b7aec1affccde955f4"], 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) 05:35:37 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9baf) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (fail_nth: 91) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1) syz_open_dev$vcsn(&(0x7f0000000200), 0x4e6, 0x80840) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_setup(0x190b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x80000000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 05:35:37 executing program 7: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)=r2) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) VM DIAGNOSIS: 05:40:46 Registers: info registers vcpu 0 RAX=0000000000a7dbc5 RBX=ffffffff8542a840 RCX=ffffffff84476c3e RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff812846a0 RBP=0000000000000000 RSP=ffffffff85407e38 R8 =0000000000000001 R9 =ffff88806ce34f83 R10=ffffed100d9c69f0 R11=0000000000000001 R12=fffffbfff0a85508 R13=ffffffff85d25bd0 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84477c5f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe6646ac1000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe6646abf000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2c341000 CR3=000000000dfec000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=000000c002398270000000c00221cf80 XMM04=000000c005b508c0000000c005b50880 XMM05=000000c005b50980000000c005b50940 XMM06=000000c005b50a00000000c005b509c0 XMM07=000000c0063e5200000000c005b50a40 XMM08=000000c0060fe0c0000000c006012540 XMM09=000000c0070000c0000000c0062b33e0 XMM10=000000c0072327e0000000c004327c80 XMM11=000000c0067a8120000000c0096fb500 XMM12=000000c0071a8f00000000c0067a98c0 XMM13=000000c0078f0780000000c0064d3680 XMM14=000000c0064b6080000000c0064b6040 XMM15=000000c007461bf0000000c0064b60c0 info registers vcpu 1 RAX=0000000000c64e5f RBX=ffff888008da5040 RCX=ffffffff84476c3e RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff812846a0 RBP=0000000000000001 RSP=ffff888008e1fe70 R8 =0000000000000001 R9 =ffff88806cf34f83 R10=ffffed100d9e69f0 R11=0000000000000001 R12=ffffed10011b4a08 R13=ffffffff85d25bd0 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84477c5f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe02da0e6000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe02da0e4000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb2e3afe010 CR3=000000000dfec000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004154d43c00000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000