ockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:07:20 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:07:20 executing program 6: syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 1156.255815] syz-executor.1[10611]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1156.275541] loop1: detected capacity change from 0 to 1 [ 1156.294076] journal_path: Lookup failure for './file1' [ 1156.294497] EXT4-fs: error: could not find journal device path 16:07:39 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)=0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000500)='./file1\x00', 0x200, 0x3, &(0x7f0000000780)=[{&(0x7f0000000600)="a9ca51da029591b695e672caff1ddc42ecb8fec2dc2f246dde1a730880feb89550268e8c2ebbf0a86c8361681fe71843b1cea12288f68801efb8f76e826116e7269bcd38c3a7b59ca5745c858b480be784e1d8a09b337c48d879938b2c3d1efb68227b03cbbebe550e692cb782bf0f37c5d8a4039aab490eb2e7596ad4c0dfe4", 0x80, 0x4}, {&(0x7f0000000680)="d2bf22d2a684232dfb936c9532a7347bf1a568df52a545fcfa9dee7f188d6f68d0c6584c4ac3da22e81fc42b61c372c2c5d2bbb1fae9a2c80b4ed8f71451cb9cda5133eb2ec6061722c76406db04682ba00124e063e2951768298890943bffea57b2b10becca94bc542c9b3c79bf5041cfeb438a70c371429698502c365a0353b5d8124f6135f862f5057b4e7f3d481622c394e7b960fedeebc0a68163e12d73dfda4ab854e2e817123b778a655baa6ac35a1ad4da1519b54d61c42350224978b435a3b1a5104af9", 0xc8, 0x7}, {&(0x7f0000000540)="b3e4114797c8432fb36fa39c625b4d6c7b1ba770f9f1159801617261568c8f3ca074642b7964e72fe254aeb2d5198402fc481fd554caca7ab5", 0x39, 0x63}], 0x10082, &(0x7f00000008c0)={[{@data_err_abort}, {@nombcache}, {@nojournal_checksum}, {@grpjquota}, {@data_err_ignore}, {}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@block_validity}, {@journal_path={'journal_path', 0x3d, './file1'}}, {}], [{@measure}, {@uid_eq={'uid', 0x3d, r0}}, {@uid_gt={'uid>', r1}}, {@appraise}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) sendfile(r2, r3, 0x0, 0xfffffdef) 16:07:39 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000001600)='uid_map\x00') write(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000001000), &(0x7f0000001040)='./file0\x00', 0x8, 0x2) lsetxattr$trusted_overlay_redirect(&(0x7f0000001080)='./file0\x00', &(0x7f00000010c0), &(0x7f0000001100)='./file0\x00', 0x8, 0x3) getdents(0xffffffffffffff9c, &(0x7f0000000000)=""/4096, 0x1000) 16:07:39 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:07:39 executing program 6: syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:07:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591df5d2797f01c245a53cbaac38beb67ec8543ee1fc76da389a2f521469702a87c3b5af9d215c17efc51425aad48737389caf265ffa46a739ff985065b4478c2cc0a581cd02471cb80059fcfbf9b2b1b1a6f164a6db4cc9c4b3e85bea642af74ef26797a542eadecdecba86ac5a23f879037c5bcb5d47201eca38085fd91832076149d22dc23f"], 0x14}}, 0x0) 16:07:39 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:07:39 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:07:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 1174.278558] syz-executor.1[10625]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1174.282160] loop1: detected capacity change from 0 to 1 [ 1174.285805] journal_path: Lookup failure for './file1' [ 1174.286207] EXT4-fs: error: could not find journal device path 16:07:39 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)=0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000500)='./file1\x00', 0x200, 0x3, &(0x7f0000000780)=[{&(0x7f0000000600)="a9ca51da029591b695e672caff1ddc42ecb8fec2dc2f246dde1a730880feb89550268e8c2ebbf0a86c8361681fe71843b1cea12288f68801efb8f76e826116e7269bcd38c3a7b59ca5745c858b480be784e1d8a09b337c48d879938b2c3d1efb68227b03cbbebe550e692cb782bf0f37c5d8a4039aab490eb2e7596ad4c0dfe4", 0x80, 0x4}, {&(0x7f0000000680)="d2bf22d2a684232dfb936c9532a7347bf1a568df52a545fcfa9dee7f188d6f68d0c6584c4ac3da22e81fc42b61c372c2c5d2bbb1fae9a2c80b4ed8f71451cb9cda5133eb2ec6061722c76406db04682ba00124e063e2951768298890943bffea57b2b10becca94bc542c9b3c79bf5041cfeb438a70c371429698502c365a0353b5d8124f6135f862f5057b4e7f3d481622c394e7b960fedeebc0a68163e12d73dfda4ab854e2e817123b778a655baa6ac35a1ad4da1519b54d61c42350224978b435a3b1a5104af9", 0xc8, 0x7}, {&(0x7f0000000540)="b3e4114797c8432fb36fa39c625b4d6c7b1ba770f9f1159801617261568c8f3ca074642b7964e72fe254aeb2d5198402fc481fd554caca7ab5", 0x39, 0x63}], 0x10082, &(0x7f00000008c0)={[{@data_err_abort}, {@nombcache}, {@nojournal_checksum}, {@grpjquota}, {@data_err_ignore}, {}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@block_validity}, {@journal_path={'journal_path', 0x3d, './file1'}}, {}], [{@measure}, {@uid_eq={'uid', 0x3d, r0}}, {@uid_gt={'uid>', r1}}, {@appraise}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) sendfile(r2, r3, 0x0, 0xfffffdef) [ 1174.482216] syz-executor.1[10636]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1174.500629] loop1: detected capacity change from 0 to 1 [ 1174.526837] journal_path: Lookup failure for './file1' [ 1174.527608] EXT4-fs: error: could not find journal device path 16:07:39 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000001600)='uid_map\x00') sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2110440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x1, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240048c4}, 0x4041) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000200)={{0x0, 0x2, 0xcf, 0x101, 0x0, 0x10001, 0x3, 0x0, 0x200, 0x6, 0x80000000, 0x2, 0x4, 0x1, 0x5}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001640)={{r1, 0x1000, 0x5, 0x200, 0xff, 0xffffffffffff7fff, 0xd96, 0xa3, 0x5, 0x8, 0x3, 0x1, 0x7fffffff, 0x7f, 0x137}}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0xfffffffffffffeb1, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xc74e}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) write(r0, 0x0, 0x0) 16:07:39 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r2, 0x0, 0xfffffdef) 16:07:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591df5d2797f01c245a53cbaac38beb67ec8543ee1fc76da389a2f521469702a87c3b5af9d215c17efc51425aad48737389caf265ffa46a739ff985065b4478c2cc0a581cd02471cb80059fcfbf9b2b1b1a6f164a6db4cc9c4b3e85bea642af74ef26797a542eadecdecba86ac5a23f879037c5bcb5d47201eca38085fd91832076149d22dc23f"], 0x14}}, 0x0) 16:07:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:07:39 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000001600)='uid_map\x00') write(r0, 0x0, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000000)) 16:07:40 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:07:40 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:07:40 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:07:40 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:07:40 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200), 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:07:40 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r2, 0x0, 0xfffffdef) 16:07:40 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000001600)='uid_map\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x410000, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000040)={0x0, 0x0, {0x2, @usage=0x2, 0x0, 0x6, 0x2, 0x7fffffff, 0x1, 0x5, 0x0, @struct={0x8, 0x8000}, 0x6b2, 0x3, [0xfffffffffffff702, 0xfffffffffffffffa, 0xd45, 0x532f, 0x51d, 0x10000]}, {0x9, @struct={0x5, 0x73b5}, 0x0, 0x7f, 0x9, 0x1, 0xc6e6, 0x10000, 0x80, @usage=0x6, 0x100, 0x4abf, [0x7, 0x1, 0x1, 0xe97, 0x670]}, {0x10000, @usage=0x7ff, 0x0, 0x6642000, 0x0, 0xcfb, 0x3, 0x100000000, 0x0, @usage=0x2, 0x1400, 0x4, [0xfffffffffffffffb, 0x49d, 0xd6ea, 0x7, 0x2, 0x1]}, {0x0, 0x5, 0x100000000}}) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r4, &(0x7f0000000000)=""/55, 0x37, 0x600) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0xf7, 0x7f, 0x1, 0x0, 0x0, 0x8, 0x100000, 0x58e6e23d91a505ab, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xbcd, 0x1, @perf_config_ext={0x471, 0x3f}, 0x12, 0x80000001, 0x8, 0x2, 0x5, 0x9, 0x5242, 0x0, 0x8, 0x0, 0x5}, r5, 0x5, r3, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001440), 0x80, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001480), 0x800, 0x0) write$binfmt_elf32(r6, &(0x7f0000001640)={{0x7f, 0x45, 0x4c, 0x46, 0x1f, 0x9, 0x12, 0x8, 0x8001, 0x2, 0x6, 0xe3, 0x85, 0x38, 0x329, 0x6, 0xfffe, 0x20, 0x1, 0x3, 0x7, 0xfff}, [{0x3, 0x7, 0x1, 0x493, 0x2, 0x4, 0x1, 0xff}, {0x5, 0x3, 0x8, 0xa5b, 0x5, 0x3e, 0x9, 0x80}], "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"}, 0x1078) kcmp$KCMP_EPOLL_TFD(r5, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f00000014c0)={r6, r7, 0x7fff}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000440)={r2, "110729c59036555d6e8a54440431eaea"}) write(r0, 0x0, 0x0) 16:07:40 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r2, 0x0, 0xfffffdef) 16:07:40 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:07:40 executing program 7: getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@private, @dev}, &(0x7f00000000c0)=0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/fscreate\x00') connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000100)) write$P9_RREADLINK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1070116314d3e1583dff2e2f66696c65"], 0x10) write(r0, 0x0, 0x0) 16:07:40 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591df5d2797f01c245a53cbaac38beb67ec8543ee1fc76da389a2f521469702a87c3b5af9d215c17efc51425aad48737389caf265ffa46a739ff985065b4478c2cc0a581cd02471cb80059fcfbf9b2b1b1a6f164a6db4cc9c4b3e85bea642af74ef26797a542eadecdecba86ac5a23f879037c5bcb5d47201eca38085fd91832076149d22dc23f"], 0x14}}, 0x0) 16:07:41 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:07:56 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:07:56 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200), 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:07:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:07:56 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:07:56 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:07:56 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000001600)='uid_map\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @broadcast}, {0x0, @remote}, 0x0, {0x2, 0x0, @loopback}, 'wg0\x00'}) write(r0, 0x0, 0x0) memfd_secret(0x0) 16:07:56 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:07:56 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:07:56 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000001600)='uid_map\x00') write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xce, 0xc6, 0x1, 0x6, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4b1ded43, 0x37}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r3, &(0x7f0000000000)=""/55, 0x37, 0x600) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000002c0)=0x3f) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendfile(r3, r4, &(0x7f0000000300)=0x9, 0xffffffffffffff57) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000180)=0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r6, &(0x7f0000000200)='E', 0x140000) openat(r6, &(0x7f0000000340)='./file1\x00', 0x404400, 0x80) r7 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0xf7, 0x7f, 0x1, 0x0, 0x0, 0x8, 0x102120, 0x58e6e23d91a505ab, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf2cb, 0x1, @perf_config_ext={0x2, 0x3c}, 0x212, 0x80000001, 0xff, 0x3, 0x1, 0x800009, 0x5240, 0x0, 0x8, 0x0, 0x1}, r5, 0x5, r2, 0x0) write$cgroup_pid(r1, &(0x7f0000000000)=r5, 0x12) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r7, {0x6e, 0x4c04}}, './file1\x00'}) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x0, 0x9, 0x71, 0x0, 0x0, 0x3, 0x10004, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xf800000, 0x0, @perf_config_ext={0x0, 0x9}, 0x8300, 0xc72, 0x7, 0x8, 0xfa, 0xffffff56, 0x7, 0x0, 0xffffff01, 0x0, 0x504f}, r5, 0x10, r8, 0x0) 16:07:57 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r3}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r3}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r3}) r4 = dup(r1) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r4, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:07:57 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:07:57 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r3}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r3}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r3}) r4 = dup(r1) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r4, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:08:09 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r3}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r3}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r3}) r4 = dup(r1) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r4, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:08:09 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:09 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000001600)='uid_map\x00') write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xce, 0xc6, 0x1, 0x6, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4b1ded43, 0x37}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r3, &(0x7f0000000000)=""/55, 0x37, 0x600) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000002c0)=0x3f) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendfile(r3, r4, &(0x7f0000000300)=0x9, 0xffffffffffffff57) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000180)=0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r6, &(0x7f0000000200)='E', 0x140000) openat(r6, &(0x7f0000000340)='./file1\x00', 0x404400, 0x80) r7 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0xf7, 0x7f, 0x1, 0x0, 0x0, 0x8, 0x102120, 0x58e6e23d91a505ab, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf2cb, 0x1, @perf_config_ext={0x2, 0x3c}, 0x212, 0x80000001, 0xff, 0x3, 0x1, 0x800009, 0x5240, 0x0, 0x8, 0x0, 0x1}, r5, 0x5, r2, 0x0) write$cgroup_pid(r1, &(0x7f0000000000)=r5, 0x12) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r7, {0x6e, 0x4c04}}, './file1\x00'}) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x0, 0x9, 0x71, 0x0, 0x0, 0x3, 0x10004, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xf800000, 0x0, @perf_config_ext={0x0, 0x9}, 0x8300, 0xc72, 0x7, 0x8, 0xfa, 0xffffff56, 0x7, 0x0, 0xffffff01, 0x0, 0x504f}, r5, 0x10, r8, 0x0) 16:08:09 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200), 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:09 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:09 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:10 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53}) r4 = dup(r1) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r4, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591df5d2797f01c245a53cbaac38beb67ec8543ee1fc76da389a2f521469702a87c3b5af9d215c17efc51425aad48737389caf265ffa46a739ff985065b4478c2cc0a581cd02471cb80059fcfbf9b2b1b1a6f164a6db4cc9c4b3e85bea642af74ef26797a542eadecdecba86ac5a23f879037c5bcb5d47201eca38085fd91832076149d22dc23f"], 0x14}}, 0x0) 16:08:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:10 executing program 7: syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:10 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53}) r4 = dup(r1) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r4, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:08:26 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:26 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:26 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:26 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:26 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) 16:08:26 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53}) r4 = dup(r1) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r4, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:08:26 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:26 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 1222.449487] syz-executor.6 (10779) used greatest stack depth: 23376 bytes left 16:08:38 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:08:38 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:38 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:38 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:38 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) 16:08:38 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:38 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) 16:08:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:08:39 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:08:39 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:39 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:08:39 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:39 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:08:39 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:39 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:39 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:08:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) [ 1236.359221] syz-executor.3 (10841) used greatest stack depth: 23336 bytes left 16:08:54 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:54 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:54 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:54 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:08:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:08:54 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:08:54 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:07 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:07 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:09:07 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) lseek(r1, 0xfffffffffffeffff, 0x2) write(r0, 0x0, 0x0) 16:09:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:07 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0x0) 16:09:07 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:07 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:07 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:08 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:08 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:08 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:08 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) lseek(r1, 0xfffffffffffeffff, 0x2) write(r0, 0x0, 0x0) 16:09:08 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0x0) 16:09:08 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:09:08 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) lseek(r1, 0xfffffffffffeffff, 0x2) write(r0, 0x0, 0x0) 16:09:08 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:09:08 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0x0) 16:09:22 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:22 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:22 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591df5d2797f01c245a53cbaac38beb67ec8543ee1fc76da389a2f521469702a87c3b5af9d215c17efc51425aad48737389caf265ffa46a739ff985065b4478c2cc0a581cd02471cb80059fcfbf9b2b1b1a6f164a6db4cc9c4b3e85bea642af74ef26797a542eadecdecba86ac5a23f879037c5bcb5d47201eca38085fd91832076149d22dc23f"], 0x14}}, 0x0) 16:09:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:22 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:22 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) write(r0, 0x0, 0x0) 16:09:22 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:23 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') socket$nl_xfrm(0x10, 0x3, 0x6) write(r0, 0x0, 0x0) 16:09:23 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:23 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:23 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:09:23 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') write(r0, 0x0, 0x0) 16:09:23 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:23 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591df5d2797f01c245a53cbaac38beb67ec8543ee1fc76da389a2f521469702a87c3b5af9d215c17efc51425aad48737389caf265ffa46a739ff985065b4478c2cc0a581cd02471cb80059fcfbf9b2b1b1a6f164a6db4cc9c4b3e85bea642af74ef26797a542eadecdecba86ac5a23f879037c5bcb5d47201eca38085fd91832076149d22dc23f"], 0x14}}, 0x0) 16:09:36 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:36 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:36 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:36 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:36 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:36 executing program 7: write(0xffffffffffffffff, 0x0, 0x0) 16:09:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:09:36 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:36 executing program 7: write(0xffffffffffffffff, 0x0, 0x0) 16:09:36 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:09:37 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:37 executing program 7: write(0xffffffffffffffff, 0x0, 0x0) 16:09:37 executing program 7: r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) 16:09:37 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:51 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:09:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:51 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:51 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:51 executing program 7: r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) 16:09:51 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:51 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:51 executing program 7: r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) 16:09:51 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:51 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:51 executing program 7: syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') write(0xffffffffffffffff, 0x0, 0x0) 16:09:51 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:09:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:10:06 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:06 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:06 executing program 7: syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') write(0xffffffffffffffff, 0x0, 0x0) 16:10:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:06 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:06 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:10:06 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:06 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:06 executing program 7: syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') write(0xffffffffffffffff, 0x0, 0x0) 16:10:06 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:06 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:10:06 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:06 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:07 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:22 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:22 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x0, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:10:22 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:22 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:22 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:22 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x0, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:10:22 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:22 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:22 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:23 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:23 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:23 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:23 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:23 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x0, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:10:23 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200), 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:23 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:23 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:23 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:35 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:35 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200), 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:35 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:35 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200), 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:35 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:35 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:10:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200), 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:36 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:10:36 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:36 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200), 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:36 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:36 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200), 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591df5d2797f01c245a53cbaac38beb67ec8543ee1fc76da389a2f521469702a87c3b5af9d215c17efc51425aad48737389caf265ffa46a739ff985065b4478c2cc0a581cd02471cb80059fcfbf9b2b1b1a6f164a6db4cc9c4b3e85bea642af74ef26797a542eadecdecba86ac5a23f879037c5bcb5d47201eca38085fd91832076149d22dc23f"], 0x14}}, 0x0) 16:10:36 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:36 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:10:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200), 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:50 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:50 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:10:50 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 16:10:50 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:50 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:10:50 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 16:10:50 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:50 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:10:50 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:10:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:50 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:10:51 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 16:11:03 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:11:03 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:11:03 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:11:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) 16:11:03 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:11:03 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:11:03 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:11:03 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:11:03 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:11:21 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:11:21 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:11:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:11:21 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:11:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) 16:11:21 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:11:21 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:11:21 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 16:11:21 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:11:21 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:11:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) 16:11:21 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:11:21 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:11:21 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0x0) 16:11:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:11:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) 16:11:34 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0x0) 16:11:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:11:34 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:11:34 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:11:34 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:11:34 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000000)={@private2, r3}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r3}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r3}) r4 = dup(r0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r4, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) 16:11:34 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:11:34 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:11:34 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:11:34 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0x0) 16:11:34 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:11:34 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:11:35 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:11:35 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000000)={@private2, r3}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r3}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r3}) r4 = dup(r0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r4, 0x0, 0xe, 0x0, &(0x7f0000000000)) 16:11:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:11:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:11:35 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:11:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0x0) 16:11:35 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:11:35 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:11:35 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:11:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:11:48 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:11:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000001600)='uid_map\x00') write(r0, 0x0, 0x4e) 16:11:48 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000000)={@private2, r3}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r3}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r3}) r4 = dup(r0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) 16:11:48 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:11:48 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:11:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0x0) 16:11:48 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591df5d2797f01c245a53cbaac38beb67ec8543ee1fc76da389a2f521469702a87c3b5af9d215c17efc51425aad48737389caf265ffa46a739ff985065b4478c2cc0a581cd02471cb80059fcfbf9b2b1b1a6f164a6db4cc9c4b3e85bea642af74ef26797a542eadecdecba86ac5a23f879037c5bcb5d47201eca38085fd91832076149d22dc23f"], 0x14}}, 0x0) 16:11:48 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:11:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0x0) 16:11:48 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:11:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0x0) 16:12:00 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:00 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:00 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:00 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000000)={@private2, r3}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r3}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r3}) dup(r0) 16:12:00 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:00 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:12:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000001600)='uid_map\x00') write(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x50, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) ioctl$CDROM_SEND_PACKET(r2, 0x5393, &(0x7f0000000180)={"05a56e2fb2341d1e8b5910ca", &(0x7f0000000080)="b0cc2e388b31a27c20cc711c7074a17bb9eace1ce20ac4cbe661e917fe559cfb2c11a6d58ef4c1a5ebcc7e28b910211df39b9e9da048613419c8a9f7a3d0b75625888b30c0e994b0b7fc29d3dbebf0202d42e99a38d66379e7651ab6b3cb090e3feeffd1e1179276f5b44613bddb21be92d22ddcba49232329c5f3a3e84c8409a73e39019b27f11f9051cbb361654496e7833da0f28ab6dab501ccea0db9229b7846c4a41fc5c71df7ba9d5826a2266d324c66597c6b6308ac6e", 0xba, 0x1, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, "eaa8727e", 0x4, "dea13b0d", 0x81, 0x6, 0x8, 'piY', "c0206a353f3baf659a8a6a578c8d45c6b17866a33c3e0691f001d0d9e1a764facee409aee8f2a7e599279364acd8"}, 0x0, 0x5, 0x8, &(0x7f0000000140)}) 16:12:00 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)=0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000500)='./file1\x00', 0x200, 0x3, &(0x7f0000000780)=[{&(0x7f0000000600)="a9ca51da029591b695e672caff1ddc42ecb8fec2dc2f246dde1a730880feb89550268e8c2ebbf0a86c8361681fe71843b1cea12288f68801efb8f76e826116e7269bcd38c3a7b59ca5745c858b480be784e1d8a09b337c48d879938b2c3d1efb68227b03cbbebe550e692cb782bf0f37c5d8a4039aab490eb2e7596ad4c0dfe4", 0x80, 0x4}, {&(0x7f0000000680)="d2bf22d2a684232dfb936c9532a7347bf1a568df52a545fcfa9dee7f188d6f68d0c6584c4ac3da22e81fc42b61c372c2c5d2bbb1fae9a2c80b4ed8f71451cb9cda5133eb2ec6061722c76406db04682ba00124e063e2951768298890943bffea57b2b10becca94bc542c9b3c79bf5041cfeb438a70c371429698502c365a0353b5d8124f6135f862f5057b4e7f3d481622c394e7b960fedeebc0a68163e12d73dfda4ab854e2e817123b778a655baa6ac35a1ad4da1519b54d61c42350224978b435a3b1a5104af9", 0xc8, 0x7}, {&(0x7f0000000540)="b3e4114797c8432fb36fa39c625b4d6c7b1ba770f9f1159801617261568c8f3ca074642b7964e72fe254aeb2d5198402fc481fd554caca7ab5", 0x39, 0x63}], 0x10082, &(0x7f00000008c0)={[{@data_err_abort}, {@nombcache}, {@nojournal_checksum}, {@grpjquota}, {@data_err_ignore}, {}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@block_validity}, {@journal_path={'journal_path', 0x3d, './file1'}}, {}], [{@measure}, {@uid_eq={'uid', 0x3d, r0}}, {@uid_gt={'uid>', r1}}, {@appraise}]}) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x5, 0x4, &(0x7f0000000380)=[{&(0x7f0000000140)="7b147000a02e288ce21892f9ab64378acd524b10aee7968e8929368b8207999eb9e74b16f0b541319132ce51ca8f03a36bd80b8add346def0b90143a6d20c9f5e5eab8a56b3f82166c0fa72b2293069d2728e4f8fcefbddde9e7111cda1ce56fee7ab67f30bd67959b5ca14bc5670a9c0d8810d23123d3f1933642c6572f3e2a07a04144640d20a8e1fc53d3b690cd7f8409d355b4", 0x95, 0x80}, {&(0x7f00000000c0)="52e2a768b7a94a64e20a3ababe89dc3fefb27b7851d007b559bbe4126a6587e4b28311c2aa8b8d5266d156882c7ed9738c0483fe7c789f103f8c62392bce8ab3", 0x40, 0x6}, {&(0x7f0000000200)="d18fef1a97db94ce48b3c939d2df22c17e5f84d2832e624680900dfe014795ffc00f7db9c8641e5044bb6d6c9ee0d968195aa52763d6ce7caed2b2ad5179adf9cd351d1354af00c1822b33b4f9ada1c798b5cfb7ac6812760c2f75a1226bbea4", 0x60, 0x2}, {&(0x7f0000000280)="d1489f5f98805e896cc44376f934108b70e1b60e1d0f3830ad234477ecfc74806850fe10236c7060a5f4099a6971dc269801098479016bd77a95d6488c60c55b7ee294a9d286d1de7951b56c5ca09c2a4e714203d28ac22079e8efbcf17ed12d2942f8dfb35590227d860c2845719e61c823144a95b2f10928a1d85ef0e1dd4cb27b603e1161e1efdaf50d83c5bab8d80247d443766e26322450bbef06845a8272ef1349423f576428449d3d", 0xac, 0x100000001}], 0x108000, &(0x7f0000000400)=ANY=[@ANYBLOB='grpid.commit=0x0000000000000001,grpid,noacl,barrier,abort,nouid32,oldalloc,data=journal,smackfshat=tmpfs\x00,seclabel,euid>', @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r2, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:12:00 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 1436.272178] syz-executor.3[11419]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1436.275700] loop3: detected capacity change from 0 to 1 [ 1436.284230] journal_path: Lookup failure for './file1' [ 1436.284610] EXT4-fs: error: could not find journal device path [ 1436.340169] syz-executor.3[11419]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 16:12:01 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591df5d2797f01c245a53cbaac38beb67ec8543ee1fc76da389a2f521469702a87c3b5af9d215c17efc51425aad48737389caf265ffa46a739ff985065b4478c2cc0a581cd02471cb80059fcfbf9b2b1b1a6f164a6db4cc9c4b3e85bea642af74ef26797a542eadecdecba86ac5a23f879037c5bcb5d47201eca38085fd91832076149d22dc23f"], 0x14}}, 0x0) [ 1436.350537] loop3: detected capacity change from 0 to 264192 16:12:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:12:01 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:01 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:12:14 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:12:14 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udplite6\x00') futex(&(0x7f00000001c0)=0x1, 0x0, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x2, 0x1) 16:12:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000000)={@private2, r3}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r3}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r3}) 16:12:14 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r2, 0x0, 0xfffffdef) 16:12:14 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:14 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:14 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:12:14 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 16:12:14 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 16:12:14 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:12:15 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000000)={@private2, r3}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r3}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) 16:12:15 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:27 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:27 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 16:12:27 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000000)={@private2, r3}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r3}) 16:12:27 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:27 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r2, 0x0, 0xfffffdef) 16:12:27 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:27 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:12:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:12:27 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:27 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r2, 0x0, 0xfffffdef) 16:12:27 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0xfffffffffffff210, 0x80000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000040)) write(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x4, 0x9, 0x8, 0x5, 0x0, 0x2, 0x38, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffffcb6d, 0x0, @perf_config_ext={0x1, 0x6}, 0x104, 0x7, 0x3ff, 0x7, 0x9, 0x8, 0x5, 0x0, 0x3f, 0x0, 0x100000001}, 0x0, 0x3, r2, 0xb) open_tree(r2, &(0x7f0000000100)='./file0\x00', 0x101) 16:12:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591df5d2797f01c245a53cbaac38beb67ec8543ee1fc76da389a2f521469702a87c3b5af9d215c17efc51425aad48737389caf265ffa46a739ff985065b4478c2cc0a581cd02471cb80059fcfbf9b2b1b1a6f164a6db4cc9c4b3e85bea642af74ef26797a542eadecdecba86ac5a23f879037c5bcb5d47201eca38085fd91832076149d22dc23f"], 0x14}}, 0x0) 16:12:28 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0xfffffdef) 16:12:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0xfffffffffffff210, 0x80000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000040)) write(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x4, 0x9, 0x8, 0x5, 0x0, 0x2, 0x38, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffffcb6d, 0x0, @perf_config_ext={0x1, 0x6}, 0x104, 0x7, 0x3ff, 0x7, 0x9, 0x8, 0x5, 0x0, 0x3f, 0x0, 0x100000001}, 0x0, 0x3, r2, 0xb) open_tree(r2, &(0x7f0000000100)='./file0\x00', 0x101) 16:12:40 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:40 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:40 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:40 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:40 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@private2, r2}, 0x14) 16:12:40 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:12:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0xfffffdef) 16:12:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0xfffffffffffff210, 0x80000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000040)) write(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x4, 0x9, 0x8, 0x5, 0x0, 0x2, 0x38, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffffcb6d, 0x0, @perf_config_ext={0x1, 0x6}, 0x104, 0x7, 0x3ff, 0x7, 0x9, 0x8, 0x5, 0x0, 0x3f, 0x0, 0x100000001}, 0x0, 0x3, r2, 0xb) open_tree(r2, &(0x7f0000000100)='./file0\x00', 0x101) 16:12:40 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0xfffffdef) 16:12:40 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0xfffffffffffff210, 0x80000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000040)) write(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x4, 0x9, 0x8, 0x5, 0x0, 0x2, 0x38, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffffcb6d, 0x0, @perf_config_ext={0x1, 0x6}, 0x104, 0x7, 0x3ff, 0x7, 0x9, 0x8, 0x5, 0x0, 0x3f, 0x0, 0x100000001}, 0x0, 0x3, r2, 0xb) 16:12:40 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591df5d2797f01c245a53cbaac38beb67ec8543ee1fc76da389a2f521469702a87c3b5af9d215c17efc51425aad48737389caf265ffa46a739ff985065b4478c2cc0a581cd02471cb80059fcfbf9b2b1b1a6f164a6db4cc9c4b3e85bea642af74ef26797a542eadecdecba86ac5a23f879037c5bcb5d47201eca38085fd91832076149d22dc23f"], 0x14}}, 0x0) 16:12:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0xfffffffffffff210, 0x80000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000040)) write(r0, 0x0, 0x0) 16:12:40 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 16:12:54 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:54 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:54 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:54 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:54 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r2, 0x0, 0xfffffdef) 16:12:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) syz_open_dev$vcsa(&(0x7f00000000c0), 0xfffffffffffff210, 0x80000) write(r0, 0x0, 0x0) 16:12:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591df5d2797f01c245a53cbaac38beb67ec8543ee1fc76da389a2f521469702a87c3b5af9d215c17efc51425aad48737389caf265ffa46a739ff985065b4478c2cc0a581cd02471cb80059fcfbf9b2b1b1a6f164a6db4cc9c4b3e85bea642af74ef26797a542eadecdecba86ac5a23f879037c5bcb5d47201eca38085fd91832076149d22dc23f"], 0x14}}, 0x0) 16:12:54 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) socket$nl_audit(0x10, 0x3, 0x9) 16:12:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) write(r0, 0x0, 0x0) 16:12:54 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200), 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:54 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r2, 0x0, 0xfffffdef) 16:12:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:12:54 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:12:55 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) write(r0, 0x0, 0x0) 16:12:55 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r2, 0x0, 0xfffffdef) 16:12:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:13:08 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:13:08 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:13:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') socket$nl_xfrm(0x10, 0x3, 0x6) write(r0, 0x0, 0x0) 16:13:08 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200), 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:13:08 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) 16:13:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:13:08 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200), 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:13:08 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:13:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') write(r0, 0x0, 0x0) 16:13:09 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200), 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:13:09 executing program 3: write(0xffffffffffffffff, 0x0, 0x0) 16:13:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591df5d2797f01c245a53cbaac38beb67ec8543ee1fc76da389a2f521469702a87c3b5af9d215c17efc51425aad48737389caf265ffa46a739ff985065b4478c2cc0a581cd02471cb80059fcfbf9b2b1b1a6f164a6db4cc9c4b3e85bea642af74ef26797a542eadecdecba86ac5a23f879037c5bcb5d47201eca38085fd91832076149d22dc23f"], 0x14}}, 0x0) 16:13:09 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:13:09 executing program 3: write(0xffffffffffffffff, 0x0, 0x0) 16:13:09 executing program 3: write(0xffffffffffffffff, 0x0, 0x0) 16:13:09 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200), 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:13:09 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 16:13:09 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:13:09 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:13:09 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) 16:13:26 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:13:26 executing program 3: r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) 16:13:26 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591df5d2797f01c245a53cbaac38beb67ec8543ee1fc76da389a2f521469702a87c3b5af9d215c17efc51425aad48737389caf265ffa46a739ff985065b4478c2cc0a581cd02471cb80059fcfbf9b2b1b1a6f164a6db4cc9c4b3e85bea642af74ef26797a542eadecdecba86ac5a23f879037c5bcb5d47201eca38085fd91832076149d22dc23f"], 0x14}}, 0x0) 16:13:26 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) 16:13:26 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 16:13:26 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:13:26 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200), 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:13:26 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:13:26 executing program 3: r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) 16:13:26 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 16:13:26 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:13:42 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:13:42 executing program 3: r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) 16:13:42 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) 16:13:42 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) 16:13:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:13:42 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:13:42 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) 16:13:42 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:13:42 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') write(0xffffffffffffffff, 0x0, 0x0) 16:13:42 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) 16:13:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:13:42 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) 16:13:42 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') write(0xffffffffffffffff, 0x0, 0x0) 16:13:42 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:13:43 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') write(0xffffffffffffffff, 0x0, 0x0) 16:13:43 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) 16:13:43 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(0xffffffffffffffff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:13:43 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:13:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) 16:13:55 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200), 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:13:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) 16:13:55 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:13:55 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:13:55 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) 16:13:55 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:13:55 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r2, 0x0, 0xfffffdef) 16:13:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(0xffffffffffffffff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:13:55 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r2, 0x0, 0xfffffdef) 16:13:55 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0x0) 16:13:55 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:13:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(0xffffffffffffffff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591df5d2797f01c245a53cbaac38beb67ec8543ee1fc76da389a2f521469702a87c3b5af9d215c17efc51425aad48737389caf265ffa46a739ff985065b4478c2cc0a581cd02471cb80059fcfbf9b2b1b1a6f164a6db4cc9c4b3e85bea642af74ef26797a542eadecdecba86ac5a23f879037c5bcb5d47201eca38085fd91832076149d22dc23f"], 0x14}}, 0x0) 16:13:55 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:13:56 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r2, 0x0, 0xfffffdef) 16:13:56 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0x0) 16:14:10 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:14:10 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:14:10 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:14:10 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200), 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:14:10 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) 16:14:10 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:14:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:14:10 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0x0) 16:14:10 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:14:10 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:14:10 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0x0) 16:14:10 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)=0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000500)='./file1\x00', 0x200, 0x3, &(0x7f0000000780)=[{&(0x7f0000000600)="a9ca51da029591b695e672caff1ddc42ecb8fec2dc2f246dde1a730880feb89550268e8c2ebbf0a86c8361681fe71843b1cea12288f68801efb8f76e826116e7269bcd38c3a7b59ca5745c858b480be784e1d8a09b337c48d879938b2c3d1efb68227b03cbbebe550e692cb782bf0f37c5d8a4039aab490eb2e7596ad4c0dfe4", 0x80, 0x4}, {&(0x7f0000000680)="d2bf22d2a684232dfb936c9532a7347bf1a568df52a545fcfa9dee7f188d6f68d0c6584c4ac3da22e81fc42b61c372c2c5d2bbb1fae9a2c80b4ed8f71451cb9cda5133eb2ec6061722c76406db04682ba00124e063e2951768298890943bffea57b2b10becca94bc542c9b3c79bf5041cfeb438a70c371429698502c365a0353b5d8124f6135f862f5057b4e7f3d481622c394e7b960fedeebc0a68163e12d73dfda4ab854e2e817123b778a655baa6ac35a1ad4da1519b54d61c42350224978b435a3b1a5104af9", 0xc8, 0x7}, {&(0x7f0000000540)="b3e4114797c8432fb36fa39c625b4d6c7b1ba770f9f1159801617261568c8f3ca074642b7964e72fe254aeb2d5198402fc481fd554caca7ab5", 0x39, 0x63}], 0x10082, &(0x7f00000008c0)={[{@data_err_abort}, {@nombcache}, {@nojournal_checksum}, {@grpjquota}, {@data_err_ignore}, {}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@block_validity}, {@journal_path={'journal_path', 0x3d, './file1'}}, {}], [{@measure}, {@uid_eq={'uid', 0x3d, r0}}, {@uid_gt={'uid>', r1}}, {@appraise}]}) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x5, 0x4, &(0x7f0000000380)=[{&(0x7f0000000140)="7b147000a02e288ce21892f9ab64378acd524b10aee7968e8929368b8207999eb9e74b16f0b541319132ce51ca8f03a36bd80b8add346def0b90143a6d20c9f5e5eab8a56b3f82166c0fa72b2293069d2728e4f8fcefbddde9e7111cda1ce56fee7ab67f30bd67959b5ca14bc5670a9c0d8810d23123d3f1933642c6572f3e2a07a04144640d20a8e1fc53d3b690cd7f8409d355b4", 0x95, 0x80}, {&(0x7f00000000c0)="52e2a768b7a94a64e20a3ababe89dc3fefb27b7851d007b559bbe4126a6587e4b28311c2aa8b8d5266d156882c7ed9738c0483fe7c789f103f8c62392bce8ab3", 0x40, 0x6}, {&(0x7f0000000200)="d18fef1a97db94ce48b3c939d2df22c17e5f84d2832e624680900dfe014795ffc00f7db9c8641e5044bb6d6c9ee0d968195aa52763d6ce7caed2b2ad5179adf9cd351d1354af00c1822b33b4f9ada1c798b5cfb7ac6812760c2f75a1226bbea4", 0x60, 0x2}, {&(0x7f0000000280)="d1489f5f98805e896cc44376f934108b70e1b60e1d0f3830ad234477ecfc74806850fe10236c7060a5f4099a6971dc269801098479016bd77a95d6488c60c55b7ee294a9d286d1de7951b56c5ca09c2a4e714203d28ac22079e8efbcf17ed12d2942f8dfb35590227d860c2845719e61c823144a95b2f10928a1d85ef0e1dd4cb27b603e1161e1efdaf50d83c5bab8d80247d443766e26322450bbef06845a8272ef1349423f576428449d3d", 0xac, 0x100000001}], 0x108000, &(0x7f0000000400)=ANY=[@ANYBLOB='grpid.commit=0x0000000000000001,grpid,noacl,barrier,abort,nouid32,oldalloc,data=journal,smackfshat=tmpfs\x00,seclabel,euid>', @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) sendfile(r2, r3, 0x0, 0xfffffdef) 16:14:10 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 1566.082228] syz-executor.3[11825]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 16:14:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) [ 1566.087459] loop3: detected capacity change from 0 to 1 [ 1566.092617] journal_path: Lookup failure for './file1' [ 1566.093218] EXT4-fs: error: could not find journal device path [ 1566.146252] syz-executor.3[11825]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1566.163116] loop3: detected capacity change from 0 to 264192 16:14:10 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0x0) 16:14:23 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:14:23 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)=0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000500)='./file1\x00', 0x200, 0x3, &(0x7f0000000780)=[{&(0x7f0000000600)="a9ca51da029591b695e672caff1ddc42ecb8fec2dc2f246dde1a730880feb89550268e8c2ebbf0a86c8361681fe71843b1cea12288f68801efb8f76e826116e7269bcd38c3a7b59ca5745c858b480be784e1d8a09b337c48d879938b2c3d1efb68227b03cbbebe550e692cb782bf0f37c5d8a4039aab490eb2e7596ad4c0dfe4", 0x80, 0x4}, {&(0x7f0000000680)="d2bf22d2a684232dfb936c9532a7347bf1a568df52a545fcfa9dee7f188d6f68d0c6584c4ac3da22e81fc42b61c372c2c5d2bbb1fae9a2c80b4ed8f71451cb9cda5133eb2ec6061722c76406db04682ba00124e063e2951768298890943bffea57b2b10becca94bc542c9b3c79bf5041cfeb438a70c371429698502c365a0353b5d8124f6135f862f5057b4e7f3d481622c394e7b960fedeebc0a68163e12d73dfda4ab854e2e817123b778a655baa6ac35a1ad4da1519b54d61c42350224978b435a3b1a5104af9", 0xc8, 0x7}, {&(0x7f0000000540)="b3e4114797c8432fb36fa39c625b4d6c7b1ba770f9f1159801617261568c8f3ca074642b7964e72fe254aeb2d5198402fc481fd554caca7ab5", 0x39, 0x63}], 0x10082, &(0x7f00000008c0)={[{@data_err_abort}, {@nombcache}, {@nojournal_checksum}, {@grpjquota}, {@data_err_ignore}, {}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@block_validity}, {@journal_path={'journal_path', 0x3d, './file1'}}, {}], [{@measure}, {@uid_eq={'uid', 0x3d, r0}}, {@uid_gt={'uid>', r1}}, {@appraise}]}) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x5, 0x4, &(0x7f0000000380)=[{&(0x7f0000000140)="7b147000a02e288ce21892f9ab64378acd524b10aee7968e8929368b8207999eb9e74b16f0b541319132ce51ca8f03a36bd80b8add346def0b90143a6d20c9f5e5eab8a56b3f82166c0fa72b2293069d2728e4f8fcefbddde9e7111cda1ce56fee7ab67f30bd67959b5ca14bc5670a9c0d8810d23123d3f1933642c6572f3e2a07a04144640d20a8e1fc53d3b690cd7f8409d355b4", 0x95, 0x80}, {&(0x7f00000000c0)="52e2a768b7a94a64e20a3ababe89dc3fefb27b7851d007b559bbe4126a6587e4b28311c2aa8b8d5266d156882c7ed9738c0483fe7c789f103f8c62392bce8ab3", 0x40, 0x6}, {&(0x7f0000000200)="d18fef1a97db94ce48b3c939d2df22c17e5f84d2832e624680900dfe014795ffc00f7db9c8641e5044bb6d6c9ee0d968195aa52763d6ce7caed2b2ad5179adf9cd351d1354af00c1822b33b4f9ada1c798b5cfb7ac6812760c2f75a1226bbea4", 0x60, 0x2}, {&(0x7f0000000280)="d1489f5f98805e896cc44376f934108b70e1b60e1d0f3830ad234477ecfc74806850fe10236c7060a5f4099a6971dc269801098479016bd77a95d6488c60c55b7ee294a9d286d1de7951b56c5ca09c2a4e714203d28ac22079e8efbcf17ed12d2942f8dfb35590227d860c2845719e61c823144a95b2f10928a1d85ef0e1dd4cb27b603e1161e1efdaf50d83c5bab8d80247d443766e26322450bbef06845a8272ef1349423f576428449d3d", 0xac, 0x100000001}], 0x108000, &(0x7f0000000400)=ANY=[@ANYBLOB='grpid.commit=0x0000000000000001,grpid,noacl,barrier,abort,nouid32,oldalloc,data=journal,smackfshat=tmpfs\x00,seclabel,euid>', @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) sendfile(r2, r3, 0x0, 0xfffffdef) 16:14:23 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0x0) 16:14:23 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)=0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000500)='./file1\x00', 0x200, 0x3, &(0x7f0000000780)=[{&(0x7f0000000600)="a9ca51da029591b695e672caff1ddc42ecb8fec2dc2f246dde1a730880feb89550268e8c2ebbf0a86c8361681fe71843b1cea12288f68801efb8f76e826116e7269bcd38c3a7b59ca5745c858b480be784e1d8a09b337c48d879938b2c3d1efb68227b03cbbebe550e692cb782bf0f37c5d8a4039aab490eb2e7596ad4c0dfe4", 0x80, 0x4}, {&(0x7f0000000680)="d2bf22d2a684232dfb936c9532a7347bf1a568df52a545fcfa9dee7f188d6f68d0c6584c4ac3da22e81fc42b61c372c2c5d2bbb1fae9a2c80b4ed8f71451cb9cda5133eb2ec6061722c76406db04682ba00124e063e2951768298890943bffea57b2b10becca94bc542c9b3c79bf5041cfeb438a70c371429698502c365a0353b5d8124f6135f862f5057b4e7f3d481622c394e7b960fedeebc0a68163e12d73dfda4ab854e2e817123b778a655baa6ac35a1ad4da1519b54d61c42350224978b435a3b1a5104af9", 0xc8, 0x7}, {&(0x7f0000000540)="b3e4114797c8432fb36fa39c625b4d6c7b1ba770f9f1159801617261568c8f3ca074642b7964e72fe254aeb2d5198402fc481fd554caca7ab5", 0x39, 0x63}], 0x10082, &(0x7f00000008c0)={[{@data_err_abort}, {@nombcache}, {@nojournal_checksum}, {@grpjquota}, {@data_err_ignore}, {}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@block_validity}, {@journal_path={'journal_path', 0x3d, './file1'}}, {}], [{@measure}, {@uid_eq={'uid', 0x3d, r0}}, {@uid_gt={'uid>', r1}}, {@appraise}]}) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x5, 0x4, &(0x7f0000000380)=[{&(0x7f0000000140)="7b147000a02e288ce21892f9ab64378acd524b10aee7968e8929368b8207999eb9e74b16f0b541319132ce51ca8f03a36bd80b8add346def0b90143a6d20c9f5e5eab8a56b3f82166c0fa72b2293069d2728e4f8fcefbddde9e7111cda1ce56fee7ab67f30bd67959b5ca14bc5670a9c0d8810d23123d3f1933642c6572f3e2a07a04144640d20a8e1fc53d3b690cd7f8409d355b4", 0x95, 0x80}, {&(0x7f00000000c0)="52e2a768b7a94a64e20a3ababe89dc3fefb27b7851d007b559bbe4126a6587e4b28311c2aa8b8d5266d156882c7ed9738c0483fe7c789f103f8c62392bce8ab3", 0x40, 0x6}, {&(0x7f0000000200)="d18fef1a97db94ce48b3c939d2df22c17e5f84d2832e624680900dfe014795ffc00f7db9c8641e5044bb6d6c9ee0d968195aa52763d6ce7caed2b2ad5179adf9cd351d1354af00c1822b33b4f9ada1c798b5cfb7ac6812760c2f75a1226bbea4", 0x60, 0x2}, {&(0x7f0000000280)="d1489f5f98805e896cc44376f934108b70e1b60e1d0f3830ad234477ecfc74806850fe10236c7060a5f4099a6971dc269801098479016bd77a95d6488c60c55b7ee294a9d286d1de7951b56c5ca09c2a4e714203d28ac22079e8efbcf17ed12d2942f8dfb35590227d860c2845719e61c823144a95b2f10928a1d85ef0e1dd4cb27b603e1161e1efdaf50d83c5bab8d80247d443766e26322450bbef06845a8272ef1349423f576428449d3d", 0xac, 0x100000001}], 0x108000, &(0x7f0000000400)=ANY=[@ANYBLOB='grpid.commit=0x0000000000000001,grpid,noacl,barrier,abort,nouid32,oldalloc,data=journal,smackfshat=tmpfs\x00,seclabel,euid>', @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) sendfile(r2, r3, 0x0, 0xfffffdef) 16:14:23 executing program 7: socket$inet6(0xa, 0x0, 0x0) 16:14:23 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:14:23 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200), 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:14:23 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 1578.701809] syz-executor.3[11849]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1578.713534] loop3: detected capacity change from 0 to 1 [ 1578.724938] syz-executor.1[11848]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1578.730202] journal_path: Lookup failure for './file1' [ 1578.731236] EXT4-fs: error: could not find journal device path [ 1578.739935] loop1: detected capacity change from 0 to 1 [ 1578.767018] journal_path: Lookup failure for './file1' [ 1578.767801] EXT4-fs: error: could not find journal device path [ 1578.857015] syz-executor.1[11848]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1578.878535] loop1: detected capacity change from 0 to 264192 [ 1578.908377] syz-executor.3[11849]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1578.928677] loop3: detected capacity change from 0 to 264192 16:14:23 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, 0x0, 0x0) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:14:23 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)=0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000500)='./file1\x00', 0x200, 0x3, &(0x7f0000000780)=[{&(0x7f0000000600)="a9ca51da029591b695e672caff1ddc42ecb8fec2dc2f246dde1a730880feb89550268e8c2ebbf0a86c8361681fe71843b1cea12288f68801efb8f76e826116e7269bcd38c3a7b59ca5745c858b480be784e1d8a09b337c48d879938b2c3d1efb68227b03cbbebe550e692cb782bf0f37c5d8a4039aab490eb2e7596ad4c0dfe4", 0x80, 0x4}, {&(0x7f0000000680)="d2bf22d2a684232dfb936c9532a7347bf1a568df52a545fcfa9dee7f188d6f68d0c6584c4ac3da22e81fc42b61c372c2c5d2bbb1fae9a2c80b4ed8f71451cb9cda5133eb2ec6061722c76406db04682ba00124e063e2951768298890943bffea57b2b10becca94bc542c9b3c79bf5041cfeb438a70c371429698502c365a0353b5d8124f6135f862f5057b4e7f3d481622c394e7b960fedeebc0a68163e12d73dfda4ab854e2e817123b778a655baa6ac35a1ad4da1519b54d61c42350224978b435a3b1a5104af9", 0xc8, 0x7}, {&(0x7f0000000540)="b3e4114797c8432fb36fa39c625b4d6c7b1ba770f9f1159801617261568c8f3ca074642b7964e72fe254aeb2d5198402fc481fd554caca7ab5", 0x39, 0x63}], 0x10082, &(0x7f00000008c0)={[{@data_err_abort}, {@nombcache}, {@nojournal_checksum}, {@grpjquota}, {@data_err_ignore}, {}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@block_validity}, {@journal_path={'journal_path', 0x3d, './file1'}}, {}], [{@measure}, {@uid_eq={'uid', 0x3d, r0}}, {@uid_gt={'uid>', r1}}, {@appraise}]}) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x5, 0x4, &(0x7f0000000380)=[{&(0x7f0000000140)="7b147000a02e288ce21892f9ab64378acd524b10aee7968e8929368b8207999eb9e74b16f0b541319132ce51ca8f03a36bd80b8add346def0b90143a6d20c9f5e5eab8a56b3f82166c0fa72b2293069d2728e4f8fcefbddde9e7111cda1ce56fee7ab67f30bd67959b5ca14bc5670a9c0d8810d23123d3f1933642c6572f3e2a07a04144640d20a8e1fc53d3b690cd7f8409d355b4", 0x95, 0x80}, {&(0x7f00000000c0)="52e2a768b7a94a64e20a3ababe89dc3fefb27b7851d007b559bbe4126a6587e4b28311c2aa8b8d5266d156882c7ed9738c0483fe7c789f103f8c62392bce8ab3", 0x40, 0x6}, {&(0x7f0000000200)="d18fef1a97db94ce48b3c939d2df22c17e5f84d2832e624680900dfe014795ffc00f7db9c8641e5044bb6d6c9ee0d968195aa52763d6ce7caed2b2ad5179adf9cd351d1354af00c1822b33b4f9ada1c798b5cfb7ac6812760c2f75a1226bbea4", 0x60, 0x2}, {&(0x7f0000000280)="d1489f5f98805e896cc44376f934108b70e1b60e1d0f3830ad234477ecfc74806850fe10236c7060a5f4099a6971dc269801098479016bd77a95d6488c60c55b7ee294a9d286d1de7951b56c5ca09c2a4e714203d28ac22079e8efbcf17ed12d2942f8dfb35590227d860c2845719e61c823144a95b2f10928a1d85ef0e1dd4cb27b603e1161e1efdaf50d83c5bab8d80247d443766e26322450bbef06845a8272ef1349423f576428449d3d", 0xac, 0x100000001}], 0x108000, &(0x7f0000000400)=ANY=[@ANYBLOB='grpid.commit=0x0000000000000001,grpid,noacl,barrier,abort,nouid32,oldalloc,data=journal,smackfshat=tmpfs\x00,seclabel,euid>', @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) sendfile(r2, r3, 0x0, 0xfffffdef) 16:14:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:14:24 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)=0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000500)='./file1\x00', 0x200, 0x3, &(0x7f0000000780)=[{&(0x7f0000000600)="a9ca51da029591b695e672caff1ddc42ecb8fec2dc2f246dde1a730880feb89550268e8c2ebbf0a86c8361681fe71843b1cea12288f68801efb8f76e826116e7269bcd38c3a7b59ca5745c858b480be784e1d8a09b337c48d879938b2c3d1efb68227b03cbbebe550e692cb782bf0f37c5d8a4039aab490eb2e7596ad4c0dfe4", 0x80, 0x4}, {&(0x7f0000000680)="d2bf22d2a684232dfb936c9532a7347bf1a568df52a545fcfa9dee7f188d6f68d0c6584c4ac3da22e81fc42b61c372c2c5d2bbb1fae9a2c80b4ed8f71451cb9cda5133eb2ec6061722c76406db04682ba00124e063e2951768298890943bffea57b2b10becca94bc542c9b3c79bf5041cfeb438a70c371429698502c365a0353b5d8124f6135f862f5057b4e7f3d481622c394e7b960fedeebc0a68163e12d73dfda4ab854e2e817123b778a655baa6ac35a1ad4da1519b54d61c42350224978b435a3b1a5104af9", 0xc8, 0x7}, {&(0x7f0000000540)="b3e4114797c8432fb36fa39c625b4d6c7b1ba770f9f1159801617261568c8f3ca074642b7964e72fe254aeb2d5198402fc481fd554caca7ab5", 0x39, 0x63}], 0x10082, &(0x7f00000008c0)={[{@data_err_abort}, {@nombcache}, {@nojournal_checksum}, {@grpjquota}, {@data_err_ignore}, {}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@block_validity}, {@journal_path={'journal_path', 0x3d, './file1'}}, {}], [{@measure}, {@uid_eq={'uid', 0x3d, r0}}, {@uid_gt={'uid>', r1}}, {@appraise}]}) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x5, 0x4, &(0x7f0000000380)=[{&(0x7f0000000140)="7b147000a02e288ce21892f9ab64378acd524b10aee7968e8929368b8207999eb9e74b16f0b541319132ce51ca8f03a36bd80b8add346def0b90143a6d20c9f5e5eab8a56b3f82166c0fa72b2293069d2728e4f8fcefbddde9e7111cda1ce56fee7ab67f30bd67959b5ca14bc5670a9c0d8810d23123d3f1933642c6572f3e2a07a04144640d20a8e1fc53d3b690cd7f8409d355b4", 0x95, 0x80}, {&(0x7f00000000c0)="52e2a768b7a94a64e20a3ababe89dc3fefb27b7851d007b559bbe4126a6587e4b28311c2aa8b8d5266d156882c7ed9738c0483fe7c789f103f8c62392bce8ab3", 0x40, 0x6}, {&(0x7f0000000200)="d18fef1a97db94ce48b3c939d2df22c17e5f84d2832e624680900dfe014795ffc00f7db9c8641e5044bb6d6c9ee0d968195aa52763d6ce7caed2b2ad5179adf9cd351d1354af00c1822b33b4f9ada1c798b5cfb7ac6812760c2f75a1226bbea4", 0x60, 0x2}, {&(0x7f0000000280)="d1489f5f98805e896cc44376f934108b70e1b60e1d0f3830ad234477ecfc74806850fe10236c7060a5f4099a6971dc269801098479016bd77a95d6488c60c55b7ee294a9d286d1de7951b56c5ca09c2a4e714203d28ac22079e8efbcf17ed12d2942f8dfb35590227d860c2845719e61c823144a95b2f10928a1d85ef0e1dd4cb27b603e1161e1efdaf50d83c5bab8d80247d443766e26322450bbef06845a8272ef1349423f576428449d3d", 0xac, 0x100000001}], 0x108000, &(0x7f0000000400)=ANY=[@ANYBLOB='grpid.commit=0x0000000000000001,grpid,noacl,barrier,abort,nouid32,oldalloc,data=journal,smackfshat=tmpfs\x00,seclabel,euid>', @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) sendfile(r2, r3, 0x0, 0xfffffdef) 16:14:24 executing program 7: socket$inet6(0xa, 0x0, 0x0) 16:14:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:14:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, 0x0, 0x0) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591df5d2797f01c245a53cbaac38beb67ec8543ee1fc76da389a2f521469702a87c3b5af9d215c17efc51425aad48737389caf265ffa46a739ff985065b4478c2cc0a581cd02471cb80059fcfbf9b2b1b1a6f164a6db4cc9c4b3e85bea642af74ef26797a542eadecdecba86ac5a23f879037c5bcb5d47201eca38085fd91832076149d22dc23f"], 0x14}}, 0x0) 16:14:24 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 1579.606820] syz-executor.6[11869]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1579.644048] loop6: detected capacity change from 0 to 1 [ 1579.651412] journal_path: Lookup failure for './file1' [ 1579.652154] EXT4-fs: error: could not find journal device path 16:14:24 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) [ 1579.659164] syz-executor.1[11873]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1579.666157] loop1: detected capacity change from 0 to 1 16:14:24 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)=0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000500)='./file1\x00', 0x200, 0x3, &(0x7f0000000780)=[{&(0x7f0000000600)="a9ca51da029591b695e672caff1ddc42ecb8fec2dc2f246dde1a730880feb89550268e8c2ebbf0a86c8361681fe71843b1cea12288f68801efb8f76e826116e7269bcd38c3a7b59ca5745c858b480be784e1d8a09b337c48d879938b2c3d1efb68227b03cbbebe550e692cb782bf0f37c5d8a4039aab490eb2e7596ad4c0dfe4", 0x80, 0x4}, {&(0x7f0000000680)="d2bf22d2a684232dfb936c9532a7347bf1a568df52a545fcfa9dee7f188d6f68d0c6584c4ac3da22e81fc42b61c372c2c5d2bbb1fae9a2c80b4ed8f71451cb9cda5133eb2ec6061722c76406db04682ba00124e063e2951768298890943bffea57b2b10becca94bc542c9b3c79bf5041cfeb438a70c371429698502c365a0353b5d8124f6135f862f5057b4e7f3d481622c394e7b960fedeebc0a68163e12d73dfda4ab854e2e817123b778a655baa6ac35a1ad4da1519b54d61c42350224978b435a3b1a5104af9", 0xc8, 0x7}, {&(0x7f0000000540)="b3e4114797c8432fb36fa39c625b4d6c7b1ba770f9f1159801617261568c8f3ca074642b7964e72fe254aeb2d5198402fc481fd554caca7ab5", 0x39, 0x63}], 0x10082, &(0x7f00000008c0)={[{@data_err_abort}, {@nombcache}, {@nojournal_checksum}, {@grpjquota}, {@data_err_ignore}, {}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@block_validity}, {@journal_path={'journal_path', 0x3d, './file1'}}, {}], [{@measure}, {@uid_eq={'uid', 0x3d, r0}}, {@uid_gt={'uid>', r1}}, {@appraise}]}) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x5, 0x4, &(0x7f0000000380)=[{&(0x7f0000000140)="7b147000a02e288ce21892f9ab64378acd524b10aee7968e8929368b8207999eb9e74b16f0b541319132ce51ca8f03a36bd80b8add346def0b90143a6d20c9f5e5eab8a56b3f82166c0fa72b2293069d2728e4f8fcefbddde9e7111cda1ce56fee7ab67f30bd67959b5ca14bc5670a9c0d8810d23123d3f1933642c6572f3e2a07a04144640d20a8e1fc53d3b690cd7f8409d355b4", 0x95, 0x80}, {&(0x7f00000000c0)="52e2a768b7a94a64e20a3ababe89dc3fefb27b7851d007b559bbe4126a6587e4b28311c2aa8b8d5266d156882c7ed9738c0483fe7c789f103f8c62392bce8ab3", 0x40, 0x6}, {&(0x7f0000000200)="d18fef1a97db94ce48b3c939d2df22c17e5f84d2832e624680900dfe014795ffc00f7db9c8641e5044bb6d6c9ee0d968195aa52763d6ce7caed2b2ad5179adf9cd351d1354af00c1822b33b4f9ada1c798b5cfb7ac6812760c2f75a1226bbea4", 0x60, 0x2}, {&(0x7f0000000280)="d1489f5f98805e896cc44376f934108b70e1b60e1d0f3830ad234477ecfc74806850fe10236c7060a5f4099a6971dc269801098479016bd77a95d6488c60c55b7ee294a9d286d1de7951b56c5ca09c2a4e714203d28ac22079e8efbcf17ed12d2942f8dfb35590227d860c2845719e61c823144a95b2f10928a1d85ef0e1dd4cb27b603e1161e1efdaf50d83c5bab8d80247d443766e26322450bbef06845a8272ef1349423f576428449d3d", 0xac, 0x100000001}], 0x108000, &(0x7f0000000400)=ANY=[@ANYBLOB='grpid.commit=0x0000000000000001,grpid,noacl,barrier,abort,nouid32,oldalloc,data=journal,smackfshat=tmpfs\x00,seclabel,euid>', @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) sendfile(r2, r3, 0x0, 0xfffffdef) [ 1579.696085] journal_path: Lookup failure for './file1' [ 1579.697356] EXT4-fs: error: could not find journal device path [ 1579.763578] syz-executor.6[11869]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1579.781419] loop6: detected capacity change from 0 to 264192 [ 1579.823377] syz-executor.1[11873]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1579.839346] loop1: detected capacity change from 0 to 264192 [ 1579.981643] syz-executor.3[11884]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1579.992755] loop3: detected capacity change from 0 to 1 [ 1579.998512] journal_path: Lookup failure for './file1' [ 1579.999103] EXT4-fs: error: could not find journal device path 16:14:24 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) 16:14:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, 0x0, 0x0) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591df5d2797f01c245a53cbaac38beb67ec8543ee1fc76da389a2f521469702a87c3b5af9d215c17efc51425aad48737389caf265ffa46a739ff985065b4478c2cc0a581cd02471cb80059fcfbf9b2b1b1a6f164a6db4cc9c4b3e85bea642af74ef26797a542eadecdecba86ac5a23f879037c5bcb5d47201eca38085fd91832076149d22dc23f"], 0x14}}, 0x0) 16:14:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 1580.097700] syz-executor.3[11884]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1580.106101] loop3: detected capacity change from 0 to 264192 16:14:37 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000001600)='uid_map\x00') write(r0, 0x0, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x8, r0, 0x0, 0x1f, 0x0) 16:14:37 executing program 7: socket$inet6(0xa, 0x0, 0x0) 16:14:37 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:14:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:14:37 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000000)={@private2, r3}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r3}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r3}) r4 = dup(r0) getsockopt$inet_int(r4, 0x0, 0xe, 0x0, &(0x7f0000000000)) 16:14:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:14:37 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) 16:14:37 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)=0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000500)='./file1\x00', 0x200, 0x3, &(0x7f0000000780)=[{&(0x7f0000000600)="a9ca51da029591b695e672caff1ddc42ecb8fec2dc2f246dde1a730880feb89550268e8c2ebbf0a86c8361681fe71843b1cea12288f68801efb8f76e826116e7269bcd38c3a7b59ca5745c858b480be784e1d8a09b337c48d879938b2c3d1efb68227b03cbbebe550e692cb782bf0f37c5d8a4039aab490eb2e7596ad4c0dfe4", 0x80, 0x4}, {&(0x7f0000000680)="d2bf22d2a684232dfb936c9532a7347bf1a568df52a545fcfa9dee7f188d6f68d0c6584c4ac3da22e81fc42b61c372c2c5d2bbb1fae9a2c80b4ed8f71451cb9cda5133eb2ec6061722c76406db04682ba00124e063e2951768298890943bffea57b2b10becca94bc542c9b3c79bf5041cfeb438a70c371429698502c365a0353b5d8124f6135f862f5057b4e7f3d481622c394e7b960fedeebc0a68163e12d73dfda4ab854e2e817123b778a655baa6ac35a1ad4da1519b54d61c42350224978b435a3b1a5104af9", 0xc8, 0x7}, {&(0x7f0000000540)="b3e4114797c8432fb36fa39c625b4d6c7b1ba770f9f1159801617261568c8f3ca074642b7964e72fe254aeb2d5198402fc481fd554caca7ab5", 0x39, 0x63}], 0x10082, &(0x7f00000008c0)={[{@data_err_abort}, {@nombcache}, {@nojournal_checksum}, {@grpjquota}, {@data_err_ignore}, {}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@block_validity}, {@journal_path={'journal_path', 0x3d, './file1'}}, {}], [{@measure}, {@uid_eq={'uid', 0x3d, r0}}, {@uid_gt={'uid>', r1}}, {@appraise}]}) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x5, 0x4, &(0x7f0000000380)=[{&(0x7f0000000140)="7b147000a02e288ce21892f9ab64378acd524b10aee7968e8929368b8207999eb9e74b16f0b541319132ce51ca8f03a36bd80b8add346def0b90143a6d20c9f5e5eab8a56b3f82166c0fa72b2293069d2728e4f8fcefbddde9e7111cda1ce56fee7ab67f30bd67959b5ca14bc5670a9c0d8810d23123d3f1933642c6572f3e2a07a04144640d20a8e1fc53d3b690cd7f8409d355b4", 0x95, 0x80}, {&(0x7f00000000c0)="52e2a768b7a94a64e20a3ababe89dc3fefb27b7851d007b559bbe4126a6587e4b28311c2aa8b8d5266d156882c7ed9738c0483fe7c789f103f8c62392bce8ab3", 0x40, 0x6}, {&(0x7f0000000200)="d18fef1a97db94ce48b3c939d2df22c17e5f84d2832e624680900dfe014795ffc00f7db9c8641e5044bb6d6c9ee0d968195aa52763d6ce7caed2b2ad5179adf9cd351d1354af00c1822b33b4f9ada1c798b5cfb7ac6812760c2f75a1226bbea4", 0x60, 0x2}, {&(0x7f0000000280)="d1489f5f98805e896cc44376f934108b70e1b60e1d0f3830ad234477ecfc74806850fe10236c7060a5f4099a6971dc269801098479016bd77a95d6488c60c55b7ee294a9d286d1de7951b56c5ca09c2a4e714203d28ac22079e8efbcf17ed12d2942f8dfb35590227d860c2845719e61c823144a95b2f10928a1d85ef0e1dd4cb27b603e1161e1efdaf50d83c5bab8d80247d443766e26322450bbef06845a8272ef1349423f576428449d3d", 0xac, 0x100000001}], 0x108000, &(0x7f0000000400)=ANY=[@ANYBLOB='grpid.commit=0x0000000000000001,grpid,noacl,barrier,abort,nouid32,oldalloc,data=journal,smackfshat=tmpfs\x00,seclabel,euid>', @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) sendfile(r2, r3, 0x0, 0xfffffdef) 16:14:37 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000001600)='uid_map\x00') write(r0, 0x0, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x8, r0, 0x0, 0x1f, 0x0) 16:14:37 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000001600)='uid_map\x00') write(r0, 0x0, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x8, r0, 0x0, 0x1f, 0x0) 16:14:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) [ 1592.792431] syz-executor.6[11917]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1592.797189] loop6: detected capacity change from 0 to 1 [ 1592.803874] journal_path: Lookup failure for './file1' [ 1592.804342] EXT4-fs: error: could not find journal device path 16:14:37 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) [ 1592.884666] syz-executor.6[11917]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1592.900967] loop6: detected capacity change from 0 to 264192 16:14:37 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000001600)='uid_map\x00') copy_file_range(r0, &(0x7f0000000000)=0x8, r0, 0x0, 0x1f, 0x0) 16:14:37 executing program 3: stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) r2 = geteuid() stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) r4 = geteuid() recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000100)=""/173, 0xad}, {&(0x7f00000001c0)=""/232, 0xe8}, {&(0x7f00000002c0)=""/92, 0x5c}], 0x3}}, {{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/19, 0x13}], 0x2, &(0x7f0000000540)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000600)=""/20, 0x14}, {&(0x7f0000000640)=""/177, 0xb1}, {&(0x7f0000000700)=""/83, 0x53}, {&(0x7f0000000780)=""/97, 0x61}, {&(0x7f0000000800)=""/107, 0x6b}], 0x5, &(0x7f0000000900)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x60}}, {{&(0x7f0000000980), 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000a00)=""/238, 0xee}, {&(0x7f0000000b00)=""/186, 0xba}, {&(0x7f0000000bc0)=""/44, 0x2c}, {&(0x7f0000000c00)=""/7, 0x7}, {&(0x7f0000000c40)=""/163, 0xa3}, {&(0x7f0000000d00)=""/84, 0x54}, {&(0x7f0000000d80)=""/35, 0x23}], 0x7, &(0x7f0000000e40)}}], 0x4, 0x100, &(0x7f0000000f80)={0x0, 0x989680}) r6 = getgid() setgroups(0x1, &(0x7f0000000000)=[r6]) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000011c0)=ANY=[@ANYBLOB="02000000010005000000000002000400", @ANYRES32=r0, @ANYBLOB="02000000", @ANYRES64=r7, @ANYBLOB="02000100", @ANYRES32=r1, @ANYBLOB="02000000", @ANYRES32=r2, @ANYBLOB="02000400", @ANYRES32=r3, @ANYBLOB="10dca45a5fb1c5e27a927d2754120648b27f7c6fc1c67793f03924450957a143df4144a7590b7c916b59f63744924dc63aeca6f8b5df0b9cf8bd50ae8f52df90b656174f13588f9e5980c992a13343fbcbb61d8827c39f7a787ea839194e1e792b9ad56189b9cb429409b378f732ca45c7ff58121607478708c29543bfb790b5e325f3198ba9a1", @ANYRES32=r4, @ANYBLOB="040000000000000008000200", @ANYRES32=0xee00, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000400", @ANYRES32=0xee01, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="10000100000000002000040000000000"], 0x7c, 0x2) r8 = syz_open_procfs(0x0, &(0x7f0000001600)='uid_map\x00') write(r8, 0x0, 0x0) fchmod(r8, 0x126) getgid() 16:14:38 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) 16:14:38 executing program 1: copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x8, 0xffffffffffffffff, 0x0, 0x1f, 0x0) 16:14:38 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:14:38 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:14:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:14:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:14:38 executing program 1: copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x8, 0xffffffffffffffff, 0x0, 0x1f, 0x0) 16:14:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000000)={@private2, r3}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r3}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r3}) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)) 16:14:38 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:14:55 executing program 1: copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x8, 0xffffffffffffffff, 0x0, 0x1f, 0x0) 16:14:55 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)=0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000500)='./file1\x00', 0x200, 0x3, &(0x7f0000000780)=[{&(0x7f0000000600)="a9ca51da029591b695e672caff1ddc42ecb8fec2dc2f246dde1a730880feb89550268e8c2ebbf0a86c8361681fe71843b1cea12288f68801efb8f76e826116e7269bcd38c3a7b59ca5745c858b480be784e1d8a09b337c48d879938b2c3d1efb68227b03cbbebe550e692cb782bf0f37c5d8a4039aab490eb2e7596ad4c0dfe4", 0x80, 0x4}, {&(0x7f0000000680)="d2bf22d2a684232dfb936c9532a7347bf1a568df52a545fcfa9dee7f188d6f68d0c6584c4ac3da22e81fc42b61c372c2c5d2bbb1fae9a2c80b4ed8f71451cb9cda5133eb2ec6061722c76406db04682ba00124e063e2951768298890943bffea57b2b10becca94bc542c9b3c79bf5041cfeb438a70c371429698502c365a0353b5d8124f6135f862f5057b4e7f3d481622c394e7b960fedeebc0a68163e12d73dfda4ab854e2e817123b778a655baa6ac35a1ad4da1519b54d61c42350224978b435a3b1a5104af9", 0xc8, 0x7}, {&(0x7f0000000540)="b3e4114797c8432fb36fa39c625b4d6c7b1ba770f9f1159801617261568c8f3ca074642b7964e72fe254aeb2d5198402fc481fd554caca7ab5", 0x39, 0x63}], 0x10082, &(0x7f00000008c0)={[{@data_err_abort}, {@nombcache}, {@nojournal_checksum}, {@grpjquota}, {@data_err_ignore}, {}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@block_validity}, {@journal_path={'journal_path', 0x3d, './file1'}}, {}], [{@measure}, {@uid_eq={'uid', 0x3d, r0}}, {@uid_gt={'uid>', r1}}, {@appraise}]}) chdir(&(0x7f0000000340)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x5, 0x4, &(0x7f0000000380)=[{&(0x7f0000000140)="7b147000a02e288ce21892f9ab64378acd524b10aee7968e8929368b8207999eb9e74b16f0b541319132ce51ca8f03a36bd80b8add346def0b90143a6d20c9f5e5eab8a56b3f82166c0fa72b2293069d2728e4f8fcefbddde9e7111cda1ce56fee7ab67f30bd67959b5ca14bc5670a9c0d8810d23123d3f1933642c6572f3e2a07a04144640d20a8e1fc53d3b690cd7f8409d355b4", 0x95, 0x80}, {&(0x7f00000000c0)="52e2a768b7a94a64e20a3ababe89dc3fefb27b7851d007b559bbe4126a6587e4b28311c2aa8b8d5266d156882c7ed9738c0483fe7c789f103f8c62392bce8ab3", 0x40, 0x6}, {&(0x7f0000000200)="d18fef1a97db94ce48b3c939d2df22c17e5f84d2832e624680900dfe014795ffc00f7db9c8641e5044bb6d6c9ee0d968195aa52763d6ce7caed2b2ad5179adf9cd351d1354af00c1822b33b4f9ada1c798b5cfb7ac6812760c2f75a1226bbea4", 0x60, 0x2}, {&(0x7f0000000280)="d1489f5f98805e896cc44376f934108b70e1b60e1d0f3830ad234477ecfc74806850fe10236c7060a5f4099a6971dc269801098479016bd77a95d6488c60c55b7ee294a9d286d1de7951b56c5ca09c2a4e714203d28ac22079e8efbcf17ed12d2942f8dfb35590227d860c2845719e61c823144a95b2f10928a1d85ef0e1dd4cb27b603e1161e1efdaf50d83c5bab8d80247d443766e26322450bbef06845a8272ef1349423f576428449d3d", 0xac, 0x100000001}], 0x108000, &(0x7f0000000400)=ANY=[@ANYBLOB='grpid.commit=0x0000000000000001,grpid,noacl,barrier,abort,nouid32,oldalloc,data=journal,smackfshat=tmpfs\x00,seclabel,euid>', @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000a80)='./file1\x00', 0x8000, 0x5, &(0x7f0000000dc0)=[{&(0x7f0000000ac0)="7d2bbcc7c970f4e6fb7014aeeacac9fb5a5a595905273f2dbbb83557665ee65bb86bf52bc252eb28b20f7098103503dae93ed8dac1018664e54884bebfebdc462fb1a3ff7779e2dc2ff237129563939bd6e743cef1e28a3193c16dbcdc84910076bb1c8bc2c4b355014969b90079c08fc787dc7d1a9706616faf912e66596d7bf4d96716f2279bbe7288e27cb521971a6476b44734ce115f478326c7fc1c4c5d2a5c", 0xa2, 0x2d70}, {&(0x7f0000000b80), 0x0, 0x800}, {&(0x7f0000000bc0)="a5365ac0ed190236022266094da62abb9bbe4f305b214bf0ad72a8b0446c76ff97f745642d76", 0x26, 0x1}, {&(0x7f0000000c00)="3a67c776cb983abaf8ce0bf26c2ed0c686f816125f1becc279fb38ee06f4b44b3817c7b49ac15d473bffeb163b391b14bbf8331310f35cc61217baa842b2d1289cc25459999223ad55ad859c7f415258c5a3467f14b7fca4e552ea7e1b3e0510d20ae02dd9186bdf3e45ce862ef39621e8111dd54802b96aca4bcc52ed8f479302bdb407dcade1b79032d2eb5e3639143d1299e60d78623a426c2327dcd39d", 0x9f, 0x437}, {&(0x7f0000000cc0)="7242cbc2e7d0cda463650b08522aa2920a7488c6ca17c3a4928417bf359625812dee3f6d29d5d22fa6ab356c9101173f2d9cda4688bba749907d806690c0c5643757b2f52968f8f5ec389f7863b55a887116a13659536f89e1d998da3afa9db278d3c4feb9f54e1fc4e8a64be908d043f3dbc2da8cc3c29eae29b1cadbd5d62e76d2cd077dd73c164efca8b2c1cb27e639c469c2cbdb9f7330be8f4991368ddedaeccb7bcac11a5013cfebb8068f1e84554004863c582edf46fcecc6a7474055038f57cfcbda7f00a66fe801d5ca95f3e1c3fa42f6bc0716ce", 0xd9, 0x100000001}], 0x0, &(0x7f0000000e40)={[{@iocharset={'iocharset', 0x3d, 'none'}}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@utf8no}, {@shortname_win95}, {}, {@fat=@errors_remount}, {@nonumtail}]}) 16:14:55 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:14:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591df5d2797f01c245a53cbaac38beb67ec8543ee1fc76da389a2f521469702a87c3b5af9d215c17efc51425aad48737389caf265ffa46a739ff985065b4478c2cc0a581cd02471cb80059fcfbf9b2b1b1a6f164a6db4cc9c4b3e85bea642af74ef26797a542eadecdecba86ac5a23f879037c5bcb5d47201eca38085fd91832076149d22dc23f"], 0x14}}, 0x0) 16:14:55 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) 16:14:55 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0x0) 16:14:55 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:14:55 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:14:55 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 1610.541173] syz-executor.6[11974]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1610.552765] loop6: detected capacity change from 0 to 1 [ 1610.560591] journal_path: Lookup failure for './file1' [ 1610.561645] EXT4-fs: error: could not find journal device path [ 1610.654794] syz-executor.6[11974]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1610.670014] loop6: detected capacity change from 0 to 264192 [ 1610.749170] syz-executor.6[11974]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1610.770984] loop6: detected capacity change from 0 to 264192 [ 1610.782497] FAT-fs (loop6): Unrecognized mount option "nnonumtail=1" or missing value 16:15:07 executing program 1: r0 = syz_open_procfs(0x0, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x8, r0, 0x0, 0x1f, 0x0) 16:15:07 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:15:07 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0x0) 16:15:07 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:15:07 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:15:07 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)=0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000500)='./file1\x00', 0x200, 0x3, &(0x7f0000000780)=[{&(0x7f0000000600)="a9ca51da029591b695e672caff1ddc42ecb8fec2dc2f246dde1a730880feb89550268e8c2ebbf0a86c8361681fe71843b1cea12288f68801efb8f76e826116e7269bcd38c3a7b59ca5745c858b480be784e1d8a09b337c48d879938b2c3d1efb68227b03cbbebe550e692cb782bf0f37c5d8a4039aab490eb2e7596ad4c0dfe4", 0x80, 0x4}, {&(0x7f0000000680)="d2bf22d2a684232dfb936c9532a7347bf1a568df52a545fcfa9dee7f188d6f68d0c6584c4ac3da22e81fc42b61c372c2c5d2bbb1fae9a2c80b4ed8f71451cb9cda5133eb2ec6061722c76406db04682ba00124e063e2951768298890943bffea57b2b10becca94bc542c9b3c79bf5041cfeb438a70c371429698502c365a0353b5d8124f6135f862f5057b4e7f3d481622c394e7b960fedeebc0a68163e12d73dfda4ab854e2e817123b778a655baa6ac35a1ad4da1519b54d61c42350224978b435a3b1a5104af9", 0xc8, 0x7}, {&(0x7f0000000540)="b3e4114797c8432fb36fa39c625b4d6c7b1ba770f9f1159801617261568c8f3ca074642b7964e72fe254aeb2d5198402fc481fd554caca7ab5", 0x39, 0x63}], 0x10082, &(0x7f00000008c0)={[{@data_err_abort}, {@nombcache}, {@nojournal_checksum}, {@grpjquota}, {@data_err_ignore}, {}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@block_validity}, {@journal_path={'journal_path', 0x3d, './file1'}}, {}], [{@measure}, {@uid_eq={'uid', 0x3d, r0}}, {@uid_gt={'uid>', r1}}, {@appraise}]}) chdir(&(0x7f0000000340)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x5, 0x4, &(0x7f0000000380)=[{&(0x7f0000000140)="7b147000a02e288ce21892f9ab64378acd524b10aee7968e8929368b8207999eb9e74b16f0b541319132ce51ca8f03a36bd80b8add346def0b90143a6d20c9f5e5eab8a56b3f82166c0fa72b2293069d2728e4f8fcefbddde9e7111cda1ce56fee7ab67f30bd67959b5ca14bc5670a9c0d8810d23123d3f1933642c6572f3e2a07a04144640d20a8e1fc53d3b690cd7f8409d355b4", 0x95, 0x80}, {&(0x7f00000000c0)="52e2a768b7a94a64e20a3ababe89dc3fefb27b7851d007b559bbe4126a6587e4b28311c2aa8b8d5266d156882c7ed9738c0483fe7c789f103f8c62392bce8ab3", 0x40, 0x6}, {&(0x7f0000000200)="d18fef1a97db94ce48b3c939d2df22c17e5f84d2832e624680900dfe014795ffc00f7db9c8641e5044bb6d6c9ee0d968195aa52763d6ce7caed2b2ad5179adf9cd351d1354af00c1822b33b4f9ada1c798b5cfb7ac6812760c2f75a1226bbea4", 0x60, 0x2}, {&(0x7f0000000280)="d1489f5f98805e896cc44376f934108b70e1b60e1d0f3830ad234477ecfc74806850fe10236c7060a5f4099a6971dc269801098479016bd77a95d6488c60c55b7ee294a9d286d1de7951b56c5ca09c2a4e714203d28ac22079e8efbcf17ed12d2942f8dfb35590227d860c2845719e61c823144a95b2f10928a1d85ef0e1dd4cb27b603e1161e1efdaf50d83c5bab8d80247d443766e26322450bbef06845a8272ef1349423f576428449d3d", 0xac, 0x100000001}], 0x108000, &(0x7f0000000400)=ANY=[@ANYBLOB='grpid.commit=0x0000000000000001,grpid,noacl,barrier,abort,nouid32,oldalloc,data=journal,smackfshat=tmpfs\x00,seclabel,euid>', @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000a80)='./file1\x00', 0x8000, 0x5, &(0x7f0000000dc0)=[{&(0x7f0000000ac0)="7d2bbcc7c970f4e6fb7014aeeacac9fb5a5a595905273f2dbbb83557665ee65bb86bf52bc252eb28b20f7098103503dae93ed8dac1018664e54884bebfebdc462fb1a3ff7779e2dc2ff237129563939bd6e743cef1e28a3193c16dbcdc84910076bb1c8bc2c4b355014969b90079c08fc787dc7d1a9706616faf912e66596d7bf4d96716f2279bbe7288e27cb521971a6476b44734ce115f478326c7fc1c4c5d2a5c", 0xa2, 0x2d70}, {&(0x7f0000000b80), 0x0, 0x800}, {&(0x7f0000000bc0)="a5365ac0ed190236022266094da62abb9bbe4f305b214bf0ad72a8b0446c76ff97f745642d76", 0x26, 0x1}, {&(0x7f0000000c00)="3a67c776cb983abaf8ce0bf26c2ed0c686f816125f1becc279fb38ee06f4b44b3817c7b49ac15d473bffeb163b391b14bbf8331310f35cc61217baa842b2d1289cc25459999223ad55ad859c7f415258c5a3467f14b7fca4e552ea7e1b3e0510d20ae02dd9186bdf3e45ce862ef39621e8111dd54802b96aca4bcc52ed8f479302bdb407dcade1b79032d2eb5e3639143d1299e60d78623a426c2327dcd39d", 0x9f, 0x437}, {&(0x7f0000000cc0)="7242cbc2e7d0cda463650b08522aa2920a7488c6ca17c3a4928417bf359625812dee3f6d29d5d22fa6ab356c9101173f2d9cda4688bba749907d806690c0c5643757b2f52968f8f5ec389f7863b55a887116a13659536f89e1d998da3afa9db278d3c4feb9f54e1fc4e8a64be908d043f3dbc2da8cc3c29eae29b1cadbd5d62e76d2cd077dd73c164efca8b2c1cb27e639c469c2cbdb9f7330be8f4991368ddedaeccb7bcac11a5013cfebb8068f1e84554004863c582edf46fcecc6a7474055038f57cfcbda7f00a66fe801d5ca95f3e1c3fa42f6bc0716ce", 0xd9, 0x100000001}], 0x0, &(0x7f0000000e40)={[{@iocharset={'iocharset', 0x3d, 'none'}}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@utf8no}, {@shortname_win95}, {}, {@fat=@errors_remount}, {@nonumtail}]}) 16:15:07 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) 16:15:07 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 1) [ 1622.412662] syz-executor.3[11994]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1622.421515] loop3: detected capacity change from 0 to 1 [ 1622.425678] journal_path: Lookup failure for './file1' [ 1622.426119] EXT4-fs: error: could not find journal device path [ 1622.492363] syz-executor.3[11994]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1622.505224] loop3: detected capacity change from 0 to 264192 [ 1622.536382] syz-executor.3[11994]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 16:15:07 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 1622.556413] loop3: detected capacity change from 0 to 264192 [ 1622.559477] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value 16:15:07 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:15:07 executing program 1: r0 = syz_open_procfs(0x0, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x8, r0, 0x0, 0x1f, 0x0) [ 1622.642506] FAULT_INJECTION: forcing a failure. [ 1622.642506] name failslab, interval 1, probability 0, space 0, times 1 [ 1622.644266] CPU: 1 PID: 12008 Comm: syz-executor.6 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1622.645365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1622.646357] Call Trace: [ 1622.646719] [ 1622.647040] dump_stack_lvl+0xc1/0xf0 [ 1622.647585] should_fail_ex+0x4b4/0x5b0 [ 1622.648196] should_failslab+0x9/0x20 [ 1622.648745] __kmem_cache_alloc_node+0x66/0x310 [ 1622.649408] ? alloc_pipe_info+0x10e/0x590 [ 1622.650023] kmalloc_trace+0x26/0xc0 [ 1622.650560] alloc_pipe_info+0x10e/0x590 [ 1622.651153] splice_direct_to_actor+0x796/0x9d0 [ 1622.651819] ? __pfx_direct_splice_actor+0x10/0x10 [ 1622.652504] ? inode_security+0x105/0x140 [ 1622.653086] ? avc_policy_seqno+0x9/0x20 [ 1622.653664] ? selinux_file_permission+0x9c/0x520 [ 1622.654332] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1622.655047] ? security_file_permission+0xb5/0xe0 [ 1622.655762] do_splice_direct+0x1bb/0x290 [ 1622.656299] ? __pfx_do_splice_direct+0x10/0x10 [ 1622.656960] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1622.657679] ? lock_is_held_type+0x9f/0x120 [ 1622.658299] do_sendfile+0xb67/0x1300 [ 1622.658863] ? __pfx_do_sendfile+0x10/0x10 [ 1622.659473] __x64_sys_sendfile64+0x1d5/0x210 [ 1622.660133] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1622.660844] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1622.661578] do_syscall_64+0x3f/0x90 [ 1622.662110] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1622.662823] RIP: 0033:0x7ff2d0db4b19 [ 1622.663369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1622.665760] RSP: 002b:00007ff2ce309188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1622.666768] RAX: ffffffffffffffda RBX: 00007ff2d0ec8020 RCX: 00007ff2d0db4b19 [ 1622.667710] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1622.668675] RBP: 00007ff2ce3091d0 R08: 0000000000000000 R09: 0000000000000000 [ 1622.669624] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001 [ 1622.670571] R13: 00007fff7272a3df R14: 00007ff2ce309300 R15: 0000000000022000 [ 1622.671540] 16:15:07 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 1) 16:15:07 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:15:07 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0x0) 16:15:07 executing program 7: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) 16:15:07 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 1622.887955] FAULT_INJECTION: forcing a failure. [ 1622.887955] name failslab, interval 1, probability 0, space 0, times 0 [ 1622.888802] CPU: 0 PID: 12019 Comm: syz-executor.3 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1622.889335] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1622.889890] Call Trace: [ 1622.890074] [ 1622.890238] dump_stack_lvl+0xc1/0xf0 [ 1622.890522] should_fail_ex+0x4b4/0x5b0 [ 1622.890824] should_failslab+0x9/0x20 [ 1622.891106] __kmem_cache_alloc_node+0x66/0x310 [ 1622.891448] ? alloc_pipe_info+0x10e/0x590 [ 1622.891766] kmalloc_trace+0x26/0xc0 [ 1622.892040] alloc_pipe_info+0x10e/0x590 [ 1622.892340] splice_direct_to_actor+0x796/0x9d0 [ 1622.892678] ? __pfx_direct_splice_actor+0x10/0x10 [ 1622.893021] ? inode_security+0x105/0x140 [ 1622.893315] ? avc_policy_seqno+0x9/0x20 [ 1622.893607] ? selinux_file_permission+0x9c/0x520 [ 1622.893949] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1622.894313] ? security_file_permission+0xb5/0xe0 [ 1622.894668] do_splice_direct+0x1bb/0x290 [ 1622.894966] ? __pfx_do_splice_direct+0x10/0x10 [ 1622.895299] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1622.895666] ? lock_is_held_type+0x9f/0x120 [ 1622.895993] do_sendfile+0xb67/0x1300 [ 1622.896281] ? __pfx_do_sendfile+0x10/0x10 [ 1622.896595] __x64_sys_sendfile64+0x1d5/0x210 [ 1622.896929] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1622.897288] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1622.897662] do_syscall_64+0x3f/0x90 [ 1622.897931] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1622.898296] RIP: 0033:0x7f83ebaa5b19 [ 1622.898558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1622.899790] RSP: 002b:00007f83e901b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1622.900303] RAX: ffffffffffffffda RBX: 00007f83ebbb8f60 RCX: 00007f83ebaa5b19 [ 1622.900786] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1622.901272] RBP: 00007f83e901b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1622.901760] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001 [ 1622.902250] R13: 00007ffce6e20e1f R14: 00007f83e901b300 R15: 0000000000022000 [ 1622.902752] 16:15:07 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:15:07 executing program 1: r0 = syz_open_procfs(0x0, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x8, r0, 0x0, 0x1f, 0x0) 16:15:21 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 2) 16:15:21 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 1) 16:15:21 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:15:21 executing program 7: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) 16:15:21 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 2) 16:15:21 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:15:21 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:15:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000001600)='uid_map\x00') copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x8, r0, 0x0, 0x1f, 0x0) [ 1636.379316] FAULT_INJECTION: forcing a failure. [ 1636.379316] name failslab, interval 1, probability 0, space 0, times 0 [ 1636.380303] CPU: 0 PID: 12045 Comm: syz-executor.2 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1636.380894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1636.381480] Call Trace: [ 1636.381674] [ 1636.381844] dump_stack_lvl+0xc1/0xf0 [ 1636.382136] should_fail_ex+0x4b4/0x5b0 [ 1636.382448] should_failslab+0x9/0x20 [ 1636.382744] __kmem_cache_alloc_node+0x66/0x310 [ 1636.383105] ? alloc_pipe_info+0x10e/0x590 [ 1636.383438] kmalloc_trace+0x26/0xc0 [ 1636.383731] alloc_pipe_info+0x10e/0x590 [ 1636.384060] splice_direct_to_actor+0x796/0x9d0 [ 1636.384420] ? __pfx_direct_splice_actor+0x10/0x10 [ 1636.384795] ? inode_security+0x105/0x140 [ 1636.385109] ? avc_policy_seqno+0x9/0x20 [ 1636.385426] ? selinux_file_permission+0x9c/0x520 [ 1636.385796] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1636.386179] ? security_file_permission+0xb5/0xe0 [ 1636.386562] do_splice_direct+0x1bb/0x290 [ 1636.386883] ? __pfx_do_splice_direct+0x10/0x10 [ 1636.387242] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1636.387641] ? lock_is_held_type+0x9f/0x120 [ 1636.387997] do_sendfile+0xb67/0x1300 [ 1636.388299] ? __pfx_do_sendfile+0x10/0x10 [ 1636.388636] __x64_sys_sendfile64+0x1d5/0x210 [ 1636.388986] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1636.389367] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1636.389771] do_syscall_64+0x3f/0x90 [ 1636.390046] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1636.390433] RIP: 0033:0x7fe8755a0b19 [ 1636.390710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1636.392019] RSP: 002b:00007fe872b16188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1636.392582] RAX: ffffffffffffffda RBX: 00007fe8756b3f60 RCX: 00007fe8755a0b19 [ 1636.393108] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1636.393622] RBP: 00007fe872b161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1636.394147] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001 [ 1636.394665] R13: 00007ffc65b12d1f R14: 00007fe872b16300 R15: 0000000000022000 [ 1636.395208] 16:15:21 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 3) 16:15:21 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 2) 16:15:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000001600)='uid_map\x00') copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x8, r0, 0x0, 0x1f, 0x0) 16:15:21 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:15:21 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 1636.710681] FAULT_INJECTION: forcing a failure. [ 1636.710681] name failslab, interval 1, probability 0, space 0, times 0 [ 1636.711507] CPU: 0 PID: 12065 Comm: syz-executor.3 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1636.712056] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1636.712584] Call Trace: [ 1636.712765] [ 1636.712922] dump_stack_lvl+0xc1/0xf0 [ 1636.713191] should_fail_ex+0x4b4/0x5b0 [ 1636.713487] ? alloc_pipe_info+0x1e9/0x590 [ 1636.713778] should_failslab+0x9/0x20 [ 1636.714047] __kmem_cache_alloc_node+0x66/0x310 [ 1636.714375] ? alloc_pipe_info+0x1e9/0x590 [ 1636.714662] ? alloc_pipe_info+0x10e/0x590 [ 1636.714957] ? alloc_pipe_info+0x1e9/0x590 [ 1636.715247] __kmalloc+0x4d/0x160 [ 1636.715499] alloc_pipe_info+0x1e9/0x590 [ 1636.715784] splice_direct_to_actor+0x796/0x9d0 [ 1636.716113] ? __pfx_direct_splice_actor+0x10/0x10 [ 1636.716442] ? inode_security+0x105/0x140 [ 1636.716725] ? avc_policy_seqno+0x9/0x20 [ 1636.717006] ? selinux_file_permission+0x9c/0x520 [ 1636.717333] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1636.717687] ? security_file_permission+0xb5/0xe0 [ 1636.718027] do_splice_direct+0x1bb/0x290 [ 1636.718310] ? __pfx_do_splice_direct+0x10/0x10 [ 1636.718630] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1636.718981] ? lock_is_held_type+0x9f/0x120 [ 1636.719293] do_sendfile+0xb67/0x1300 [ 1636.719602] ? __pfx_do_sendfile+0x10/0x10 [ 1636.719952] __x64_sys_sendfile64+0x1d5/0x210 [ 1636.720313] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1636.720695] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1636.721089] do_syscall_64+0x3f/0x90 [ 1636.721377] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1636.721762] RIP: 0033:0x7f83ebaa5b19 [ 1636.722041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1636.723349] RSP: 002b:00007f83e901b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1636.723925] RAX: ffffffffffffffda RBX: 00007f83ebbb8f60 RCX: 00007f83ebaa5b19 [ 1636.724433] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1636.724950] RBP: 00007f83e901b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1636.725461] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001 [ 1636.725977] R13: 00007ffce6e20e1f R14: 00007f83e901b300 R15: 0000000000022000 [ 1636.726515] 16:15:36 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:15:36 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:15:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000001600)='uid_map\x00') copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x8, r0, 0x0, 0x1f, 0x0) 16:15:36 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 4) 16:15:36 executing program 7: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) 16:15:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:15:36 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:15:36 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:15:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000001600)='uid_map\x00') copy_file_range(r0, 0x0, r0, 0x0, 0x1f, 0x0) 16:15:36 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 5) 16:15:36 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:15:36 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:15:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591df5d2797f01c245a53cbaac38beb67ec8543ee1fc76da389a2f521469702a87c3b5af9d215c17efc51425aad48737389caf265ffa46a739ff985065b4478c2cc0a581cd02471cb80059fcfbf9b2b1b1a6f164a6db4cc9c4b3e85bea642af74ef26797a542eadecdecba86ac5a23f879037c5bcb5d47201eca38085fd91832076149d22dc23f"], 0x14}}, 0x0) [ 1652.187622] FAULT_INJECTION: forcing a failure. [ 1652.187622] name failslab, interval 1, probability 0, space 0, times 0 [ 1652.189361] CPU: 0 PID: 12110 Comm: syz-executor.3 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1652.190417] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1652.191435] Call Trace: [ 1652.191792] [ 1652.192118] dump_stack_lvl+0xc1/0xf0 [ 1652.192661] should_fail_ex+0x4b4/0x5b0 [ 1652.193241] ? iter_file_splice_write+0x162/0xcb0 [ 1652.193890] should_failslab+0x9/0x20 [ 1652.194428] __kmem_cache_alloc_node+0x66/0x310 [ 1652.195070] ? iter_file_splice_write+0x162/0xcb0 [ 1652.195767] ? iter_file_splice_write+0x162/0xcb0 [ 1652.196417] __kmalloc+0x4d/0x160 [ 1652.196933] iter_file_splice_write+0x162/0xcb0 [ 1652.197608] ? lock_is_held_type+0x9f/0x120 [ 1652.198251] ? touch_atime+0x2da/0x590 [ 1652.198828] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1652.199591] ? security_file_permission+0xb5/0xe0 [ 1652.200266] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1652.200976] direct_splice_actor+0x119/0x180 [ 1652.201596] splice_direct_to_actor+0x349/0x9d0 [ 1652.202265] ? __pfx_direct_splice_actor+0x10/0x10 [ 1652.202937] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1652.203597] ? security_file_permission+0xb5/0xe0 [ 1652.204325] do_splice_direct+0x1bb/0x290 [ 1652.204923] ? __pfx_do_splice_direct+0x10/0x10 [ 1652.205598] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1652.206291] ? lock_is_held_type+0x9f/0x120 [ 1652.206911] do_sendfile+0xb67/0x1300 [ 1652.207494] ? __pfx_do_sendfile+0x10/0x10 [ 1652.208150] __x64_sys_sendfile64+0x1d5/0x210 [ 1652.208771] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1652.209497] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1652.210195] do_syscall_64+0x3f/0x90 [ 1652.210743] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1652.211413] RIP: 0033:0x7f83ebaa5b19 [ 1652.211919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1652.214060] RSP: 002b:00007f83e8ffa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1652.215060] RAX: ffffffffffffffda RBX: 00007f83ebbb9020 RCX: 00007f83ebaa5b19 [ 1652.215992] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1652.216972] RBP: 00007f83e8ffa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1652.217919] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001 [ 1652.218835] R13: 00007ffce6e20e1f R14: 00007f83e8ffa300 R15: 0000000000022000 [ 1652.219840] 16:15:49 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:15:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000001600)='uid_map\x00') copy_file_range(r0, 0x0, r0, 0x0, 0x1f, 0x0) 16:15:49 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x88502, 0x2d56153a2bf71e5e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:15:49 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x80, 0x110) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) openat(r3, &(0x7f0000000080)='./file1\x00', 0x20000, 0x180) 16:15:49 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:15:49 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 6) 16:15:49 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:15:49 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) 16:15:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000001600)='uid_map\x00') copy_file_range(r0, 0x0, r0, 0x0, 0x1f, 0x0) 16:15:49 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:15:49 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:15:49 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 7) 16:15:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000001600)='uid_map\x00') copy_file_range(r0, &(0x7f0000000000), r0, 0x0, 0x1f, 0x0) 16:15:49 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:15:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000001600)='uid_map\x00') copy_file_range(r0, &(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x1f, 0x0) 16:15:50 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:15:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) [ 1665.433605] FAULT_INJECTION: forcing a failure. [ 1665.433605] name failslab, interval 1, probability 0, space 0, times 0 [ 1665.435473] CPU: 1 PID: 12156 Comm: syz-executor.3 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1665.436478] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1665.437466] Call Trace: [ 1665.437794] [ 1665.438088] dump_stack_lvl+0xc1/0xf0 [ 1665.438589] should_fail_ex+0x4b4/0x5b0 [ 1665.439118] ? iter_file_splice_write+0x162/0xcb0 [ 1665.439735] should_failslab+0x9/0x20 [ 1665.440228] __kmem_cache_alloc_node+0x66/0x310 [ 1665.440863] ? iter_file_splice_write+0x162/0xcb0 [ 1665.441478] ? iter_file_splice_write+0x162/0xcb0 [ 1665.442096] __kmalloc+0x4d/0x160 [ 1665.442557] iter_file_splice_write+0x162/0xcb0 [ 1665.443166] ? lock_is_held_type+0x9f/0x120 [ 1665.443732] ? touch_atime+0x2da/0x590 [ 1665.444261] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1665.444941] ? security_file_permission+0xb5/0xe0 [ 1665.445565] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1665.446221] direct_splice_actor+0x119/0x180 [ 1665.446798] splice_direct_to_actor+0x349/0x9d0 [ 1665.447395] ? __pfx_direct_splice_actor+0x10/0x10 [ 1665.448021] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1665.448675] ? security_file_permission+0xb5/0xe0 [ 1665.449298] do_splice_direct+0x1bb/0x290 [ 1665.449831] ? __pfx_do_splice_direct+0x10/0x10 [ 1665.450431] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1665.451161] ? lock_is_held_type+0x9f/0x120 [ 1665.451808] do_sendfile+0xb67/0x1300 [ 1665.452411] ? __pfx_do_sendfile+0x10/0x10 [ 1665.453060] __x64_sys_sendfile64+0x1d5/0x210 [ 1665.453726] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1665.454464] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1665.455220] do_syscall_64+0x3f/0x90 [ 1665.455768] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1665.456527] RIP: 0033:0x7f83ebaa5b19 [ 1665.457067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1665.459527] RSP: 002b:00007f83e8ffa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1665.460577] RAX: ffffffffffffffda RBX: 00007f83ebbb9020 RCX: 00007f83ebaa5b19 [ 1665.461558] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1665.462534] RBP: 00007f83e8ffa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1665.463510] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001 [ 1665.464500] R13: 00007ffce6e20e1f R14: 00007f83e8ffa300 R15: 0000000000022000 [ 1665.465509] 16:15:50 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') fspick(r0, &(0x7f0000000000)='./file1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @private, @remote}, &(0x7f00000000c0)=0xc) sendmsg$nl_xfrm(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000600)=@expire={0x210, 0x18, 0x800, 0x70bd26, 0x25dfdbfc, {{{@in=@multicast2, @in6=@loopback, 0x4e20, 0x9aa8, 0x4e20, 0x1, 0x0, 0x100, 0x20, 0x67, r3, 0xee01}, {@in=@broadcast, 0x4d5, 0x32}, @in6=@private0, {0x5, 0x10001, 0x3ff, 0x5, 0x0, 0x53dd78b2, 0xfffffffffffffffc, 0x200}, {0x2d, 0x100, 0x401, 0x2}, {0x8000, 0x3, 0x3}, 0x70bd2d, 0x3505, 0x2, 0x3, 0x3c, 0x80}, 0x8}, [@algo_comp={0x116, 0x3, {{'deflate\x00'}, 0x670, "4a042b4704d7000298309b06c572d16d319b3259335053a3f9dc3725dfb15297098139dd78bd7906e1630daaf806ac97961e31c5df04af514d132792ac7da7d58900b46652e2718bd98d49645396a24342384a0bddc19acfd072ddf07e8d4f5e7b1b7b22894b12d8268f0d395edd929a4830ed5efcc45ae8ca343d8b58226dfacd2076d93fbadac6fc9074ffbf2121a86dd9482ef76fe70c8e16a55575017e86806cd017fe554b1c74cee512de6b2b7fce032fdfa5fa31447625d8a088ef07375d14fb1d302ea9e90f729ac24753"}}]}, 0x210}}, 0x90) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x3110, r2, 0x39dd4000) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) getdents64(r4, &(0x7f0000000240)=""/133, 0x85) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r6, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r5, 0x0, 0xfffffdef) 16:15:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000001600)='uid_map\x00') copy_file_range(r0, &(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x1f, 0x0) 16:15:50 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r0, &(0x7f0000000200)='E', 0x1) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x20000000) mkdir(&(0x7f0000000080)='./file1\x00', 0xa) 16:15:50 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:16:05 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:16:05 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 8) 16:16:05 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r3, 0x449, 0xfff, 0x3ff}) r4 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x10) r5 = openat(r4, &(0x7f00000000c0)='./file1/file0\x00', 0x220040, 0x10c) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r6, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r5, 0x0, 0xfffffdef) 16:16:05 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) openat2(r3, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)={0x20400, 0x849c0cbfbedec04d, 0x1}, 0x18) sendfile(r0, r1, 0x0, 0xfffffdef) 16:16:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000001600)='uid_map\x00') copy_file_range(r0, &(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x1f, 0x0) 16:16:05 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:16:05 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) 16:16:05 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:16:05 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:16:06 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000001600)='uid_map\x00') copy_file_range(r0, &(0x7f0000000000), r0, 0x0, 0x0, 0x0) 16:16:06 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:16:06 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 9) 16:16:06 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:16:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:16:06 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) openat(r1, &(0x7f0000000380)='./file1\x00', 0x2, 0x81) pread64(r3, &(0x7f0000000240)=""/241, 0xf1, 0x8) tee(r0, r2, 0x55e5, 0xc) write(r2, &(0x7f0000000200)='E', 0x140000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/12, 0xc, 0x1, &(0x7f0000000140)=""/157, 0x9d}, &(0x7f00000000c0)=0x40) sendfile(r0, r1, 0x0, 0xfffffdef) 16:16:06 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 1681.811568] FAULT_INJECTION: forcing a failure. [ 1681.811568] name failslab, interval 1, probability 0, space 0, times 0 [ 1681.812330] CPU: 0 PID: 12224 Comm: syz-executor.3 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1681.812852] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1681.813366] Call Trace: [ 1681.813539] [ 1681.813695] dump_stack_lvl+0xc1/0xf0 [ 1681.813970] should_fail_ex+0x4b4/0x5b0 [ 1681.814648] ? iter_file_splice_write+0x162/0xcb0 [ 1681.815340] should_failslab+0x9/0x20 [ 1681.815884] __kmem_cache_alloc_node+0x66/0x310 [ 1681.816553] ? ktime_get_coarse_real_ts64+0x15d/0x190 [ 1681.817277] ? iter_file_splice_write+0x162/0xcb0 [ 1681.817947] ? iter_file_splice_write+0x162/0xcb0 [ 1681.818602] __kmalloc+0x4d/0x160 [ 1681.819102] iter_file_splice_write+0x162/0xcb0 [ 1681.819748] ? splice_folio_into_pipe+0x496/0x580 [ 1681.820416] ? touch_atime+0x95/0x590 [ 1681.820988] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1681.821732] ? security_file_permission+0xb5/0xe0 [ 1681.822440] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1681.823184] direct_splice_actor+0x119/0x180 [ 1681.823848] splice_direct_to_actor+0x349/0x9d0 [ 1681.824568] ? __pfx_direct_splice_actor+0x10/0x10 [ 1681.825297] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1681.826055] ? security_file_permission+0xb5/0xe0 [ 1681.826782] do_splice_direct+0x1bb/0x290 [ 1681.827378] ? __pfx_do_splice_direct+0x10/0x10 [ 1681.828068] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1681.828838] ? lock_is_held_type+0x9f/0x120 [ 1681.829490] do_sendfile+0xb67/0x1300 [ 1681.830072] ? __pfx_do_sendfile+0x10/0x10 [ 1681.830723] __x64_sys_sendfile64+0x1d5/0x210 [ 1681.831402] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1681.832159] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1681.832941] do_syscall_64+0x3f/0x90 [ 1681.833513] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1681.834268] RIP: 0033:0x7f83ebaa5b19 [ 1681.834825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1681.837376] RSP: 002b:00007f83e8ffa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1681.838452] RAX: ffffffffffffffda RBX: 00007f83ebbb9020 RCX: 00007f83ebaa5b19 [ 1681.839509] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1681.840683] RBP: 00007f83e8ffa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1681.841754] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001 [ 1681.842910] R13: 00007ffce6e20e1f R14: 00007f83e8ffa300 R15: 0000000000022000 [ 1681.843851] 16:16:06 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:16:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:16:06 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 10) 16:16:19 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) 16:16:19 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(r2, &(0x7f00000001c0)='./file1\x00', 0x270622, 0x40) write(r1, &(0x7f0000000200)='E', 0x140000) mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x188) lsetxattr$security_selinux(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:printer_device_t:s0\x00', 0x26, 0x1) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x400200, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r5, &(0x7f0000000200)='E', 0x140000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) sendfile(r6, r3, &(0x7f0000000180)=0x4, 0x8000) sendfile(r0, r4, 0x0, 0xfffffdef) 16:16:19 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x0, @dev={0xac, 0x14, 0x14, 0x25}, 0x4e21, 0x3, 'wrr\x00', 0x9, 0xffffffff, 0x73}, 0x2c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r2, 0x0, 0xfffffdef) 16:16:19 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 11) 16:16:19 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:16:19 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x80, 0x110) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) openat(r3, &(0x7f0000000080)='./file1\x00', 0x20000, 0x180) 16:16:19 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:16:19 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) [ 1695.104225] audit: type=1400 audit(1692375379.895:15): avc: denied { relabelto } for pid=12245 comm="syz-executor.6" name="file1" dev="tmpfs" ino=2 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:printer_device_t:s0 tclass=file permissive=1 [ 1695.182483] FAULT_INJECTION: forcing a failure. [ 1695.182483] name failslab, interval 1, probability 0, space 0, times 0 [ 1695.183290] CPU: 1 PID: 12254 Comm: syz-executor.3 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1695.183826] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1695.184372] Call Trace: [ 1695.184556] [ 1695.184730] dump_stack_lvl+0xc1/0xf0 [ 1695.185138] should_fail_ex+0x4b4/0x5b0 [ 1695.185442] ? iter_file_splice_write+0x162/0xcb0 [ 1695.185799] should_failslab+0x9/0x20 [ 1695.186086] __kmem_cache_alloc_node+0x66/0x310 [ 1695.186426] ? ktime_get_coarse_real_ts64+0x15d/0x190 [ 1695.186809] ? iter_file_splice_write+0x162/0xcb0 [ 1695.187158] ? iter_file_splice_write+0x162/0xcb0 [ 1695.187504] __kmalloc+0x4d/0x160 [ 1695.187770] iter_file_splice_write+0x162/0xcb0 [ 1695.188112] ? splice_folio_into_pipe+0x496/0x580 [ 1695.188456] ? touch_atime+0x95/0x590 [ 1695.188767] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1695.189161] ? security_file_permission+0xb5/0xe0 [ 1695.189523] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1695.189893] direct_splice_actor+0x119/0x180 [ 1695.190219] splice_direct_to_actor+0x349/0x9d0 [ 1695.190564] ? __pfx_direct_splice_actor+0x10/0x10 [ 1695.190937] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1695.191320] ? security_file_permission+0xb5/0xe0 [ 1695.191699] do_splice_direct+0x1bb/0x290 [ 1695.191996] ? __pfx_do_splice_direct+0x10/0x10 [ 1695.192354] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1695.192721] ? lock_is_held_type+0x9f/0x120 [ 1695.193052] do_sendfile+0xb67/0x1300 [ 1695.193344] ? __pfx_do_sendfile+0x10/0x10 [ 1695.193669] __x64_sys_sendfile64+0x1d5/0x210 [ 1695.194011] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1695.194390] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1695.194788] do_syscall_64+0x3f/0x90 [ 1695.195095] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1695.195485] RIP: 0033:0x7f83ebaa5b19 [ 1695.195766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1695.197045] RSP: 002b:00007f83e901b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1695.197560] RAX: ffffffffffffffda RBX: 00007f83ebbb8f60 RCX: 00007f83ebaa5b19 [ 1695.198066] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1695.198577] RBP: 00007f83e901b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1695.199086] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 1695.199613] R13: 00007ffce6e20e1f R14: 00007f83e901b300 R15: 0000000000022000 [ 1695.200149] 16:16:20 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x3, 0x280000) write(0xffffffffffffffff, &(0x7f0000000140)='E', 0x1) sendfile(r0, r1, 0x0, 0xfffffdef) 16:16:20 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:16:20 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:16:32 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 12) 16:16:32 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, 0x95) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:16:32 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:16:32 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40000, 0x24) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r5, &(0x7f0000000000)=""/55, 0x37, 0x600) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0xf7, 0x7f, 0x1, 0x0, 0x0, 0x8, 0x100000, 0x58e6e23d91a505ab, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xbcd, 0x1, @perf_config_ext={0x471, 0x3f}, 0x12, 0x80000001, 0x8, 0x2, 0x5, 0x9, 0x5242, 0x0, 0x8, 0x0, 0x5}, r6, 0x5, r4, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="cc0000001b0001000000000000000000fe880000000000000300"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015000000000000000000"], 0xcc}}, 0x0) fstatfs(r7, &(0x7f0000000600)=""/4096) write$cgroup_pid(r3, &(0x7f0000000080)=r6, 0x12) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:16:32 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:16:32 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:16:32 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x80, 0x110) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) openat(r3, &(0x7f0000000080)='./file1\x00', 0x20000, 0x180) 16:16:32 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:16:33 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) (fail_nth: 1) 16:16:33 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 13) 16:16:33 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:16:33 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) [ 1708.500927] FAULT_INJECTION: forcing a failure. [ 1708.500927] name failslab, interval 1, probability 0, space 0, times 0 [ 1708.502224] CPU: 1 PID: 12300 Comm: syz-executor.7 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1708.502967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1708.503691] Call Trace: [ 1708.503943] [ 1708.504161] dump_stack_lvl+0xc1/0xf0 [ 1708.504530] should_fail_ex+0x4b4/0x5b0 [ 1708.504933] should_failslab+0x9/0x20 [ 1708.505301] kmem_cache_alloc_lru+0x7a/0x680 [ 1708.505732] ? selinux_socket_create+0x9b/0x5b0 [ 1708.506167] ? sock_alloc_inode+0x27/0x1d0 [ 1708.506575] ? sock_alloc_inode+0x27/0x1d0 [ 1708.506971] sock_alloc_inode+0x27/0x1d0 [ 1708.507355] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1708.507792] alloc_inode+0x63/0x240 [ 1708.508153] new_inode_pseudo+0x17/0x80 [ 1708.508539] sock_alloc+0x40/0x270 [ 1708.508920] __sock_create+0xc1/0x820 [ 1708.509294] __sys_socket+0x148/0x260 [ 1708.509665] ? __pfx___sys_socket+0x10/0x10 [ 1708.510089] ? ksys_write+0x19e/0x250 [ 1708.510458] ? __pfx_ksys_write+0x10/0x10 [ 1708.510870] __x64_sys_socket+0x73/0xb0 [ 1708.511249] ? syscall_enter_from_user_mode+0x21/0x50 [ 1708.511748] do_syscall_64+0x3f/0x90 [ 1708.512105] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1708.512592] RIP: 0033:0x7f4d75dbdb19 [ 1708.512957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1708.514547] RSP: 002b:00007f4d73333188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1708.515227] RAX: ffffffffffffffda RBX: 00007f4d75ed0f60 RCX: 00007f4d75dbdb19 [ 1708.515864] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 1708.516500] RBP: 00007f4d733331d0 R08: 0000000000000000 R09: 0000000000000000 [ 1708.517139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1708.517764] R13: 00007fff9d8d04af R14: 00007f4d73333300 R15: 0000000000022000 [ 1708.518420] [ 1708.518938] socket: no more sockets 16:16:33 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 1708.655548] FAULT_INJECTION: forcing a failure. [ 1708.655548] name failslab, interval 1, probability 0, space 0, times 0 [ 1708.656805] CPU: 1 PID: 12304 Comm: syz-executor.3 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1708.657486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1708.658253] Call Trace: [ 1708.658478] [ 1708.658675] dump_stack_lvl+0xc1/0xf0 [ 1708.659014] should_fail_ex+0x4b4/0x5b0 [ 1708.659372] ? iter_file_splice_write+0x162/0xcb0 [ 1708.659790] should_failslab+0x9/0x20 [ 1708.660125] __kmem_cache_alloc_node+0x66/0x310 [ 1708.660530] ? ktime_get_coarse_real_ts64+0x15d/0x190 [ 1708.660985] ? iter_file_splice_write+0x162/0xcb0 [ 1708.661396] ? iter_file_splice_write+0x162/0xcb0 [ 1708.661851] __kmalloc+0x4d/0x160 [ 1708.662227] iter_file_splice_write+0x162/0xcb0 [ 1708.662670] ? splice_folio_into_pipe+0x496/0x580 [ 1708.663073] ? touch_atime+0x95/0x590 [ 1708.663400] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1708.663833] ? security_file_permission+0xb5/0xe0 [ 1708.664239] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1708.664662] direct_splice_actor+0x119/0x180 [ 1708.665036] splice_direct_to_actor+0x349/0x9d0 [ 1708.665428] ? __pfx_direct_splice_actor+0x10/0x10 [ 1708.665829] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1708.666252] ? security_file_permission+0xb5/0xe0 [ 1708.666650] do_splice_direct+0x1bb/0x290 [ 1708.667000] ? __pfx_do_splice_direct+0x10/0x10 [ 1708.667381] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1708.667812] ? lock_is_held_type+0x9f/0x120 [ 1708.668182] do_sendfile+0xb67/0x1300 [ 1708.668516] ? __pfx_do_sendfile+0x10/0x10 [ 1708.668881] __x64_sys_sendfile64+0x1d5/0x210 [ 1708.669264] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1708.669678] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1708.670121] do_syscall_64+0x3f/0x90 [ 1708.670429] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1708.670853] RIP: 0033:0x7f83ebaa5b19 [ 1708.671155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1708.672536] RSP: 002b:00007f83e901b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1708.673167] RAX: ffffffffffffffda RBX: 00007f83ebbb8f60 RCX: 00007f83ebaa5b19 [ 1708.673747] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1708.674323] RBP: 00007f83e901b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1708.674903] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 1708.675497] R13: 00007ffce6e20e1f R14: 00007f83e901b300 R15: 0000000000022000 [ 1708.676088] 16:16:48 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) (fail_nth: 2) 16:16:48 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x80, 0x110) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) openat(r3, &(0x7f0000000080)='./file1\x00', 0x20000, 0x180) 16:16:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:16:48 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:16:48 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 14) 16:16:48 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:16:48 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) openat(r0, &(0x7f0000000000)='./file1\x00', 0x418002, 0x12) chdir(&(0x7f0000000340)='./file1\x00') rmdir(&(0x7f0000000080)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r1, 0x0, 0xa7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r2, 0x0, 0xfffffdef) 16:16:48 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) mount_setattr(r2, &(0x7f0000000000)='./file1\x00', 0x1000, &(0x7f0000000140)={0x84, 0x8a, 0x320000, {r3}}, 0x20) fcntl$setlease(r0, 0x400, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r4 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x842, 0x0) r5 = dup(r3) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f0000000240)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x90080, 0x0) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, &(0x7f00000001c0)) write(r6, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r4, 0x0, 0xfffffdef) 16:16:49 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:16:49 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:16:49 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 15) 16:16:49 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x70) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f00000000c0)='./binderfs2/binder-control\x00', &(0x7f0000000140)='./file1\x00', r2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) write(r5, &(0x7f0000000200)="4500c3955d81f8f150593b8f800906000500000000000000d3b27af9a293f1cbdabf434d6a4805690dc3dd83d1876c40bfcc79d16ee8725f07000000d17e40b251a0017e5031640000000048460b6e0209e6f1334ae2874eae9bd02c208b71a630041c9e22ca1de6affed683a6a8dbcaf1eab6bc4898f60ff824aace0fd24c8a342232bb4883f793e0af31554d759242b58776daea04", 0x96) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x333342536a58b295, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r6, 0x0, 0x1, 0x8, 0x8}) sendfile(r1, r2, 0x0, 0xfffffdef) 16:16:49 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) [ 1724.701498] FAULT_INJECTION: forcing a failure. [ 1724.701498] name failslab, interval 1, probability 0, space 0, times 0 [ 1724.702499] CPU: 0 PID: 12348 Comm: syz-executor.3 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1724.703035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1724.703576] Call Trace: [ 1724.703762] [ 1724.703925] dump_stack_lvl+0xc1/0xf0 [ 1724.704202] should_fail_ex+0x4b4/0x5b0 [ 1724.704496] ? iter_file_splice_write+0x162/0xcb0 [ 1724.704836] should_failslab+0x9/0x20 [ 1724.705117] __kmem_cache_alloc_node+0x66/0x310 [ 1724.705448] ? ktime_get_coarse_real_ts64+0x15d/0x190 [ 1724.705819] ? iter_file_splice_write+0x162/0xcb0 [ 1724.706165] ? iter_file_splice_write+0x162/0xcb0 [ 1724.706497] __kmalloc+0x4d/0x160 [ 1724.706756] iter_file_splice_write+0x162/0xcb0 [ 1724.707081] ? splice_folio_into_pipe+0x496/0x580 [ 1724.707427] ? touch_atime+0x95/0x590 [ 1724.707727] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1724.708238] ? security_file_permission+0xb5/0xe0 [ 1724.708589] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1724.708941] direct_splice_actor+0x119/0x180 [ 1724.709279] splice_direct_to_actor+0x349/0x9d0 [ 1724.709608] ? __pfx_direct_splice_actor+0x10/0x10 [ 1724.709953] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1724.710313] ? security_file_permission+0xb5/0xe0 [ 1724.710657] do_splice_direct+0x1bb/0x290 [ 1724.710951] ? __pfx_do_splice_direct+0x10/0x10 [ 1724.711278] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1724.711642] ? lock_is_held_type+0x9f/0x120 [ 1724.711956] do_sendfile+0xb67/0x1300 [ 1724.712241] ? __pfx_do_sendfile+0x10/0x10 [ 1724.712542] __x64_sys_sendfile64+0x1d5/0x210 [ 1724.712868] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1724.713223] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1724.713596] do_syscall_64+0x3f/0x90 [ 1724.713857] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1724.714222] RIP: 0033:0x7f83ebaa5b19 [ 1724.714475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1724.715683] RSP: 002b:00007f83e901b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1724.716182] RAX: ffffffffffffffda RBX: 00007f83ebbb8f60 RCX: 00007f83ebaa5b19 [ 1724.716649] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1724.717119] RBP: 00007f83e901b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1724.717587] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 1724.718052] R13: 00007ffce6e20e1f R14: 00007f83e901b300 R15: 0000000000022000 [ 1724.718541] 16:16:49 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) (fail_nth: 3) 16:16:49 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:16:49 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 16) 16:16:49 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:16:49 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x80, 0x110) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) 16:16:49 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 1725.129554] FAULT_INJECTION: forcing a failure. [ 1725.129554] name failslab, interval 1, probability 0, space 0, times 0 [ 1725.130470] CPU: 0 PID: 12358 Comm: syz-executor.7 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1725.131097] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1725.131713] Call Trace: [ 1725.131935] [ 1725.132135] dump_stack_lvl+0xc1/0xf0 [ 1725.132476] should_fail_ex+0x4b4/0x5b0 [ 1725.132853] ? security_inode_alloc+0x38/0x160 [ 1725.133244] should_failslab+0x9/0x20 [ 1725.133580] kmem_cache_alloc+0x61/0x390 [ 1725.133919] security_inode_alloc+0x38/0x160 [ 1725.134260] inode_init_always+0xbb2/0xea0 [ 1725.134585] alloc_inode+0x84/0x240 [ 1725.134872] new_inode_pseudo+0x17/0x80 [ 1725.135172] sock_alloc+0x40/0x270 [ 1725.135446] __sock_create+0xc1/0x820 [ 1725.135746] __sys_socket+0x148/0x260 [ 1725.136035] ? __pfx___sys_socket+0x10/0x10 [ 1725.136359] ? ksys_write+0x19e/0x250 [ 1725.136651] ? __pfx_ksys_write+0x10/0x10 [ 1725.136984] __x64_sys_socket+0x73/0xb0 [ 1725.137287] ? syscall_enter_from_user_mode+0x21/0x50 [ 1725.137677] do_syscall_64+0x3f/0x90 [ 1725.137958] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1725.138338] RIP: 0033:0x7f4d75dbdb19 [ 1725.138602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1725.139853] RSP: 002b:00007f4d73333188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1725.140403] RAX: ffffffffffffffda RBX: 00007f4d75ed0f60 RCX: 00007f4d75dbdb19 [ 1725.140930] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 1725.141446] RBP: 00007f4d733331d0 R08: 0000000000000000 R09: 0000000000000000 [ 1725.141956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1725.142468] R13: 00007fff9d8d04af R14: 00007f4d73333300 R15: 0000000000022000 [ 1725.143005] [ 1725.143274] socket: no more sockets 16:16:50 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x400, 0x12b) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:16:50 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) [ 1725.458896] FAULT_INJECTION: forcing a failure. [ 1725.458896] name failslab, interval 1, probability 0, space 0, times 0 [ 1725.459687] CPU: 0 PID: 12372 Comm: syz-executor.3 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1725.460269] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1725.460834] Call Trace: [ 1725.461046] [ 1725.461218] dump_stack_lvl+0xc1/0xf0 [ 1725.461507] should_fail_ex+0x4b4/0x5b0 [ 1725.461825] ? iter_file_splice_write+0x162/0xcb0 [ 1725.462194] should_failslab+0x9/0x20 [ 1725.462489] __kmem_cache_alloc_node+0x66/0x310 [ 1725.462846] ? iter_file_splice_write+0x162/0xcb0 [ 1725.463213] ? iter_file_splice_write+0x162/0xcb0 [ 1725.463571] __kmalloc+0x4d/0x160 [ 1725.463844] iter_file_splice_write+0x162/0xcb0 [ 1725.464209] ? lock_is_held_type+0x9f/0x120 [ 1725.464525] ? touch_atime+0x2da/0x590 [ 1725.464835] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1725.465233] ? security_file_permission+0xb5/0xe0 [ 1725.465602] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1725.465971] direct_splice_actor+0x119/0x180 [ 1725.466306] splice_direct_to_actor+0x349/0x9d0 [ 1725.466632] ? __pfx_direct_splice_actor+0x10/0x10 [ 1725.467008] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1725.467366] ? security_file_permission+0xb5/0xe0 [ 1725.467739] do_splice_direct+0x1bb/0x290 [ 1725.468038] ? __pfx_do_splice_direct+0x10/0x10 [ 1725.468392] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1725.468756] ? lock_is_held_type+0x9f/0x120 [ 1725.469108] do_sendfile+0xb67/0x1300 [ 1725.469409] ? __pfx_do_sendfile+0x10/0x10 [ 1725.469735] __x64_sys_sendfile64+0x1d5/0x210 [ 1725.470090] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1725.470467] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1725.470865] do_syscall_64+0x3f/0x90 [ 1725.471152] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1725.471535] RIP: 0033:0x7f83ebaa5b19 [ 1725.471810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1725.473014] RSP: 002b:00007f83e8ffa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1725.473555] RAX: ffffffffffffffda RBX: 00007f83ebbb9020 RCX: 00007f83ebaa5b19 [ 1725.474037] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1725.474547] RBP: 00007f83e8ffa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1725.475044] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 1725.475546] R13: 00007ffce6e20e1f R14: 00007f83e8ffa300 R15: 0000000000022000 [ 1725.476067] 16:16:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) (fail_nth: 4) 16:16:50 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:16:50 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 17) [ 1726.024764] FAULT_INJECTION: forcing a failure. [ 1726.024764] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.026184] CPU: 1 PID: 12386 Comm: syz-executor.3 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1726.026977] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1726.027762] Call Trace: [ 1726.028026] [ 1726.028262] dump_stack_lvl+0xc1/0xf0 [ 1726.028658] should_fail_ex+0x4b4/0x5b0 [ 1726.029091] ? iter_file_splice_write+0x162/0xcb0 [ 1726.029582] should_failslab+0x9/0x20 [ 1726.029982] __kmem_cache_alloc_node+0x66/0x310 [ 1726.030469] ? iter_file_splice_write+0x162/0xcb0 [ 1726.030962] ? iter_file_splice_write+0x162/0xcb0 [ 1726.031446] __kmalloc+0x4d/0x160 [ 1726.031816] iter_file_splice_write+0x162/0xcb0 [ 1726.032419] ? lock_is_held_type+0x9f/0x120 [ 1726.032955] ? touch_atime+0x2da/0x590 [ 1726.033487] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1726.034027] ? security_file_permission+0xb5/0xe0 [ 1726.034526] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1726.035046] direct_splice_actor+0x119/0x180 [ 1726.035497] splice_direct_to_actor+0x349/0x9d0 [ 1726.035973] ? __pfx_direct_splice_actor+0x10/0x10 [ 1726.036477] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1726.037004] ? security_file_permission+0xb5/0xe0 [ 1726.037506] do_splice_direct+0x1bb/0x290 [ 1726.037931] ? __pfx_do_splice_direct+0x10/0x10 [ 1726.038401] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1726.038926] ? lock_is_held_type+0x9f/0x120 [ 1726.039378] do_sendfile+0xb67/0x1300 [ 1726.039786] ? __pfx_do_sendfile+0x10/0x10 [ 1726.040231] __x64_sys_sendfile64+0x1d5/0x210 [ 1726.040702] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1726.041239] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1726.041774] do_syscall_64+0x3f/0x90 [ 1726.042155] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1726.042675] RIP: 0033:0x7f83ebaa5b19 [ 1726.043049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1726.044747] RSP: 002b:00007f83e901b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1726.045480] RAX: ffffffffffffffda RBX: 00007f83ebbb8f60 RCX: 00007f83ebaa5b19 [ 1726.046161] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1726.046847] RBP: 00007f83e901b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1726.047526] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 1726.048203] R13: 00007ffce6e20e1f R14: 00007f83e901b300 R15: 0000000000022000 [ 1726.048908] 16:17:06 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) (fail_nth: 5) 16:17:06 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:17:06 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) r2 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000005c0)='./file1\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYBLOB="3a3778d2693d1a77fc896f7063d962c35ff9dfbb4b787aef6707142a6e37df", @ANYRESOCT=0x0, @ANYRES64, @ANYRESOCT, @ANYRESHEX=r0, @ANYRES32=r1]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) fcntl$dupfd(r3, 0x0, r1) chdir(&(0x7f0000000340)='./file1\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) sendfile(r5, r2, 0x0, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r7, &(0x7f0000000200)='E', 0x140000) sendfile(r4, r6, 0x0, 0xfffffdef) 16:17:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:17:06 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:17:06 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x80, 0x110) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) 16:17:06 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 18) 16:17:06 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0x2, 0xa5f) sendfile(r1, r2, 0x0, 0xfffffdef) [ 1742.063773] FAULT_INJECTION: forcing a failure. [ 1742.063773] name failslab, interval 1, probability 0, space 0, times 0 [ 1742.065494] CPU: 1 PID: 12402 Comm: syz-executor.7 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1742.066543] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1742.067574] Call Trace: [ 1742.067920] [ 1742.068226] dump_stack_lvl+0xc1/0xf0 [ 1742.068748] should_fail_ex+0x4b4/0x5b0 [ 1742.069325] ? inet6_create+0xcce/0x1110 [ 1742.069877] should_failslab+0x9/0x20 [ 1742.070399] __kmem_cache_alloc_node+0x66/0x310 [ 1742.071030] ? __request_module+0x271/0x600 [ 1742.071613] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1742.072318] ? inet6_create+0xcce/0x1110 [ 1742.072885] kmalloc_trace+0x26/0xc0 [ 1742.073412] __request_module+0x271/0x600 [ 1742.073999] ? __pfx___request_module+0x10/0x10 [ 1742.074655] ? find_held_lock+0x2c/0x110 [ 1742.075214] ? lock_release+0x1e3/0x680 [ 1742.075772] ? __pfx_lock_release+0x10/0x10 [ 1742.076365] ? find_held_lock+0x2c/0x110 [ 1742.076935] inet6_create+0xcce/0x1110 [ 1742.077512] __sock_create+0x376/0x820 [ 1742.078066] __sys_socket+0x148/0x260 [ 1742.078592] ? __pfx___sys_socket+0x10/0x10 [ 1742.079162] ? ksys_write+0x19e/0x250 [ 1742.079702] ? __pfx_ksys_write+0x10/0x10 [ 1742.080290] __x64_sys_socket+0x73/0xb0 [ 1742.080834] ? syscall_enter_from_user_mode+0x21/0x50 [ 1742.081557] do_syscall_64+0x3f/0x90 [ 1742.082226] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1742.083030] RIP: 0033:0x7f4d75dbdb19 [ 1742.083540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1742.085903] RSP: 002b:00007f4d73333188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1742.086904] RAX: ffffffffffffffda RBX: 00007f4d75ed0f60 RCX: 00007f4d75dbdb19 [ 1742.087839] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 1742.088775] RBP: 00007f4d733331d0 R08: 0000000000000000 R09: 0000000000000000 [ 1742.089871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1742.090947] R13: 00007fff9d8d04af R14: 00007f4d73333300 R15: 0000000000022000 [ 1742.091905] [ 1742.129092] tmpfs: Unknown parameter '0xffffffffffffffff18446744073709551615:7xi' 16:17:07 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200), 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:17:07 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 19) [ 1742.889416] FAULT_INJECTION: forcing a failure. [ 1742.889416] name failslab, interval 1, probability 0, space 0, times 0 [ 1742.891656] CPU: 0 PID: 12423 Comm: syz-executor.3 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1742.892891] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1742.894124] Call Trace: [ 1742.894536] [ 1742.894906] dump_stack_lvl+0xc1/0xf0 [ 1742.895517] should_fail_ex+0x4b4/0x5b0 [ 1742.896176] ? iter_file_splice_write+0x162/0xcb0 [ 1742.896930] should_failslab+0x9/0x20 [ 1742.897583] __kmem_cache_alloc_node+0x66/0x310 [ 1742.898205] ? ktime_get_coarse_real_ts64+0x15d/0x190 [ 1742.898892] ? iter_file_splice_write+0x162/0xcb0 [ 1742.899532] ? iter_file_splice_write+0x162/0xcb0 [ 1742.900163] __kmalloc+0x4d/0x160 [ 1742.900640] iter_file_splice_write+0x162/0xcb0 [ 1742.901262] ? splice_folio_into_pipe+0x496/0x580 [ 1742.901902] ? touch_atime+0x95/0x590 [ 1742.902424] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1742.903116] ? security_file_permission+0xb5/0xe0 [ 1742.903823] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1742.904489] direct_splice_actor+0x119/0x180 [ 1742.905071] splice_direct_to_actor+0x349/0x9d0 [ 1742.905696] ? __pfx_direct_splice_actor+0x10/0x10 [ 1742.906341] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1742.907003] ? security_file_permission+0xb5/0xe0 [ 1742.907661] do_splice_direct+0x1bb/0x290 [ 1742.908203] ? __pfx_do_splice_direct+0x10/0x10 [ 1742.908814] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1742.909490] ? lock_is_held_type+0x9f/0x120 [ 1742.910084] do_sendfile+0xb67/0x1300 [ 1742.910621] ? __pfx_do_sendfile+0x10/0x10 [ 1742.911210] __x64_sys_sendfile64+0x1d5/0x210 [ 1742.911821] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1742.912488] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1742.913171] do_syscall_64+0x3f/0x90 [ 1742.913693] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1742.914357] RIP: 0033:0x7f83ebaa5b19 [ 1742.914834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1742.916987] RSP: 002b:00007f83e901b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1742.917929] RAX: ffffffffffffffda RBX: 00007f83ebbb8f60 RCX: 00007f83ebaa5b19 [ 1742.918791] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1742.919660] RBP: 00007f83e901b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1742.920535] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 1742.921412] R13: 00007ffce6e20e1f R14: 00007f83e901b300 R15: 0000000000022000 [ 1742.922333] [ 1742.985020] tmpfs: Unknown parameter '0xffffffffffffffff18446744073709551615:7xi' 16:17:22 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200), 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:17:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:17:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) (fail_nth: 6) 16:17:22 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x80, 0x110) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) 16:17:22 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:17:22 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x200000, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = getgid() setgroups(0x1, &(0x7f0000000000)=[r2]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000380)=ANY=[@ANYBLOB="01010000001800000043618a854b7c2cfac70afac2bfcb5bb6f6b5fb35dc43ed84d341940a2e975a47ee43092911a0ee72727a97fd853da7e22bcf45c1cc4bf1237755da5ff57e2fea4ecef1853976057a7d2f5cda4bd0ca8bece153321502ed8f579785667622ebb19926d9c764f303146fcdc02c4a544a6195fee2ee083483075155793af6993ec3af53fd2c3d1178db6e113a8700005f6a8dc220b5e60e5399c69ba9af6ea203b3c08e5f29b161634e520944e31543f2c4287540", @ANYRES32=r0, @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB='./file1\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) openat(r3, &(0x7f0000000000)='./file1\x00', 0x100, 0xc1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0xc4242, 0x11) sendfile(r1, r4, 0x0, 0xfffffdef) setgroups(0x1, &(0x7f0000000000)=[0x0]) r5 = getgid() setgroups(0x1, &(0x7f0000000000)=[r5]) r6 = getgid() setresgid(r6, 0x0, 0x0) setgroups(0x1, &(0x7f0000000000)=[r6]) setresgid(0x0, r5, r6) 16:17:22 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 20) 16:17:22 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) openat(r0, &(0x7f0000000140)='./file1\x00', 0x101080, 0x2) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) openat(r2, &(0x7f0000000180)='./file1\x00', 0x111000, 0x102) write(r3, &(0x7f0000000200)='E', 0x140000) lsetxattr$security_selinux(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:ld_so_t:s0\x00', 0x1d, 0x3f15fb52bb08e177) write$binfmt_script(r2, &(0x7f0000000600)={'#! ', './file1', [{0x20, 'system_u:object_r:ld_so_t:s0\x00'}, {0x20, '{~('}, {0x20, 'security.selinux\x00'}, {0x20, 'system_u:object_r:ld_so_t:s0\x00'}], 0xa, "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"}, 0x105d) sendfile(r1, r2, 0x0, 0xfffffdef) 16:17:22 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200), 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:17:23 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 21) 16:17:23 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:17:23 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) [ 1758.570307] tmpfs: Unknown parameter 'RuE' [ 1758.679254] FAULT_INJECTION: forcing a failure. [ 1758.679254] name failslab, interval 1, probability 0, space 0, times 0 [ 1758.681148] CPU: 0 PID: 12466 Comm: syz-executor.3 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1758.682241] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1758.683313] Call Trace: [ 1758.683664] [ 1758.683979] dump_stack_lvl+0xc1/0xf0 [ 1758.684516] should_fail_ex+0x4b4/0x5b0 [ 1758.685082] ? iter_file_splice_write+0x162/0xcb0 [ 1758.685736] should_failslab+0x9/0x20 [ 1758.686272] __kmem_cache_alloc_node+0x66/0x310 [ 1758.686918] ? ktime_get_coarse_real_ts64+0x15d/0x190 [ 1758.687627] ? iter_file_splice_write+0x162/0xcb0 [ 1758.688286] ? iter_file_splice_write+0x162/0xcb0 [ 1758.688947] __kmalloc+0x4d/0x160 [ 1758.689475] iter_file_splice_write+0x162/0xcb0 [ 1758.690117] ? splice_folio_into_pipe+0x496/0x580 [ 1758.690774] ? touch_atime+0x95/0x590 [ 1758.691323] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1758.692053] ? security_file_permission+0xb5/0xe0 [ 1758.692719] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1758.693432] direct_splice_actor+0x119/0x180 [ 1758.694041] splice_direct_to_actor+0x349/0x9d0 [ 1758.694685] ? __pfx_direct_splice_actor+0x10/0x10 [ 1758.695365] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1758.696056] ? security_file_permission+0xb5/0xe0 [ 1758.696727] do_splice_direct+0x1bb/0x290 [ 1758.697293] ? __pfx_do_splice_direct+0x10/0x10 [ 1758.697938] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1758.698640] ? lock_is_held_type+0x9f/0x120 [ 1758.699255] do_sendfile+0xb67/0x1300 [ 1758.699800] ? __pfx_do_sendfile+0x10/0x10 [ 1758.700399] __x64_sys_sendfile64+0x1d5/0x210 [ 1758.701026] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1758.701749] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1758.702474] do_syscall_64+0x3f/0x90 [ 1758.702992] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1758.703687] RIP: 0033:0x7f83ebaa5b19 [ 1758.704187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1758.706462] RSP: 002b:00007f83e8ffa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1758.707397] RAX: ffffffffffffffda RBX: 00007f83ebbb9020 RCX: 00007f83ebaa5b19 [ 1758.708277] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1758.709146] RBP: 00007f83e8ffa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1758.710017] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 1758.710900] R13: 00007ffce6e20e1f R14: 00007f83e8ffa300 R15: 0000000000022000 [ 1758.711811] 16:17:23 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) (fail_nth: 7) 16:17:23 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:17:23 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x1}}, './file1\x00'}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0x128, 0x0, &(0x7f00000003c0)=[@enter_looper, @exit_looper, @decrefs={0x40046307, 0x3}, @increfs_done={0x40106308, 0x3}, @dead_binder_done, @release={0x40046306, 0xfffffffe}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0x2, 0x1, 0x14}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x100a, 0x3}}, &(0x7f0000000140)={0x0, 0x20, 0x38}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x4, 0x2, 0x29}, @fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x1, 0xb01}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}, @increfs_done={0x40106308, 0x1}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@weak_binder={0x77622a85, 0x1000, 0x4fbf}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/43, 0x2b, 0x0, 0xb}, @flat=@binder={0x73622a85, 0x0, 0x2}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}, 0x40}], 0x9b, 0x0, &(0x7f0000000600)="a916684314edda9f9ca83635aa761843b83cb1f92bbf1b20784a0db036346d7ab3c2ee0f2256477e749336f0b655a9c6750d7ee8de9eada242c94619ec3253feb7ca5481c0d12ddde765d6b6cffef08ef1fbbff212538477cb8a8df90aa30280fc0781cda0dee1fa2fcf3d1e25355d028374ac844a830b2dcfe47618f28a51d69995eb2bc771f8c6bc74bd983e5f093d8ec61dced3b800fb29c87e"}) sendfile(r1, r2, 0x0, 0xfffffdef) 16:17:23 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x80, 0x110) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) [ 1758.934360] FAULT_INJECTION: forcing a failure. [ 1758.934360] name failslab, interval 1, probability 0, space 0, times 0 [ 1758.936416] CPU: 0 PID: 12472 Comm: syz-executor.7 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1758.937639] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1758.938837] Call Trace: [ 1758.939242] [ 1758.939609] dump_stack_lvl+0xc1/0xf0 [ 1758.940221] should_fail_ex+0x4b4/0x5b0 [ 1758.940867] ? inet6_create+0xcce/0x1110 [ 1758.941531] should_failslab+0x9/0x20 [ 1758.942139] __kmem_cache_alloc_node+0x66/0x310 [ 1758.942892] ? __request_module+0x28f/0x600 [ 1758.943605] ? __request_module+0x28f/0x600 [ 1758.944294] ? inet6_create+0xcce/0x1110 [ 1758.944940] __kmalloc_node_track_caller+0x4e/0x160 [ 1758.945760] ? inet6_create+0xcce/0x1110 [ 1758.946412] kstrdup+0x3f/0x80 [ 1758.946945] __request_module+0x28f/0x600 [ 1758.947509] ? __pfx___request_module+0x10/0x10 [ 1758.948256] ? find_held_lock+0x2c/0x110 [ 1758.948911] ? lock_release+0x1e3/0x680 [ 1758.949555] ? __pfx_lock_release+0x10/0x10 [ 1758.950240] ? find_held_lock+0x2c/0x110 [ 1758.950927] inet6_create+0xcce/0x1110 [ 1758.951583] __sock_create+0x376/0x820 [ 1758.952230] __sys_socket+0x148/0x260 [ 1758.952846] ? __pfx___sys_socket+0x10/0x10 [ 1758.953547] ? ksys_write+0x19e/0x250 [ 1758.954207] __x64_sys_socket+0x73/0xb0 [ 1758.954843] ? syscall_enter_from_user_mode+0x21/0x50 [ 1758.955664] do_syscall_64+0x3f/0x90 [ 1758.956261] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1758.957077] RIP: 0033:0x7f4d75dbdb19 [ 1758.957653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1758.960308] RSP: 002b:00007f4d73333188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1758.961468] RAX: ffffffffffffffda RBX: 00007f4d75ed0f60 RCX: 00007f4d75dbdb19 [ 1758.962539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 1758.963608] RBP: 00007f4d733331d0 R08: 0000000000000000 R09: 0000000000000000 [ 1758.964674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1758.965688] R13: 00007fff9d8d04af R14: 00007f4d73333300 R15: 0000000000022000 [ 1758.966559] 16:17:36 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 22) 16:17:36 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x80, 0x110) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:17:36 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x400) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x20ae40, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="cc0000001b0001000000000000000000fe880000000000000000000000000001fe8000"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00904700000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00150000000000000000004f24c4214d9e31d5ce53f601e57e1b9095a95f90847d1a09062218af8bb00a055bc5acafdcf18cd4247b8f64a7134a40f3f41e99c15746e212bac00a2816d682a04eac912a91bd32f60b9016f485c8a5185de59e7b1c6d336a22d38c53c5444fa7ae54b2a11800ccf6e0822fe9ca1d7297d31bb3748ee93d86fe24ff51091ef5b3ef661c80428eaff4770784473510df42b7d85938c8528e94278eaed419e2556650c1a2462125cf116adcd144df37c65dd6f8803ea2ff6e8a2d97d2ca8592a4c7"], 0xcc}}, 0x0) sendfile(r4, r5, 0x0, 0x4000009) open_by_handle_at(r1, 0xfffffffffffffffe, 0x420000) 16:17:36 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) unlinkat(r0, &(0x7f0000000000)='./file1\x00', 0x0) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r2, 0x0, 0xfffffdef) 16:17:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300), 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:17:36 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) (fail_nth: 8) 16:17:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:17:36 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 16:17:36 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x80, 0x110) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:17:36 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 23) 16:17:36 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) [ 1772.019870] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. 16:17:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300), 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:17:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:17:37 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = syz_mount_image$nfs4(&(0x7f0000000140), &(0x7f00000001c0)='./file1/file0\x00', 0x8, 0x7, &(0x7f00000007c0)=[{&(0x7f0000000240)="e5693e174c995c4be63226b69f0e28f4b711400f569bd4d19b5269006a2dba43819ab6c959d5de9fb67d46b241746a8fe67ce32465221aa223df4ccf0d1a205949a8b85e2b8b501f1e3af1631f27cee47cb2a57cbab7b05b9f3e6f717e2d4d88399fbc606190d75f83b12c593bbfe72f179cf89f8f9df3e372", 0x79, 0x100000000}, {&(0x7f0000000380)="f5608dcf357a0326e1db4842d467c2ad27ee18f22ea7d3fe89e066c3f12cc1dd1ded9c91e1d35e173114a8fab6241c124d3fde513f9f7f550a9455173721d3f71d6da07edc5f5bdd8d75679a1bf3eeb6d14f60ee46f3de09460e7eaba19c98ee3bb99823de8ec9ce089b67b897bb454dff20ac5578e3ccfe1af81c3047c2676ccb9349bb0ee63783b8e200ee2dd678a35568b4889c8a47ebf06670d76dc65c445e121ecb27f1a30a7c33cac456f91a0b501d944dfae8a4f3f41b4e28dabce70075d90375b0e784f64caf99326403", 0xce, 0x7fffffff}, {&(0x7f0000000480)="176426d4bc546c2b4fc9f1cd677089d613de919796ae2164f759adfe5f479f5707515356372a569054d106ebecffc3d38c3a8e722f9ec177437803a1eabab813d801c45a7d96eda1dd94869a9545ecd732e4caa6ed4b53740e86ef8e0b6b8a7594872658768d847a60aadaa1ca13fd61611cba8b581484d2797b8dfd45987ee363e35bac2f9533a3c5320ccc1751c23325bfeadb34e1dd4cbc23de6f0444226d5e87a55761fe471258ce590fcaf0ce906ce3e8d61052ceb8a299044f71271bd049c74f6c6f", 0xc5, 0x6}, {&(0x7f00000002c0)="151120ef8e636c", 0x7, 0x7fff}, {&(0x7f0000000600)="5dc501fb25876188be641dd1631e550a453972301b720ad2bb6b6f8b4597a1b0356fc9dcb976a65145ab496d9d03da88447baa6bebce0334fdb00b7d6b5e1f8da1380cdc3f1449be52da2fbc1ac0b282dcfefe1d9eb993c8c1c711d374793629068f22a2205c48a89289e86930a2a48ef109d8f2043c21eb2962139f475a4f3e4af0e42a47a363f7", 0x88, 0x100000001}, {&(0x7f00000006c0)="6bef3ba2edc3e640a5a52173ff3a7794ad8636fc04af5ec5fac052c8da095d33c09ca4c53e2b9d809658e1cbb44afffbbe25c1bd0526adcc61a2bb6aaabf6f51d7a2399f73309f0e861b5a5f98acaa4f696f239b0139000d3125c5d50f3a832bd183f85dbe", 0x65, 0x80000001}, {&(0x7f0000000740)="6c4e09f029359de217e9831297b45dd94b66eb8ed004c1ef191f79aa6ad083caab832905704a148e3a197ed3dc56d8e05cbf1ca64d959b76947f1c24edc206b76324cfc3955b523f", 0x48, 0x5}], 0x4004, &(0x7f0000000880)={[{'#]-(#!,-\\\xef'}, {'tmpfs\x00'}, {'tmpfs\x00'}, {'tmpfs\x00'}, {'tmpfs\x00'}, {'tmpfs\x00'}], [{@subj_type}, {@subj_user={'subj_user', 0x3d, 'tmpfs\x00'}}, {@fowner_gt={'fowner>', 0xee01}}, {@appraise}]}) openat(r2, &(0x7f0000000300)='./file1\x00', 0x40, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00 \x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000fcdbdf25770000000500ee00070000000800ef000c0000000500ee001f0000000800ef00080000000800ef0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x841) sendfile(r0, r1, 0x0, 0xfffffdef) 16:17:37 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) (fail_nth: 9) [ 1772.381999] FAULT_INJECTION: forcing a failure. [ 1772.381999] name failslab, interval 1, probability 0, space 0, times 0 [ 1772.390533] CPU: 1 PID: 12520 Comm: syz-executor.3 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1772.391707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1772.392845] Call Trace: [ 1772.393224] [ 1772.393586] dump_stack_lvl+0xc1/0xf0 [ 1772.394157] should_fail_ex+0x4b4/0x5b0 [ 1772.394774] ? iter_file_splice_write+0x162/0xcb0 [ 1772.395481] should_failslab+0x9/0x20 [ 1772.396034] __kmem_cache_alloc_node+0x66/0x310 [ 1772.396735] ? iter_file_splice_write+0x162/0xcb0 [ 1772.397418] ? iter_file_splice_write+0x162/0xcb0 [ 1772.398138] __kmalloc+0x4d/0x160 [ 1772.398653] iter_file_splice_write+0x162/0xcb0 [ 1772.399336] ? lock_is_held_type+0x9f/0x120 [ 1772.399966] ? touch_atime+0x2da/0x590 [ 1772.400561] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1772.401302] ? security_file_permission+0xb5/0xe0 [ 1772.402025] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1772.402749] direct_splice_actor+0x119/0x180 [ 1772.403398] splice_direct_to_actor+0x349/0x9d0 [ 1772.404077] ? __pfx_direct_splice_actor+0x10/0x10 [ 1772.404790] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1772.405527] ? security_file_permission+0xb5/0xe0 [ 1772.406266] do_splice_direct+0x1bb/0x290 [ 1772.406885] ? __pfx_do_splice_direct+0x10/0x10 [ 1772.407556] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1772.408306] ? lock_is_held_type+0x9f/0x120 [ 1772.408954] do_sendfile+0xb67/0x1300 [ 1772.409552] ? __pfx_do_sendfile+0x10/0x10 [ 1772.410195] __x64_sys_sendfile64+0x1d5/0x210 [ 1772.410868] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1772.411604] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1772.412373] do_syscall_64+0x3f/0x90 [ 1772.412917] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1772.413675] RIP: 0033:0x7f83ebaa5b19 [ 1772.414213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1772.416673] RSP: 002b:00007f83e8ffa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1772.417739] RAX: ffffffffffffffda RBX: 00007f83ebbb9020 RCX: 00007f83ebaa5b19 [ 1772.418727] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1772.419703] RBP: 00007f83e8ffa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1772.420680] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 1772.421659] R13: 00007ffce6e20e1f R14: 00007f83e8ffa300 R15: 0000000000022000 [ 1772.422662] 16:17:37 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x80, 0x110) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) [ 1772.593961] FAULT_INJECTION: forcing a failure. [ 1772.593961] name failslab, interval 1, probability 0, space 0, times 0 [ 1772.595438] CPU: 0 PID: 12527 Comm: syz-executor.7 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1772.596438] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1772.597441] Call Trace: [ 1772.597797] [ 1772.598100] dump_stack_lvl+0xc1/0xf0 [ 1772.598605] should_fail_ex+0x4b4/0x5b0 [ 1772.599150] should_failslab+0x9/0x20 [ 1772.599662] __kmem_cache_alloc_node+0x66/0x310 [ 1772.600275] ? call_usermodehelper_setup+0xa9/0x330 [ 1772.600931] kmalloc_trace+0x26/0xc0 [ 1772.601428] call_usermodehelper_setup+0xa9/0x330 [ 1772.602090] ? __pfx_free_modprobe_argv+0x10/0x10 [ 1772.602741] ? inet6_create+0xcce/0x1110 [ 1772.603271] __request_module+0x382/0x600 [ 1772.603829] ? __pfx___request_module+0x10/0x10 [ 1772.604477] ? find_held_lock+0x2c/0x110 [ 1772.605021] ? lock_release+0x1e3/0x680 [ 1772.605570] ? __pfx_lock_release+0x10/0x10 [ 1772.606145] ? find_held_lock+0x2c/0x110 [ 1772.606715] inet6_create+0xcce/0x1110 [ 1772.607273] __sock_create+0x376/0x820 [ 1772.607822] __sys_socket+0x148/0x260 [ 1772.608342] ? __pfx___sys_socket+0x10/0x10 [ 1772.608913] ? ksys_write+0x19e/0x250 [ 1772.609431] ? __pfx_ksys_write+0x10/0x10 [ 1772.610044] __x64_sys_socket+0x73/0xb0 [ 1772.610571] ? syscall_enter_from_user_mode+0x21/0x50 [ 1772.611274] do_syscall_64+0x3f/0x90 [ 1772.611784] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1772.612465] RIP: 0033:0x7f4d75dbdb19 [ 1772.612958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1772.615208] RSP: 002b:00007f4d73333188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1772.616172] RAX: ffffffffffffffda RBX: 00007f4d75ed0f60 RCX: 00007f4d75dbdb19 [ 1772.617072] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 1772.617995] RBP: 00007f4d733331d0 R08: 0000000000000000 R09: 0000000000000000 [ 1772.618906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1772.619809] R13: 00007fff9d8d04af R14: 00007f4d73333300 R15: 0000000000022000 [ 1772.620757] [ 1772.624438] syz-executor.6[12526]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1772.646916] loop6: detected capacity change from 0 to 264192 16:17:37 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:17:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300), 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:17:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 1773.392177] syz-executor.6[12533]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1773.402923] loop6: detected capacity change from 0 to 264192 16:17:50 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x80, 0x110) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:17:50 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:17:50 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 24) 16:17:50 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591df5d2797f01c245a53cbaac38beb67ec8543ee1fc76da389a2f521469702a87c3b5af9d215c17efc51425aad48737389caf265ffa46a739ff985065b4478c2cc0a581cd02471cb80059fcfbf9b2b1b1a6f164a6db4cc9c4b3e85bea642af74ef26797a542eadecdecba86ac5a23f879037c5bcb5d47201eca38085fd91832076149d22dc23f"], 0x14}}, 0x0) 16:17:50 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:17:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) (fail_nth: 10) 16:17:50 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:17:50 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000500)=0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x3, 0x4, &(0x7f0000000480)=[{&(0x7f00000008c0)="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", 0x11b, 0xffffffff}, {&(0x7f00000000c0)="bf05c2226aa97329a3f1b699fba06fb8320968e4f0a2a66f5a6cfdefded8b2c774", 0x21, 0x3}, {&(0x7f00000007c0)="9099d02811ddfb087fa0887f14061f2ad99e36ca17ef2484ab0b4bd2b4747b3fb1ce234482c7d5efb4528bd4e4cc7949bf4040b94e792507edcb70c555ecf5d79cd201b912471ee3d3f91a0ecd45789b823b787a021eb432c3f860884928d734c1ea9ae6d4e2fe0a7555738d3bf7d0b3ad0c85b0df532307d249af44ce90648a4ab54157d41ead5dd6656ef4efdadf84aa67e2f20e6a4f6dc63e8693c28ed41a171d9deeda240dc6c43e6040d3f257a542fbee60cc8a47bdcec2f06069062aa0574944c78db0", 0xc6}, {&(0x7f0000000140)="ef763e737a5dcad20b79ec60add9c711de2d92ffdd0fe9b63419b8dc62837135b2f7f0d57ddfcab2ea7065323fa051b9e8c02f44ad96cddf3503c4a5b35998aa76b7b87b406e97201ab7360225b663fb61e48b719fa3f8c0a5e6687fbca281cca6ee66662826a458f3514cceb0d8fdd8af98f43dd72b142ef502beb08a5a2d0d12245099562eb53a7881c721c7664e4bc495b144defa026984be", 0x9a}], 0x201000, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@utf8no}, {@fat=@time_offset={'time_offset', 0x3d, 0x232}}, {@nonumtail}, {@shortname_winnt}], [{@uid_eq={'uid', 0x3d, r1}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@euid_lt={'euid<', r2}}, {@dont_measure}, {@measure}]}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x10000242) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fadvise64(r0, 0x1, 0x80, 0x4) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc4042, 0x0) write(r5, &(0x7f0000000200)='E', 0x140000) sendfile(r3, r4, 0x0, 0xfffffdef) [ 1786.179240] syz-executor.6[12556]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1786.187020] loop6: detected capacity change from 0 to 264192 16:17:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 1786.285128] syz-executor.6[12556]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1786.293970] loop6: detected capacity change from 0 to 264192 16:17:51 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x10000, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') utime(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)={0xe58, 0x100000001}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:17:51 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 25) [ 1786.764539] FAULT_INJECTION: forcing a failure. [ 1786.764539] name failslab, interval 1, probability 0, space 0, times 0 [ 1786.765363] CPU: 0 PID: 12583 Comm: syz-executor.3 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1786.765933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1786.766500] Call Trace: [ 1786.766686] [ 1786.766851] dump_stack_lvl+0xc1/0xf0 [ 1786.767143] should_fail_ex+0x4b4/0x5b0 [ 1786.767449] ? iter_file_splice_write+0x162/0xcb0 [ 1786.767813] should_failslab+0x9/0x20 [ 1786.768100] __kmem_cache_alloc_node+0x66/0x310 [ 1786.768450] ? ktime_get_coarse_real_ts64+0x15d/0x190 [ 1786.768838] ? iter_file_splice_write+0x162/0xcb0 [ 1786.769193] ? iter_file_splice_write+0x162/0xcb0 [ 1786.769553] __kmalloc+0x4d/0x160 [ 1786.769839] iter_file_splice_write+0x162/0xcb0 [ 1786.770181] ? splice_folio_into_pipe+0x496/0x580 [ 1786.770530] ? touch_atime+0x95/0x590 [ 1786.770828] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1786.771215] ? security_file_permission+0xb5/0xe0 [ 1786.771575] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1786.771952] direct_splice_actor+0x119/0x180 [ 1786.772278] splice_direct_to_actor+0x349/0x9d0 [ 1786.772625] ? __pfx_direct_splice_actor+0x10/0x10 [ 1786.772993] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1786.773340] ? security_file_permission+0xb5/0xe0 [ 1786.773705] do_splice_direct+0x1bb/0x290 [ 1786.774003] ? __pfx_do_splice_direct+0x10/0x10 [ 1786.774355] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1786.774732] ? lock_is_held_type+0x9f/0x120 [ 1786.775066] do_sendfile+0xb67/0x1300 [ 1786.775359] ? __pfx_do_sendfile+0x10/0x10 [ 1786.775682] __x64_sys_sendfile64+0x1d5/0x210 [ 1786.776022] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1786.776392] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1786.776780] do_syscall_64+0x3f/0x90 [ 1786.777061] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1786.777417] RIP: 0033:0x7f83ebaa5b19 [ 1786.777676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1786.778960] RSP: 002b:00007f83e901b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1786.779505] RAX: ffffffffffffffda RBX: 00007f83ebbb8f60 RCX: 00007f83ebaa5b19 [ 1786.780019] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1786.780524] RBP: 00007f83e901b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1786.780992] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 1786.781491] R13: 00007ffce6e20e1f R14: 00007f83e901b300 R15: 0000000000022000 [ 1786.781994] 16:18:07 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:18:07 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:18:07 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') utimes(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) mount$cgroup(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x21f445, &(0x7f0000000240)={[{}, {@xattr}, {@noprefix}, {}, {}], [{@permit_directio}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) mount$bind(&(0x7f0000000300)='./file1/../file0\x00', &(0x7f0000000400)='./file1\x00', &(0x7f0000000440), 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) fspick(r1, &(0x7f0000000140)='./file1\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000480)=@polexpire={0xf4, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0xee00}, {0xfffffffffffff800}, {}, 0x0, 0x6e6bc0}}, [@replay_esn_val={0x34, 0x17, {0x6, 0x70bd25, 0x70bd28, 0x70bd28, 0x70bd2d, 0x7bf6242d, [0x4, 0x80, 0x101, 0x0, 0x0, 0x4]}}]}, 0xf4}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x8000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_client}, {@version_u}], [{@seclabel}]}}) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:18:07 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:18:07 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) (fail_nth: 11) 16:18:07 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:18:07 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 26) 16:18:07 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x80, 0x110) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) [ 1802.973126] ======================================================= [ 1802.973126] WARNING: The mand mount option has been deprecated and [ 1802.973126] and is ignored by this kernel. Remove the mand [ 1802.973126] option from the mount to silence this warning. [ 1802.973126] ======================================================= 16:18:07 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 1803.081577] FAULT_INJECTION: forcing a failure. [ 1803.081577] name failslab, interval 1, probability 0, space 0, times 0 [ 1803.083047] CPU: 1 PID: 12613 Comm: syz-executor.3 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1803.084047] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1803.085092] Call Trace: [ 1803.085440] [ 1803.085753] dump_stack_lvl+0xc1/0xf0 [ 1803.086270] should_fail_ex+0x4b4/0x5b0 [ 1803.086813] ? iter_file_splice_write+0x162/0xcb0 [ 1803.087468] should_failslab+0x9/0x20 [ 1803.087989] __kmem_cache_alloc_node+0x66/0x310 [ 1803.088639] ? ktime_get_coarse_real_ts64+0x15d/0x190 [ 1803.089352] ? iter_file_splice_write+0x162/0xcb0 [ 1803.090033] ? iter_file_splice_write+0x162/0xcb0 [ 1803.090683] __kmalloc+0x4d/0x160 [ 1803.091180] iter_file_splice_write+0x162/0xcb0 [ 1803.091820] ? splice_folio_into_pipe+0x496/0x580 [ 1803.092477] ? touch_atime+0x95/0x590 [ 1803.092998] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1803.093710] ? security_file_permission+0xb5/0xe0 [ 1803.094383] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1803.095064] direct_splice_actor+0x119/0x180 [ 1803.095651] splice_direct_to_actor+0x349/0x9d0 [ 1803.096275] ? __pfx_direct_splice_actor+0x10/0x10 [ 1803.096940] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1803.097623] ? security_file_permission+0xb5/0xe0 [ 1803.098298] do_splice_direct+0x1bb/0x290 [ 1803.098861] ? __pfx_do_splice_direct+0x10/0x10 [ 1803.099489] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1803.100178] ? lock_is_held_type+0x9f/0x120 [ 1803.100788] do_sendfile+0xb67/0x1300 [ 1803.101324] ? __pfx_do_sendfile+0x10/0x10 [ 1803.101930] __x64_sys_sendfile64+0x1d5/0x210 [ 1803.102552] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1803.103239] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1803.103953] do_syscall_64+0x3f/0x90 [ 1803.104465] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1803.105165] RIP: 0033:0x7f83ebaa5b19 [ 1803.105663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1803.107977] RSP: 002b:00007f83e8ffa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1803.108951] RAX: ffffffffffffffda RBX: 00007f83ebbb9020 RCX: 00007f83ebaa5b19 [ 1803.109871] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1803.110793] RBP: 00007f83e8ffa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1803.111706] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 1803.112623] R13: 00007ffce6e20e1f R14: 00007f83e8ffa300 R15: 0000000000022000 [ 1803.113576] [ 1803.157981] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65380 sclass=netlink_xfrm_socket pid=11363 comm=kworker/1:2 16:18:07 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0x0) [ 1803.210326] FAULT_INJECTION: forcing a failure. [ 1803.210326] name failslab, interval 1, probability 0, space 0, times 0 [ 1803.212131] CPU: 1 PID: 12608 Comm: syz-executor.7 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1803.213184] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1803.214215] Call Trace: [ 1803.214565] [ 1803.214872] dump_stack_lvl+0xc1/0xf0 [ 1803.215412] should_fail_ex+0x4b4/0x5b0 [ 1803.215980] ? inet6_create+0xb5c/0x1110 [ 1803.216545] should_failslab+0x9/0x20 [ 1803.217069] __kmem_cache_alloc_node+0x66/0x310 [ 1803.217718] ? __request_module+0x271/0x600 [ 1803.218327] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1803.219028] ? inet6_create+0xb5c/0x1110 [ 1803.219584] kmalloc_trace+0x26/0xc0 [ 1803.220096] __request_module+0x271/0x600 [ 1803.220659] ? __pfx___request_module+0x10/0x10 [ 1803.221301] ? find_held_lock+0x2c/0x110 [ 1803.221846] ? lock_release+0x1e3/0x680 [ 1803.222421] ? __pfx_lock_release+0x10/0x10 [ 1803.223006] ? find_held_lock+0x2c/0x110 [ 1803.223558] inet6_create+0xb5c/0x1110 [ 1803.224111] __sock_create+0x376/0x820 [ 1803.224652] __sys_socket+0x148/0x260 [ 1803.225174] ? __pfx___sys_socket+0x10/0x10 [ 1803.225748] ? ksys_write+0x19e/0x250 [ 1803.226282] ? __pfx_ksys_write+0x10/0x10 [ 1803.226860] __x64_sys_socket+0x73/0xb0 [ 1803.227404] ? syscall_enter_from_user_mode+0x21/0x50 [ 1803.228113] do_syscall_64+0x3f/0x90 [ 1803.228614] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1803.229313] RIP: 0033:0x7f4d75dbdb19 [ 1803.229808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1803.232096] RSP: 002b:00007f4d73333188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1803.233074] RAX: ffffffffffffffda RBX: 00007f4d75ed0f60 RCX: 00007f4d75dbdb19 [ 1803.234028] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 1803.234937] RBP: 00007f4d733331d0 R08: 0000000000000000 R09: 0000000000000000 [ 1803.235870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1803.236783] R13: 00007fff9d8d04af R14: 00007f4d73333300 R15: 0000000000022000 [ 1803.237732] 16:18:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:18:08 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:18:08 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 27) 16:18:08 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) (fail_nth: 12) 16:18:08 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0x0) [ 1803.947347] FAULT_INJECTION: forcing a failure. [ 1803.947347] name failslab, interval 1, probability 0, space 0, times 0 [ 1803.949629] CPU: 1 PID: 12632 Comm: syz-executor.3 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1803.950932] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1803.952198] Call Trace: [ 1803.952614] [ 1803.952987] dump_stack_lvl+0xc1/0xf0 [ 1803.953620] should_fail_ex+0x4b4/0x5b0 [ 1803.954311] ? iter_file_splice_write+0x162/0xcb0 [ 1803.955088] should_failslab+0x9/0x20 [ 1803.955706] __kmem_cache_alloc_node+0x66/0x310 [ 1803.956476] ? ktime_get_coarse_real_ts64+0x15d/0x190 [ 1803.957322] ? iter_file_splice_write+0x162/0xcb0 [ 1803.958132] ? iter_file_splice_write+0x162/0xcb0 [ 1803.958910] __kmalloc+0x4d/0x160 [ 1803.959478] iter_file_splice_write+0x162/0xcb0 [ 1803.960228] ? splice_folio_into_pipe+0x496/0x580 [ 1803.960998] ? touch_atime+0x95/0x590 [ 1803.961643] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1803.962512] ? security_file_permission+0xb5/0xe0 [ 1803.963296] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1803.964117] direct_splice_actor+0x119/0x180 [ 1803.964843] splice_direct_to_actor+0x349/0x9d0 [ 1803.965610] ? __pfx_direct_splice_actor+0x10/0x10 [ 1803.966441] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1803.967269] ? security_file_permission+0xb5/0xe0 [ 1803.968071] do_splice_direct+0x1bb/0x290 [ 1803.968748] ? __pfx_do_splice_direct+0x10/0x10 [ 1803.969505] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1803.970375] ? lock_is_held_type+0x9f/0x120 [ 1803.971116] do_sendfile+0xb67/0x1300 [ 1803.971768] ? __pfx_do_sendfile+0x10/0x10 [ 1803.972486] __x64_sys_sendfile64+0x1d5/0x210 [ 1803.973228] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1803.974067] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1803.974930] do_syscall_64+0x3f/0x90 [ 1803.975560] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1803.976406] RIP: 0033:0x7f83ebaa5b19 [ 1803.977006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1803.979855] RSP: 002b:00007f83e8ffa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1803.981062] RAX: ffffffffffffffda RBX: 00007f83ebbb9020 RCX: 00007f83ebaa5b19 [ 1803.982187] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1803.983295] RBP: 00007f83e8ffa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1803.984413] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 1803.985458] R13: 00007ffce6e20e1f R14: 00007f83e8ffa300 R15: 0000000000022000 [ 1803.986554] 16:18:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) (fail_nth: 13) 16:18:22 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0x0) 16:18:22 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:18:22 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x5}}, './file1\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) linkat(r2, &(0x7f0000000080)='./file1\x00', r3, &(0x7f00000000c0)='./file1\x00', 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:18:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:18:22 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x80, 0x110) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) 16:18:22 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="2228a5b3caa54f8e9fc4e8ebda67f518a744dd49272e9b7ddebb0604c661c511b547a2c54ac6044bb7933404c4b26eb4f8bc8200d03d570d4828040832a84bbce2b4ee04e380e45a619af09f2cf615b4dda8f6eb2dd8d2f944f85dc25a75e7dcdc2229855559882b7556aa38e99036317631681c7e4cd04e28a0424cb272fe0f20a03c3f72603defe50cf79329c92358ee67afbf72974098173bed81da7bfc33eef53e3d5fc3cc48430bd3689d614c79e6dddee7924392d107459ce16626135e7abb7eb21e319ac6a21ad1cc1a16a0539bd46d86fece19541c43aa8a10de05233e467d17ef93c59683afee87d6d51c0ed0d76b425435dd99b51fbc481ba7", @ANYRES64=r1, @ANYRESOCT=r0, @ANYRES64=r2, @ANYRESHEX=r1, @ANYRES64, @ANYRESDEC=r2, @ANYRES32=r3], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r5, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r4, 0x0, 0xfffffdef) 16:18:22 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 28) 16:18:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) [ 1817.608816] FAULT_INJECTION: forcing a failure. [ 1817.608816] name failslab, interval 1, probability 0, space 0, times 0 [ 1817.609605] CPU: 1 PID: 12647 Comm: syz-executor.7 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1817.610156] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1817.610686] Call Trace: [ 1817.610868] [ 1817.611028] dump_stack_lvl+0xc1/0xf0 [ 1817.611303] should_fail_ex+0x4b4/0x5b0 [ 1817.611590] ? inet6_create+0xb5c/0x1110 [ 1817.611883] should_failslab+0x9/0x20 [ 1817.612154] __kmem_cache_alloc_node+0x66/0x310 [ 1817.612478] ? __request_module+0x28f/0x600 [ 1817.612780] ? __request_module+0x28f/0x600 [ 1817.613078] ? inet6_create+0xb5c/0x1110 [ 1817.613361] __kmalloc_node_track_caller+0x4e/0x160 [ 1817.613701] ? inet6_create+0xb5c/0x1110 [ 1817.613986] kstrdup+0x3f/0x80 [ 1817.614224] __request_module+0x28f/0x600 [ 1817.614510] ? __pfx___request_module+0x10/0x10 [ 1817.614836] ? find_held_lock+0x2c/0x110 [ 1817.615111] ? lock_release+0x1e3/0x680 [ 1817.615392] ? __pfx_lock_release+0x10/0x10 [ 1817.615689] ? find_held_lock+0x2c/0x110 [ 1817.615971] inet6_create+0xb5c/0x1110 [ 1817.616255] __sock_create+0x376/0x820 [ 1817.616538] __sys_socket+0x148/0x260 [ 1817.616803] ? __pfx___sys_socket+0x10/0x10 [ 1817.617100] ? ksys_write+0x19e/0x250 [ 1817.617370] ? __pfx_ksys_write+0x10/0x10 [ 1817.617659] __x64_sys_socket+0x73/0xb0 [ 1817.617936] ? syscall_enter_from_user_mode+0x21/0x50 [ 1817.618303] do_syscall_64+0x3f/0x90 [ 1817.618561] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1817.618937] RIP: 0033:0x7f4d75dbdb19 [ 1817.619207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1817.620470] RSP: 002b:00007f4d73333188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1817.621010] RAX: ffffffffffffffda RBX: 00007f4d75ed0f60 RCX: 00007f4d75dbdb19 [ 1817.621512] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 1817.622018] RBP: 00007f4d733331d0 R08: 0000000000000000 R09: 0000000000000000 [ 1817.622536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1817.623036] R13: 00007fff9d8d04af R14: 00007f4d73333300 R15: 0000000000022000 [ 1817.623556] 16:18:22 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0x0) 16:18:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) (fail_nth: 14) 16:18:22 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x80, 0x110) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) 16:18:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:18:22 executing program 6: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "1dd7e27187f0e355d937bab8b4091551f99523790b90aba178963564fe2e23ed8cb430d372b309cdd91346be254a40637faabee6339667c8a53e61c30b723357", 0x36}, 0x48, 0x0) r1 = add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="30043c8d8ba4e07d2720dbfcc9ee804ce57c013360bdcdc1b6", 0x19, 0xfffffffffffffffb) keyctl$reject(0x13, r0, 0x0, 0x7fffffff, r1) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000380)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "f82a5ba671a3f4c740888b6561168345af4ffce898405c352a052c55114faebe0f64244ace8e5c4aedd9efd7b54e780efef2209c1afa3281b68a274f4c838062"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r6, 0x0) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x0, 0x66, 0x39, 0x35, 0x62, 0x7, 0x34, 0x34, 0x32, 0x30, 0x66, 0x36, 0x61, 0x1, 0x57, 0x38]}, &(0x7f0000000480)={0x0, "d83e3e50a94a9d05c7d9fc655bec07487ae759a81816ccfae1e597406ec995150ebacdcddec7ec1631eef672372093420b9137ae7342ab0d9e7f3d04198ac94b", 0x24}, 0x48, r6) sendmsg$nl_xfrm(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) sendfile(r4, r2, 0x0, 0x40100000000) 16:18:22 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 29) 16:18:22 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 1818.135153] FAULT_INJECTION: forcing a failure. [ 1818.135153] name failslab, interval 1, probability 0, space 0, times 0 [ 1818.135973] CPU: 1 PID: 12682 Comm: syz-executor.3 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1818.136504] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1818.137050] Call Trace: [ 1818.137232] [ 1818.137390] dump_stack_lvl+0xc1/0xf0 [ 1818.137663] should_fail_ex+0x4b4/0x5b0 [ 1818.137955] ? iter_file_splice_write+0x162/0xcb0 [ 1818.138295] should_failslab+0x9/0x20 [ 1818.138567] __kmem_cache_alloc_node+0x66/0x310 [ 1818.138901] ? iter_file_splice_write+0x162/0xcb0 [ 1818.139239] ? iter_file_splice_write+0x162/0xcb0 [ 1818.139571] __kmalloc+0x4d/0x160 [ 1818.139826] iter_file_splice_write+0x162/0xcb0 [ 1818.140155] ? lock_is_held_type+0x9f/0x120 [ 1818.140465] ? touch_atime+0x2da/0x590 [ 1818.140746] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1818.141114] ? security_file_permission+0xb5/0xe0 [ 1818.141445] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1818.141800] direct_splice_actor+0x119/0x180 [ 1818.142119] splice_direct_to_actor+0x349/0x9d0 [ 1818.142443] ? __pfx_direct_splice_actor+0x10/0x10 [ 1818.142784] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1818.143131] ? security_file_permission+0xb5/0xe0 [ 1818.143470] do_splice_direct+0x1bb/0x290 [ 1818.143763] ? __pfx_do_splice_direct+0x10/0x10 [ 1818.144083] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1818.144431] ? lock_is_held_type+0x9f/0x120 [ 1818.144747] do_sendfile+0xb67/0x1300 [ 1818.145030] ? __pfx_do_sendfile+0x10/0x10 [ 1818.145336] __x64_sys_sendfile64+0x1d5/0x210 [ 1818.145654] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1818.146039] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1818.146403] do_syscall_64+0x3f/0x90 [ 1818.146669] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1818.147025] RIP: 0033:0x7f83ebaa5b19 [ 1818.147279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1818.148502] RSP: 002b:00007f83e901b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1818.149039] RAX: ffffffffffffffda RBX: 00007f83ebbb8f60 RCX: 00007f83ebaa5b19 [ 1818.149532] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1818.150027] RBP: 00007f83e901b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1818.150526] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 1818.151027] R13: 00007ffce6e20e1f R14: 00007f83e901b300 R15: 0000000000022000 [ 1818.151543] 16:18:22 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) umount2(&(0x7f0000000000)='./file1\x00', 0xc) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) r3 = epoll_create(0x101) pwrite64(r3, &(0x7f0000000080)="2b5f0e07d2adc1ddfbf51b2446df6ec89ddc8c4404e914c88083651ccaf65091adfba903d48d10ef67fd", 0x2a, 0x28f5) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:18:23 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:18:23 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 30) 16:18:23 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "1dd7e27187f0e355d937bab8b4091551f99523790b90aba178963564fe2e23ed8cb430d372b309cdd91346be254a40637faabee6339667c8a53e61c30b723357", 0x36}, 0x48, 0x0) r1 = add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="30043c8d8ba4e07d2720dbfcc9ee804ce57c013360bdcdc1b6", 0x19, 0xfffffffffffffffb) keyctl$reject(0x13, r0, 0x0, 0x7fffffff, r1) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000380)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "f82a5ba671a3f4c740888b6561168345af4ffce898405c352a052c55114faebe0f64244ace8e5c4aedd9efd7b54e780efef2209c1afa3281b68a274f4c838062"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r6, 0x0) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x0, 0x66, 0x39, 0x35, 0x62, 0x7, 0x34, 0x34, 0x32, 0x30, 0x66, 0x36, 0x61, 0x1, 0x57, 0x38]}, &(0x7f0000000480)={0x0, "d83e3e50a94a9d05c7d9fc655bec07487ae759a81816ccfae1e597406ec995150ebacdcddec7ec1631eef672372093420b9137ae7342ab0d9e7f3d04198ac94b", 0x24}, 0x48, r6) sendmsg$nl_xfrm(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) sendfile(r4, r2, 0x0, 0x40100000000) 16:18:39 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0xe) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:18:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, 0x0, 0x0) 16:18:39 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x80, 0x110) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) 16:18:39 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:18:39 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000840)={{{@in=@broadcast, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@private}}, &(0x7f00000000c0)=0xe8) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000540)=0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1000, 0x6, &(0x7f0000000780)=[{&(0x7f0000000240)="b382adfcf74fb31f45bf6375ffdf424ac5c0d9ddace6f46a74ed2bce62d4b798ea532589e15a56d1627c1a8e16d2bc335d9f7b25f166f0c1426e2c9420dc9fcc9fd8592c50c33a685c6662049478ef8d40572eb1b7197b870b9d336f9e851455731bb44cc25bda927923936c8625ffc27dbeadef519d6c5b00a0be3fa89b4443e74b3cac90ba388985723a707ef3a9f433aea35eea86bec962df7eca1163a37d6017f0c9494e143b98c4c892dbc5b1a69ab45df15d822520e5f7189b687a87c9de072ac343b606e815d5313b3ba7cfe5fd886967c373a2b345fe9f203f1ac1c6ad67c91fd25c2082797af83b887311827cf72570", 0xf4, 0x8}, {&(0x7f0000000140)="f578d482c71423851b050e2346a92e636227791bec360010f62e6fd9f2148c9a291579fc2363fe316ddde03e1c97f0de19bfa0c50cb77e266f065bcc0d81d7e6f821b72bba6bcaaab730aa36f574bd046127b94b1f0d59bf991854cae02c10efe7f0caf816c7b76b323578728784c85db34167849a49d47b0589d1b7646d4022cf42919fdac54a969e8ee93a", 0x8c, 0x6}, {&(0x7f0000000380)="524033cec44df705b71eb0bbbd65b6116973d18d82f767b4f8dcf05e00ae938d281b9e64726d1f692e07f3d5ec956d84c50e510ab3bcbf00602145e1d83237912e6165a98424168cded649564ac0424ef4e394abe29e7d6f884586ad8a7ed0f6f99e1c5c0613eba170415976f9c60d70d693043a56c55fbd771f7669223ad20a68f8c2ccad6462eb6afb8b16b8376824498258d18f323bfac195c9ada252a4eb189630a5eb470fc8c0739ded90061bf9886be6d7f04f7754a58c3db7f137e29a4666976b76a8564e816bad8e638033fbaeffa1bb", 0xd4, 0x5}, {&(0x7f0000000480)="8f85eec73314bed6a095171829e3e675af97c088f9ff6eee6f5e5c60e0a219e088cf38a2ffc4fd7a416f88047eab7d320a60480889a0f1188cfb1411316d138413c051dea59eaacbff3e3a10e23c037a23ce9f33a8e29b3652b034c8fafca82a874173ba6c4743cdfff904592b5b61c1032080cd7bd516ada25514df4f16634883c6c9b4eb4328913709cd253c39eb2405789be173745ab50d264f6200dc0906", 0xa0, 0x8}, {&(0x7f0000000600)="47622bb34785de5c178e058ab55ad346ffec8ff11a69d37fd1bd51f3de3809470bc23852a5ddae079369cee16c66b1c6fef9c5bea4304b3aed962919792d7b04630b4700fffdeee627c9ac6a0b65625a891c867cb779942b9911f08afa4fe8e400b2b18425c1be899c3ab99b68c35678", 0x70, 0x81}, {&(0x7f0000000680)="53c956614d06b6ec14df64b72ced24f1c780f1f0cdb930c825f8a0323b74203a366c880153a9ae4ad7251369dc12992374fbb01cd6bb6561363173b3836ac0ccd8d71006b8432c70b1583906805f69e94c5783045a470d8d639d87ee93ee382de92e0a551fbb08e572ef4d1a966dc61f05e97cda1d5f14b5142e71821d18294a25b30c29098f12be277a46b99008cfdef2b6765a51cd697bfb1eebb3a8a6233eefc13c1be3bb38f08411a67df83f1cd61c7e9342d21b9df2ed61b6c22e2235b41ee89ed76604ce22040db05f1472a4b0e65c368a50c080", 0xd7, 0x8d8}], 0x0, &(0x7f0000000940)={[{@iocharset={'iocharset', 0x3d, 'cp855'}}], [{@fowner_lt={'fowner<', r3}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) 16:18:39 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 31) 16:18:39 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) (fail_nth: 15) 16:18:39 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "1dd7e27187f0e355d937bab8b4091551f99523790b90aba178963564fe2e23ed8cb430d372b309cdd91346be254a40637faabee6339667c8a53e61c30b723357", 0x36}, 0x48, 0x0) r1 = add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="30043c8d8ba4e07d2720dbfcc9ee804ce57c013360bdcdc1b6", 0x19, 0xfffffffffffffffb) keyctl$reject(0x13, r0, 0x0, 0x7fffffff, r1) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000380)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "f82a5ba671a3f4c740888b6561168345af4ffce898405c352a052c55114faebe0f64244ace8e5c4aedd9efd7b54e780efef2209c1afa3281b68a274f4c838062"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r6, 0x0) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x0, 0x66, 0x39, 0x35, 0x62, 0x7, 0x34, 0x34, 0x32, 0x30, 0x66, 0x36, 0x61, 0x1, 0x57, 0x38]}, &(0x7f0000000480)={0x0, "d83e3e50a94a9d05c7d9fc655bec07487ae759a81816ccfae1e597406ec995150ebacdcddec7ec1631eef672372093420b9137ae7342ab0d9e7f3d04198ac94b", 0x24}, 0x48, r6) sendmsg$nl_xfrm(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) sendfile(r4, r2, 0x0, 0x40100000000) [ 1834.370423] syz-executor.2[12723]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1834.386164] loop2: detected capacity change from 0 to 8 16:18:39 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) [ 1834.395552] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1834.481992] FAULT_INJECTION: forcing a failure. [ 1834.481992] name failslab, interval 1, probability 0, space 0, times 0 [ 1834.483566] CPU: 1 PID: 12724 Comm: syz-executor.3 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1834.484614] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1834.485658] Call Trace: [ 1834.486002] [ 1834.486327] dump_stack_lvl+0xc1/0xf0 [ 1834.486863] should_fail_ex+0x4b4/0x5b0 [ 1834.487430] ? iter_file_splice_write+0x162/0xcb0 [ 1834.488086] should_failslab+0x9/0x20 [ 1834.488618] __kmem_cache_alloc_node+0x66/0x310 [ 1834.489249] ? iter_file_splice_write+0x162/0xcb0 [ 1834.489365] FAULT_INJECTION: forcing a failure. [ 1834.489365] name failslab, interval 1, probability 0, space 0, times 0 [ 1834.489891] ? iter_file_splice_write+0x162/0xcb0 [ 1834.491395] __kmalloc+0x4d/0x160 [ 1834.491888] iter_file_splice_write+0x162/0xcb0 [ 1834.492522] ? lock_is_held_type+0x9f/0x120 [ 1834.493131] ? touch_atime+0x2da/0x590 [ 1834.493677] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1834.494412] ? security_file_permission+0xb5/0xe0 [ 1834.495076] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1834.495774] direct_splice_actor+0x119/0x180 [ 1834.496382] splice_direct_to_actor+0x349/0x9d0 [ 1834.497023] ? __pfx_direct_splice_actor+0x10/0x10 [ 1834.497691] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1834.498390] ? security_file_permission+0xb5/0xe0 [ 1834.499053] do_splice_direct+0x1bb/0x290 [ 1834.499618] ? __pfx_do_splice_direct+0x10/0x10 [ 1834.500245] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1834.500945] ? lock_is_held_type+0x9f/0x120 [ 1834.501544] do_sendfile+0xb67/0x1300 [ 1834.502085] ? __pfx_do_sendfile+0x10/0x10 [ 1834.502761] __x64_sys_sendfile64+0x1d5/0x210 [ 1834.503394] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1834.504079] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1834.504803] do_syscall_64+0x3f/0x90 [ 1834.505312] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1834.506014] RIP: 0033:0x7f83ebaa5b19 [ 1834.506519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1834.508851] RSP: 002b:00007f83e8ffa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1834.509837] RAX: ffffffffffffffda RBX: 00007f83ebbb9020 RCX: 00007f83ebaa5b19 [ 1834.510786] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1834.511715] RBP: 00007f83e8ffa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1834.512634] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 1834.513559] R13: 00007ffce6e20e1f R14: 00007f83e8ffa300 R15: 0000000000022000 [ 1834.514520] [ 1834.514842] CPU: 0 PID: 12718 Comm: syz-executor.7 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1834.515425] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1834.515984] Call Trace: [ 1834.516175] [ 1834.516344] dump_stack_lvl+0xc1/0xf0 [ 1834.516634] should_fail_ex+0x4b4/0x5b0 [ 1834.516942] should_failslab+0x9/0x20 [ 1834.517228] __kmem_cache_alloc_node+0x66/0x310 [ 1834.517574] ? call_usermodehelper_setup+0xa9/0x330 [ 1834.517949] kmalloc_trace+0x26/0xc0 [ 1834.518226] call_usermodehelper_setup+0xa9/0x330 [ 1834.518578] ? __pfx_free_modprobe_argv+0x10/0x10 [ 1834.518940] ? inet6_create+0xb5c/0x1110 [ 1834.519241] __request_module+0x382/0x600 [ 1834.519549] ? __pfx___request_module+0x10/0x10 [ 1834.519905] ? find_held_lock+0x2c/0x110 [ 1834.520206] ? lock_release+0x1e3/0x680 [ 1834.520504] ? __pfx_lock_release+0x10/0x10 [ 1834.520821] ? find_held_lock+0x2c/0x110 [ 1834.521131] inet6_create+0xb5c/0x1110 [ 1834.521437] __sock_create+0x376/0x820 [ 1834.521736] __sys_socket+0x148/0x260 [ 1834.522020] ? __pfx___sys_socket+0x10/0x10 [ 1834.522334] ? ksys_write+0x19e/0x250 [ 1834.522622] ? __pfx_ksys_write+0x10/0x10 [ 1834.522934] __x64_sys_socket+0x73/0xb0 [ 1834.523225] ? syscall_enter_from_user_mode+0x21/0x50 [ 1834.523610] do_syscall_64+0x3f/0x90 [ 1834.523884] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1834.524260] RIP: 0033:0x7f4d75dbdb19 [ 1834.524531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1834.525748] RSP: 002b:00007f4d73333188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1834.526274] RAX: ffffffffffffffda RBX: 00007f4d75ed0f60 RCX: 00007f4d75dbdb19 [ 1834.526781] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 1834.527270] RBP: 00007f4d733331d0 R08: 0000000000000000 R09: 0000000000000000 [ 1834.527767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1834.528257] R13: 00007fff9d8d04af R14: 00007f4d73333300 R15: 0000000000022000 [ 1834.528779] 16:18:39 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:18:39 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) (fail_nth: 16) 16:18:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, 0x0, 0x0) 16:18:39 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "1dd7e27187f0e355d937bab8b4091551f99523790b90aba178963564fe2e23ed8cb430d372b309cdd91346be254a40637faabee6339667c8a53e61c30b723357", 0x36}, 0x48, 0x0) r1 = add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="30043c8d8ba4e07d2720dbfcc9ee804ce57c013360bdcdc1b6", 0x19, 0xfffffffffffffffb) keyctl$reject(0x13, r0, 0x0, 0x7fffffff, r1) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000380)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "f82a5ba671a3f4c740888b6561168345af4ffce898405c352a052c55114faebe0f64244ace8e5c4aedd9efd7b54e780efef2209c1afa3281b68a274f4c838062"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r6, 0x0) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x0, 0x66, 0x39, 0x35, 0x62, 0x7, 0x34, 0x34, 0x32, 0x30, 0x66, 0x36, 0x61, 0x1, 0x57, 0x38]}, &(0x7f0000000480)={0x0, "d83e3e50a94a9d05c7d9fc655bec07487ae759a81816ccfae1e597406ec995150ebacdcddec7ec1631eef672372093420b9137ae7342ab0d9e7f3d04198ac94b", 0x24}, 0x48, r6) sendmsg$nl_xfrm(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) sendfile(r4, r2, 0x0, 0x40100000000) 16:18:39 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 32) 16:18:39 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 1835.148947] syz-executor.2[12747]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 16:18:39 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 33) [ 1835.184771] loop2: detected capacity change from 0 to 8 [ 1835.192420] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 16:18:40 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x408080, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:18:40 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "1dd7e27187f0e355d937bab8b4091551f99523790b90aba178963564fe2e23ed8cb430d372b309cdd91346be254a40637faabee6339667c8a53e61c30b723357", 0x36}, 0x48, 0x0) r1 = add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="30043c8d8ba4e07d2720dbfcc9ee804ce57c013360bdcdc1b6", 0x19, 0xfffffffffffffffb) keyctl$reject(0x13, r0, 0x0, 0x7fffffff, r1) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000380)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "f82a5ba671a3f4c740888b6561168345af4ffce898405c352a052c55114faebe0f64244ace8e5c4aedd9efd7b54e780efef2209c1afa3281b68a274f4c838062"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r5, 0x0) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x0, 0x66, 0x39, 0x35, 0x62, 0x7, 0x34, 0x34, 0x32, 0x30, 0x66, 0x36, 0x61, 0x1, 0x57, 0x38]}, &(0x7f0000000480)={0x0, "d83e3e50a94a9d05c7d9fc655bec07487ae759a81816ccfae1e597406ec995150ebacdcddec7ec1631eef672372093420b9137ae7342ab0d9e7f3d04198ac94b", 0x24}, 0x48, r5) sendfile(r4, r2, 0x0, 0x40100000000) 16:18:40 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) lstat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240)) lsetxattr(&(0x7f0000000140)='\x00', &(0x7f0000000180)=@random={'btrfs.', 'tmpfs\x00'}, &(0x7f00000001c0)='\x00', 0x1, 0x7580f6305838db43) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:18:40 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, 0x0, 0x0) 16:18:40 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "1dd7e27187f0e355d937bab8b4091551f99523790b90aba178963564fe2e23ed8cb430d372b309cdd91346be254a40637faabee6339667c8a53e61c30b723357", 0x36}, 0x48, 0x0) r1 = add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="30043c8d8ba4e07d2720dbfcc9ee804ce57c013360bdcdc1b6", 0x19, 0xfffffffffffffffb) keyctl$reject(0x13, r0, 0x0, 0x7fffffff, r1) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000380)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "f82a5ba671a3f4c740888b6561168345af4ffce898405c352a052c55114faebe0f64244ace8e5c4aedd9efd7b54e780efef2209c1afa3281b68a274f4c838062"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r5, 0x0) sendfile(r4, r2, 0x0, 0x40100000000) 16:18:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 1835.536684] FAULT_INJECTION: forcing a failure. [ 1835.536684] name failslab, interval 1, probability 0, space 0, times 0 [ 1835.537533] CPU: 0 PID: 12761 Comm: syz-executor.3 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1835.538071] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1835.538621] Call Trace: [ 1835.538802] [ 1835.538963] dump_stack_lvl+0xc1/0xf0 [ 1835.539236] should_fail_ex+0x4b4/0x5b0 [ 1835.539528] ? iter_file_splice_write+0x162/0xcb0 [ 1835.539865] should_failslab+0x9/0x20 [ 1835.540138] __kmem_cache_alloc_node+0x66/0x310 [ 1835.540465] ? ktime_get_coarse_real_ts64+0x15d/0x190 [ 1835.540827] ? iter_file_splice_write+0x162/0xcb0 [ 1835.541162] ? iter_file_splice_write+0x162/0xcb0 [ 1835.541492] __kmalloc+0x4d/0x160 [ 1835.541743] iter_file_splice_write+0x162/0xcb0 [ 1835.542059] ? splice_folio_into_pipe+0x496/0x580 [ 1835.542414] ? touch_atime+0x95/0x590 [ 1835.542687] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1835.543051] ? security_file_permission+0xb5/0xe0 [ 1835.543390] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1835.543740] direct_splice_actor+0x119/0x180 [ 1835.544043] splice_direct_to_actor+0x349/0x9d0 [ 1835.544369] ? __pfx_direct_splice_actor+0x10/0x10 [ 1835.544706] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1835.545052] ? security_file_permission+0xb5/0xe0 [ 1835.545391] do_splice_direct+0x1bb/0x290 [ 1835.545677] ? __pfx_do_splice_direct+0x10/0x10 [ 1835.545994] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1835.546357] ? lock_is_held_type+0x9f/0x120 [ 1835.546669] do_sendfile+0xb67/0x1300 [ 1835.546948] ? __pfx_do_sendfile+0x10/0x10 [ 1835.547248] __x64_sys_sendfile64+0x1d5/0x210 [ 1835.547564] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1835.547906] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1835.548263] do_syscall_64+0x3f/0x90 [ 1835.548525] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1835.548884] RIP: 0033:0x7f83ebaa5b19 [ 1835.549140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1835.550280] RSP: 002b:00007f83e8ffa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1835.550785] RAX: ffffffffffffffda RBX: 00007f83ebbb9020 RCX: 00007f83ebaa5b19 [ 1835.551251] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1835.551708] RBP: 00007f83e8ffa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1835.552166] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 1835.552623] R13: 00007ffce6e20e1f R14: 00007f83e8ffa300 R15: 0000000000022000 [ 1835.553101] 16:18:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) (fail_nth: 17) 16:18:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) 16:18:55 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:18:55 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x30000) fallocate(r1, 0x5, 0x200, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) openat(r3, &(0x7f0000000000)='./file1\x00', 0x0, 0x85) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r2, 0x0, 0xfffffdef) r4 = syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x5, 0x6, &(0x7f0000000600)=[{&(0x7f0000000180)="473a2cbac9124cc0badc49546fb13c1d78c5b9bce8f4a1c107e3", 0x1a, 0x7}, {&(0x7f00000001c0)="f355d4b9d948ba5d11b6279b523aa147de92462692b98bdd03ede18ac92eefeaf10420fac339475880e267f44d85f2b77a9181", 0x33, 0x1000}, {&(0x7f0000000240)="53a743e1f5884e0ac8ef91bc6e23ba84c983df40339f28b1ef6c9453fd1b25b4ce9d6688ede244cb853aa8529a136845a0e412403339bafaad10bc13467b33c6e507cd8b0772a976c63dfa20e7479e1edd7bba4b57af17338a3da45cabbaf4f0dc9121", 0x63, 0x1}, {&(0x7f0000000380)="dd2960446702c2be7fec6b2529cb9ff7391577bea862c3a01f217faea36acb2aae22fe06fcee0b064737515569c5ae72f9dfdbca93b387625a7c8d8a19c050de99b0c1036d3da30b25656ced38e4d3a25f7fe2568f0d00b90cfb6b7b301639c20b3c03015621c1d3c11123b492f09d9580abe1235da593915777635c2688f9ae567dcb64a3a3b8ec63a308d9a3f761c8086a5d8e93c708bf2aa39ed7c80b24d24d2dd6c97d9cd9700b942bf907c37e2514b8f3ef0c22a63fa320927cf9d7f5c1ad49e3e107a59b25259cc67b40cc4bdfc1c6fbea30a3fe6ac87ba88d1e0a", 0xde, 0x800}, {&(0x7f00000002c0)="9f33a86e06d536acfa8e965eb5968cd2849d69e80f4e9be3de880efd39c7d3cec8444a", 0x23, 0x5}, {&(0x7f0000000480)="e320ae8d05992c9df050048533d1c629d6e48577c10c5de011da05a7263422edfd1fe9a803891b278ac6828dfebbc0468ebf63ca113a3154345ce4513c381809aca41043c1fcc49e737e31d4edf07868c4ed3f9ad0c338ec631bd1ec13b7ce5d73b102796d30cb3be870934349e097fe", 0x70, 0x4}], 0x10024, &(0x7f00000006c0)={[{@map_acorn}], [{@obj_role={'obj_role', 0x3d, '/dev/snd/timer\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x38, 0x66, 0x61, 0x32, 0x34, 0x32, 0x32], 0x2d, [0x63, 0x32, 0x65, 0x62], 0x2d, [0x37, 0x34, 0x32, 0x72], 0x2d, [0x37, 0x66, 0x33, 0x31], 0x2d, [0x65, 0x39, 0x31, 0x30, 0x37, 0x0, 0x36, 0x32]}}}, {@subj_user={'subj_user', 0x3d, 'tmpfs\x00'}}, {@context={'context', 0x3d, 'system_u'}}]}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000300)=@v2={0x2, @aes128, 0x3, '\x00', @c}) 16:18:55 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) unlinkat(r0, &(0x7f0000000000)='./file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000240)='Z', 0x1, 0xbcd9) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000140)) write(r3, &(0x7f0000000200)='E', 0x140000) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:18:55 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 34) 16:18:55 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:18:55 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "1dd7e27187f0e355d937bab8b4091551f99523790b90aba178963564fe2e23ed8cb430d372b309cdd91346be254a40637faabee6339667c8a53e61c30b723357", 0x36}, 0x48, 0x0) r1 = add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="30043c8d8ba4e07d2720dbfcc9ee804ce57c013360bdcdc1b6", 0x19, 0xfffffffffffffffb) keyctl$reject(0x13, r0, 0x0, 0x7fffffff, r1) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000380)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) socket$nl_xfrm(0x10, 0x3, 0x6) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "f82a5ba671a3f4c740888b6561168345af4ffce898405c352a052c55114faebe0f64244ace8e5c4aedd9efd7b54e780efef2209c1afa3281b68a274f4c838062"}, 0x48, 0xffffffffffffffff) sendfile(r4, r2, 0x0, 0x40100000000) [ 1850.547236] syz-executor.2[12794]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1850.570698] loop2: detected capacity change from 0 to 16 16:18:55 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 1850.798787] FAULT_INJECTION: forcing a failure. [ 1850.798787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1850.800805] CPU: 1 PID: 12777 Comm: syz-executor.7 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1850.801845] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1850.802922] Call Trace: [ 1850.803272] [ 1850.803580] dump_stack_lvl+0xc1/0xf0 [ 1850.804101] should_fail_ex+0x4b4/0x5b0 [ 1850.804656] _copy_to_user+0x30/0xc0 [ 1850.805193] simple_read_from_buffer+0xd0/0x170 [ 1850.805792] proc_fail_nth_read+0x1a6/0x290 [ 1850.806399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1850.807063] ? security_file_permission+0xb5/0xe0 [ 1850.807685] vfs_read+0x1de/0x8f0 [ 1850.808177] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1850.808813] ? __pfx_vfs_read+0x10/0x10 [ 1850.809358] ? __fget_files+0x267/0x480 [ 1850.809916] ksys_read+0x122/0x250 [ 1850.810417] ? __pfx_ksys_read+0x10/0x10 [ 1850.810988] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1850.811704] do_syscall_64+0x3f/0x90 [ 1850.812212] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1850.812900] RIP: 0033:0x7f4d75d7069c [ 1850.813405] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1850.815733] RSP: 002b:00007f4d73333170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1850.816707] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f4d75d7069c [ 1850.817636] RDX: 000000000000000f RSI: 00007f4d733331e0 RDI: 0000000000000004 [ 1850.818555] RBP: 00007f4d733331d0 R08: 0000000000000000 R09: 0000000000000000 [ 1850.819472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1850.820391] R13: 00007fff9d8d04af R14: 00007f4d73333300 R15: 0000000000022000 [ 1850.821338] [ 1851.255349] syz-executor.2[12794]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1851.270260] loop2: detected capacity change from 0 to 16 16:19:09 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000000)='E', 0x1) sendfile(r0, r1, 0x0, 0xfffffdef) 16:19:09 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x100000000, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="be3cb73e66f05b7aadf1847378028d3eda58", 0x12, 0x2}], 0x222042a, &(0x7f0000000240)={[{@nonumtail}, {@numtail}, {@utf8no}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@utf8}, {@utf8}, {@utf8no}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user}, {@obj_role={'obj_role', 0x3d, '*^%+&--(/#.:@{/'}}, {@uid_lt}, {@smackfsdef={'smackfsdef', 0x3d, 'tmpfs\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'tmpfs\x00'}}, {@smackfsfloor}, {@permit_directio}]}) r3 = openat(r2, &(0x7f0000000040)='./file1\x00', 0xc40c2, 0x100) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0x3) 16:19:09 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "1dd7e27187f0e355d937bab8b4091551f99523790b90aba178963564fe2e23ed8cb430d372b309cdd91346be254a40637faabee6339667c8a53e61c30b723357", 0x36}, 0x48, 0x0) r1 = add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="30043c8d8ba4e07d2720dbfcc9ee804ce57c013360bdcdc1b6", 0x19, 0xfffffffffffffffb) keyctl$reject(0x13, r0, 0x0, 0x7fffffff, r1) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000380)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r4, r2, 0x0, 0x40100000000) 16:19:09 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 35) 16:19:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) 16:19:09 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) 16:19:09 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:19:09 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 1865.051670] syz-executor.2[12822]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1865.073162] loop2: detected capacity change from 0 to 264192 16:19:09 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) [ 1865.126606] syz-executor.2[12822]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 16:19:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) 16:19:10 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x12, 0x0, 0x88014, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = accept$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) fallocate(r2, 0x4, 0x8, 0xff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 1865.258257] FAULT_INJECTION: forcing a failure. [ 1865.258257] name failslab, interval 1, probability 0, space 0, times 0 [ 1865.259872] CPU: 1 PID: 12829 Comm: syz-executor.3 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1865.260963] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1865.262015] Call Trace: [ 1865.262364] [ 1865.262686] dump_stack_lvl+0xc1/0xf0 [ 1865.263221] should_fail_ex+0x4b4/0x5b0 [ 1865.263796] ? iter_file_splice_write+0x162/0xcb0 [ 1865.264452] should_failslab+0x9/0x20 [ 1865.264982] __kmem_cache_alloc_node+0x66/0x310 [ 1865.265629] ? ktime_get_coarse_real_ts64+0x15d/0x190 [ 1865.266331] ? iter_file_splice_write+0x162/0xcb0 [ 1865.267001] ? iter_file_splice_write+0x162/0xcb0 [ 1865.267664] __kmalloc+0x4d/0x160 [ 1865.268157] iter_file_splice_write+0x162/0xcb0 [ 1865.268805] ? splice_folio_into_pipe+0x496/0x580 [ 1865.269476] ? touch_atime+0x95/0x590 [ 1865.270013] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1865.270760] ? security_file_permission+0xb5/0xe0 [ 1865.271431] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1865.272213] direct_splice_actor+0x119/0x180 [ 1865.272867] splice_direct_to_actor+0x349/0x9d0 [ 1865.273543] ? __pfx_direct_splice_actor+0x10/0x10 [ 1865.274278] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1865.274988] ? security_file_permission+0xb5/0xe0 [ 1865.275736] do_splice_direct+0x1bb/0x290 [ 1865.276308] ? __pfx_do_splice_direct+0x10/0x10 [ 1865.276952] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1865.277674] ? lock_is_held_type+0x9f/0x120 [ 1865.278319] do_sendfile+0xb67/0x1300 [ 1865.278975] ? __pfx_do_sendfile+0x10/0x10 [ 1865.279637] __x64_sys_sendfile64+0x1d5/0x210 [ 1865.280292] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1865.280982] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1865.281697] do_syscall_64+0x3f/0x90 [ 1865.282276] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1865.283027] RIP: 0033:0x7f83ebaa5b19 [ 1865.283535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1865.286007] RSP: 002b:00007f83e8ffa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1865.287125] RAX: ffffffffffffffda RBX: 00007f83ebbb9020 RCX: 00007f83ebaa5b19 [ 1865.288123] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1865.289110] RBP: 00007f83e8ffa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1865.290021] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 1865.291055] R13: 00007ffce6e20e1f R14: 00007f83e8ffa300 R15: 0000000000022000 [ 1865.292013] 16:19:10 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:19:10 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "1dd7e27187f0e355d937bab8b4091551f99523790b90aba178963564fe2e23ed8cb430d372b309cdd91346be254a40637faabee6339667c8a53e61c30b723357", 0x36}, 0x48, 0x0) r1 = add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="30043c8d8ba4e07d2720dbfcc9ee804ce57c013360bdcdc1b6", 0x19, 0xfffffffffffffffb) keyctl$reject(0x13, r0, 0x0, 0x7fffffff, r1) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000380)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) sendfile(r4, r2, 0x0, 0x40100000000) 16:19:10 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) 16:19:10 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 36) 16:19:23 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) fallocate(r0, 0x0, 0x3f, 0x8) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:19:23 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) 16:19:23 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) 16:19:23 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:19:23 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0x2, 0x0, 0x0) 16:19:23 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "1dd7e27187f0e355d937bab8b4091551f99523790b90aba178963564fe2e23ed8cb430d372b309cdd91346be254a40637faabee6339667c8a53e61c30b723357", 0x36}, 0x48, 0x0) r1 = add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="30043c8d8ba4e07d2720dbfcc9ee804ce57c013360bdcdc1b6", 0x19, 0xfffffffffffffffb) keyctl$reject(0x13, r0, 0x0, 0x7fffffff, r1) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000380)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r2, 0x0, 0x40100000000) 16:19:23 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) symlinkat(&(0x7f0000000000)='./file1\x00', r1, &(0x7f0000000080)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r2, 0x0, 0xfffffdef) 16:19:23 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 37) [ 1879.327237] FAULT_INJECTION: forcing a failure. [ 1879.327237] name failslab, interval 1, probability 0, space 0, times 0 [ 1879.328247] CPU: 0 PID: 12875 Comm: syz-executor.3 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1879.328780] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1879.329312] Call Trace: [ 1879.329491] [ 1879.329655] dump_stack_lvl+0xc1/0xf0 [ 1879.329926] should_fail_ex+0x4b4/0x5b0 [ 1879.330212] ? iter_file_splice_write+0x162/0xcb0 [ 1879.330545] should_failslab+0x9/0x20 [ 1879.330816] __kmem_cache_alloc_node+0x66/0x310 [ 1879.331160] ? ktime_get_coarse_real_ts64+0x15d/0x190 [ 1879.331519] ? iter_file_splice_write+0x162/0xcb0 [ 1879.331855] ? iter_file_splice_write+0x162/0xcb0 [ 1879.332187] __kmalloc+0x4d/0x160 [ 1879.332436] iter_file_splice_write+0x162/0xcb0 [ 1879.332769] ? splice_folio_into_pipe+0x496/0x580 [ 1879.333102] ? touch_atime+0x95/0x590 [ 1879.333380] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1879.333748] ? security_file_permission+0xb5/0xe0 [ 1879.334092] ? __pfx_iter_file_splice_write+0x10/0x10 16:19:24 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "1dd7e27187f0e355d937bab8b4091551f99523790b90aba178963564fe2e23ed8cb430d372b309cdd91346be254a40637faabee6339667c8a53e61c30b723357", 0x36}, 0x48, 0x0) r1 = add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="30043c8d8ba4e07d2720dbfcc9ee804ce57c013360bdcdc1b6", 0x19, 0xfffffffffffffffb) keyctl$reject(0x13, r0, 0x0, 0x7fffffff, r1) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000380)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r2, 0x0, 0x40100000000) [ 1879.334452] direct_splice_actor+0x119/0x180 [ 1879.334958] splice_direct_to_actor+0x349/0x9d0 [ 1879.335288] ? __pfx_direct_splice_actor+0x10/0x10 [ 1879.335633] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1879.335986] ? security_file_permission+0xb5/0xe0 [ 1879.336329] do_splice_direct+0x1bb/0x290 [ 1879.336618] ? __pfx_do_splice_direct+0x10/0x10 [ 1879.336937] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1879.337293] ? lock_is_held_type+0x9f/0x120 [ 1879.337600] do_sendfile+0xb67/0x1300 [ 1879.337878] ? __pfx_do_sendfile+0x10/0x10 [ 1879.338179] __x64_sys_sendfile64+0x1d5/0x210 [ 1879.338498] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1879.338851] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1879.339221] do_syscall_64+0x3f/0x90 [ 1879.339481] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1879.339847] RIP: 0033:0x7f83ebaa5b19 [ 1879.340099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1879.341296] RSP: 002b:00007f83e901b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1879.341834] RAX: ffffffffffffffda RBX: 00007f83ebbb8f60 RCX: 00007f83ebaa5b19 [ 1879.342329] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1879.342821] RBP: 00007f83e901b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1879.343318] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 1879.343818] R13: 00007ffce6e20e1f R14: 00007f83e901b300 R15: 0000000000022000 [ 1879.344326] 16:19:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:19:24 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 38) 16:19:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) 16:19:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:19:24 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) 16:19:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:19:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) 16:19:36 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 39) 16:19:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x14}}, 0x0) 16:19:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:19:36 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000)=0x2) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:19:36 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:19:36 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) openat(r3, &(0x7f00000000c0)='./file1\x00', 0x28001, 0xa0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x101000, 0x100) mkdirat(r4, &(0x7f0000000080)='./file1\x00', 0x178) 16:19:36 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0x5, 0x0, 0x0) 16:19:36 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "1dd7e27187f0e355d937bab8b4091551f99523790b90aba178963564fe2e23ed8cb430d372b309cdd91346be254a40637faabee6339667c8a53e61c30b723357", 0x36}, 0x48, 0x0) r1 = add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="30043c8d8ba4e07d2720dbfcc9ee804ce57c013360bdcdc1b6", 0x19, 0xfffffffffffffffb) keyctl$reject(0x13, r0, 0x0, 0x7fffffff, r1) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000380)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r2, 0x0, 0x40100000000) 16:19:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:19:36 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "1dd7e27187f0e355d937bab8b4091551f99523790b90aba178963564fe2e23ed8cb430d372b309cdd91346be254a40637faabee6339667c8a53e61c30b723357", 0x36}, 0x48, 0x0) r1 = add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="30043c8d8ba4e07d2720dbfcc9ee804ce57c013360bdcdc1b6", 0x19, 0xfffffffffffffffb) keyctl$reject(0x13, r0, 0x0, 0x7fffffff, r1) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000380)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffff8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) sendfile(r3, r2, 0x0, 0x40100000000) 16:19:36 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:19:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x14}}, 0x0) 16:19:36 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 40) 16:19:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200), 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:19:37 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "1dd7e27187f0e355d937bab8b4091551f99523790b90aba178963564fe2e23ed8cb430d372b309cdd91346be254a40637faabee6339667c8a53e61c30b723357", 0x36}, 0x48, 0x0) r1 = add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="30043c8d8ba4e07d2720dbfcc9ee804ce57c013360bdcdc1b6", 0x19, 0xfffffffffffffffb) keyctl$reject(0x13, r0, 0x0, 0x7fffffff, r1) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000380)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffff8) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) sendfile(r3, r2, 0x0, 0x40100000000) 16:19:37 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0x9, 0x0, 0x0) [ 1892.682881] FAULT_INJECTION: forcing a failure. [ 1892.682881] name failslab, interval 1, probability 0, space 0, times 0 [ 1892.684731] CPU: 1 PID: 12947 Comm: syz-executor.3 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1892.685742] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1892.686729] Call Trace: [ 1892.687095] [ 1892.687396] dump_stack_lvl+0xc1/0xf0 [ 1892.687895] should_fail_ex+0x4b4/0x5b0 [ 1892.688440] ? iter_file_splice_write+0x162/0xcb0 [ 1892.689051] should_failslab+0x9/0x20 [ 1892.689556] __kmem_cache_alloc_node+0x66/0x310 [ 1892.690183] ? iter_file_splice_write+0x162/0xcb0 [ 1892.690822] ? iter_file_splice_write+0x162/0xcb0 [ 1892.691466] __kmalloc+0x4d/0x160 [ 1892.691939] iter_file_splice_write+0x162/0xcb0 [ 1892.692548] ? lock_is_held_type+0x9f/0x120 [ 1892.693131] ? touch_atime+0x2da/0x590 [ 1892.693656] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1892.694341] ? security_file_permission+0xb5/0xe0 [ 1892.694981] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1892.695661] direct_splice_actor+0x119/0x180 [ 1892.696240] splice_direct_to_actor+0x349/0x9d0 [ 1892.696856] ? __pfx_direct_splice_actor+0x10/0x10 [ 1892.697508] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1892.698171] ? security_file_permission+0xb5/0xe0 [ 1892.698817] do_splice_direct+0x1bb/0x290 [ 1892.699372] ? __pfx_do_splice_direct+0x10/0x10 [ 1892.699983] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1892.700653] ? lock_is_held_type+0x9f/0x120 [ 1892.701224] do_sendfile+0xb67/0x1300 [ 1892.701750] ? __pfx_do_sendfile+0x10/0x10 [ 1892.702318] __x64_sys_sendfile64+0x1d5/0x210 [ 1892.702919] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1892.703590] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1892.704274] do_syscall_64+0x3f/0x90 [ 1892.704763] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1892.705431] RIP: 0033:0x7f83ebaa5b19 [ 1892.705916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1892.708118] RSP: 002b:00007f83e8ffa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1892.709058] RAX: ffffffffffffffda RBX: 00007f83ebbb9020 RCX: 00007f83ebaa5b19 [ 1892.709934] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1892.710822] RBP: 00007f83e8ffa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1892.711701] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 1892.712581] R13: 00007ffce6e20e1f R14: 00007f83e8ffa300 R15: 0000000000022000 [ 1892.713495] 16:19:50 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200), 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:19:50 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:19:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xf, 0x0, 0x0) 16:19:50 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 41) 16:19:50 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "1dd7e27187f0e355d937bab8b4091551f99523790b90aba178963564fe2e23ed8cb430d372b309cdd91346be254a40637faabee6339667c8a53e61c30b723357", 0x36}, 0x48, 0x0) r1 = add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="30043c8d8ba4e07d2720dbfcc9ee804ce57c013360bdcdc1b6", 0x19, 0xfffffffffffffffb) keyctl$reject(0x13, r0, 0x0, 0x7fffffff, r1) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) sendfile(r3, r2, 0x0, 0x40100000000) 16:19:50 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r2, 0x0, 0xfffffdef) 16:19:50 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x14}}, 0x0) 16:19:50 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r2, 0x0, 0x1c00000000000000, 0x81}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file1/file0\x00'}) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 1906.034891] FAULT_INJECTION: forcing a failure. [ 1906.034891] name failslab, interval 1, probability 0, space 0, times 0 [ 1906.035970] CPU: 1 PID: 12959 Comm: syz-executor.3 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1906.036509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1906.037059] Call Trace: [ 1906.037250] [ 1906.037413] dump_stack_lvl+0xc1/0xf0 [ 1906.037697] should_fail_ex+0x4b4/0x5b0 [ 1906.037994] ? iter_file_splice_write+0x162/0xcb0 [ 1906.038349] should_failslab+0x9/0x20 [ 1906.038638] __kmem_cache_alloc_node+0x66/0x310 [ 1906.038985] ? iter_file_splice_write+0x162/0xcb0 [ 1906.039349] ? iter_file_splice_write+0x162/0xcb0 [ 1906.039700] __kmalloc+0x4d/0x160 [ 1906.039966] iter_file_splice_write+0x162/0xcb0 [ 1906.040309] ? lock_is_held_type+0x9f/0x120 [ 1906.040627] ? touch_atime+0x2da/0x590 [ 1906.040930] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1906.041322] ? security_file_permission+0xb5/0xe0 [ 1906.041681] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1906.042050] direct_splice_actor+0x119/0x180 [ 1906.042376] splice_direct_to_actor+0x349/0x9d0 [ 1906.042697] ? __pfx_direct_splice_actor+0x10/0x10 [ 1906.043038] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1906.043391] ? security_file_permission+0xb5/0xe0 [ 1906.043735] do_splice_direct+0x1bb/0x290 [ 1906.044020] ? __pfx_do_splice_direct+0x10/0x10 [ 1906.044335] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1906.044686] ? lock_is_held_type+0x9f/0x120 [ 1906.044993] do_sendfile+0xb67/0x1300 [ 1906.045270] ? __pfx_do_sendfile+0x10/0x10 [ 1906.045593] __x64_sys_sendfile64+0x1d5/0x210 [ 1906.045915] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1906.046289] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1906.046674] do_syscall_64+0x3f/0x90 [ 1906.046958] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1906.047332] RIP: 0033:0x7f83ebaa5b19 [ 1906.047601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1906.048841] RSP: 002b:00007f83e901b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1906.049373] RAX: ffffffffffffffda RBX: 00007f83ebbb8f60 RCX: 00007f83ebaa5b19 [ 1906.049874] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1906.050381] RBP: 00007f83e901b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1906.050893] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002 [ 1906.051369] R13: 00007ffce6e20e1f R14: 00007f83e901b300 R15: 0000000000022000 [ 1906.051884] 16:19:50 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 42) 16:19:50 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) 16:19:51 executing program 1: chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:19:51 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "1dd7e27187f0e355d937bab8b4091551f99523790b90aba178963564fe2e23ed8cb430d372b309cdd91346be254a40637faabee6339667c8a53e61c30b723357", 0x36}, 0x48, 0x0) r1 = add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="30043c8d8ba4e07d2720dbfcc9ee804ce57c013360bdcdc1b6", 0x19, 0xfffffffffffffffb) keyctl$reject(0x13, r0, 0x0, 0x7fffffff, r1) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) sendfile(r3, r2, 0x0, 0x40100000000) 16:19:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200), 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:19:51 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 43) 16:19:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) 16:19:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0x10, 0x0, 0x0) 16:19:51 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 44) 16:19:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 16:19:51 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "1dd7e27187f0e355d937bab8b4091551f99523790b90aba178963564fe2e23ed8cb430d372b309cdd91346be254a40637faabee6339667c8a53e61c30b723357", 0x36}, 0x48, 0x0) r1 = add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="30043c8d8ba4e07d2720dbfcc9ee804ce57c013360bdcdc1b6", 0x19, 0xfffffffffffffffb) keyctl$reject(0x13, r0, 0x0, 0x7fffffff, r1) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) sendfile(r3, r2, 0x0, 0x40100000000) 16:19:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0x11, 0x0, 0x0) 16:19:51 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000000), &(0x7f0000000080)=@md5={0x1, "f017548599ce126d9877501d3eff2c07"}, 0x11, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20c081, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r2, 0x0, 0xfffffdef) 16:19:51 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 45) 16:19:52 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0x2d, 0x0, 0x0) 16:19:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) 16:19:52 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "1dd7e27187f0e355d937bab8b4091551f99523790b90aba178963564fe2e23ed8cb430d372b309cdd91346be254a40637faabee6339667c8a53e61c30b723357", 0x36}, 0x48, 0x0) r1 = add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="30043c8d8ba4e07d2720dbfcc9ee804ce57c013360bdcdc1b6", 0x19, 0xfffffffffffffffb) keyctl$reject(0x13, r0, 0x0, 0x7fffffff, r1) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) sendfile(r2, 0xffffffffffffffff, 0x0, 0x40100000000) 16:19:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 16:20:07 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) (fail_nth: 46) 16:20:07 executing program 1: chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:20:07 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x1008000, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@replay_thresh={0x8, 0xb, 0xfff}]}, 0xc8}}, 0x0) sendfile(r0, r2, 0x0, 0xfffffdef) 16:20:07 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x8, 0x0, 0x0, 0x80418, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x20) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)=0x100000) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81}, {0x6}]}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0xfffffffe, 0x0, 0x0, 0x1}}, [@mark={0xc}]}, 0xcc}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000140)={0x0, r0, 0x0, 0xffffffff7fffffff, 0x454, 0x4}) sendfile(r1, r3, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x0, 0x6}}, './file1\x00'}) 16:20:07 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 16:20:07 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0x63, 0x0, 0x0) 16:20:07 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "1dd7e27187f0e355d937bab8b4091551f99523790b90aba178963564fe2e23ed8cb430d372b309cdd91346be254a40637faabee6339667c8a53e61c30b723357", 0x36}, 0x48, 0x0) r1 = add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="30043c8d8ba4e07d2720dbfcc9ee804ce57c013360bdcdc1b6", 0x19, 0xfffffffffffffffb) keyctl$reject(0x13, r0, 0x0, 0x7fffffff, r1) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) sendfile(r2, 0xffffffffffffffff, 0x0, 0x40100000000) 16:20:07 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591d"], 0x14}}, 0x0) [ 1922.763576] audit: type=1326 audit(1692375607.556:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13030 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8755a0b19 code=0x0 16:20:07 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0x5f5e0ff, 0x0, 0x0) [ 1922.989126] FAULT_INJECTION: forcing a failure. [ 1922.989126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1922.991215] CPU: 0 PID: 13050 Comm: syz-executor.3 Not tainted 6.5.0-rc6-next-20230818 #1 [ 1922.992271] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1922.993319] Call Trace: [ 1922.993672] [ 1922.993990] dump_stack_lvl+0xc1/0xf0 [ 1922.994522] should_fail_ex+0x4b4/0x5b0 [ 1922.995098] _copy_from_user+0x30/0xf0 [ 1922.995666] kstrtouint_from_user+0xb0/0x170 [ 1922.996278] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1922.996974] ? lock_acquire+0x19a/0x4c0 [ 1922.997524] ? ksys_write+0x122/0x250 [ 1922.998073] proc_fail_nth_write+0x7d/0x270 [ 1922.998651] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1922.999311] ? lock_is_held_type+0x9f/0x120 [ 1922.999961] vfs_write+0x2b9/0xda0 [ 1923.000566] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1923.001266] ? __pfx_vfs_write+0x10/0x10 [ 1923.001853] ? __fget_files+0x267/0x480 [ 1923.002436] ksys_write+0x122/0x250 [ 1923.002966] ? __pfx_ksys_write+0x10/0x10 [ 1923.003575] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1923.004316] do_syscall_64+0x3f/0x90 [ 1923.004851] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1923.005573] RIP: 0033:0x7f83eba585ff [ 1923.006092] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1923.008583] RSP: 002b:00007f83e8ffa170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1923.009595] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f83eba585ff [ 1923.010533] RDX: 0000000000000001 RSI: 00007f83e8ffa1e0 RDI: 0000000000000007 [ 1923.011497] RBP: 00007f83e8ffa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1923.012436] R10: 00000000fffffdef R11: 0000000000000293 R12: 0000000000000002 [ 1923.013380] R13: 00007ffce6e20e1f R14: 00007f83e8ffa300 R15: 0000000000022000 [ 1923.014368] 16:20:07 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "1dd7e27187f0e355d937bab8b4091551f99523790b90aba178963564fe2e23ed8cb430d372b309cdd91346be254a40637faabee6339667c8a53e61c30b723357", 0x36}, 0x48, 0x0) r1 = add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="30043c8d8ba4e07d2720dbfcc9ee804ce57c013360bdcdc1b6", 0x19, 0xfffffffffffffffb) keyctl$reject(0x13, r0, 0x0, 0x7fffffff, r1) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) sendfile(r2, 0xffffffffffffffff, 0x0, 0x40100000000) 16:20:07 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes256, 0x0, @desc3}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x6, 0x1f, 0x4, 0xffffffff, 0x3}, {0x8, 0x3, 0x6, 0x3, 0x80, 0xc00000}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg$nl_xfrm(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x25dfdbff, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2d0048dbdee6b832}}, [@mark={0xc}]}, 0xcc}}, 0x0) r5 = accept(r0, &(0x7f0000000180)=@in, &(0x7f0000000240)=0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000600)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_xfrm(r5, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=@report={0x54, 0x20, 0x1, 0x70bd2a, 0x25dfdbff, {0xff, {@in=@multicast1, @in=@rand_addr=0x64010101, 0x4e23, 0x8001, 0x4e22, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, r6}}, [@extra_flags={0x8, 0x18, 0xffffff6f}]}, 0x54}, 0x1, 0x0, 0x0, 0x24080081}, 0x8000) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1', [{0x20, '#'}, {0x20, 'tmpfs\x00'}, {0x20, 'tmpfs\x00'}, {0x20, 'tmpfs\x00'}], 0xa, "ad5fa57a0a49b45366f182f1faf55cb961f59d468f0d185e3187081384c0bb9c6534372c89887203064811a679b81a199743e8e036e7b3f170aaf5b0a1c8a7528f6d0bd45c5345ceafae7a41dc324590967ca17b3237"}, 0x78) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:20:07 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:20:07 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 16:20:07 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591d"], 0x14}}, 0x0) [ 1923.595995] audit: type=1326 audit(1692375608.387:17): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13030 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8755a0b19 code=0x0 16:20:25 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:20:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) 16:20:25 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) r1 = fcntl$dupfd(r0, 0x0, r0) renameat2(r1, &(0x7f0000000000)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x3) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) sendfile(r2, r3, 0x0, 0xfffffdef) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) ioctl$FICLONE(r5, 0x40049409, r0) 16:20:25 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = syz_io_uring_complete(0x0) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000800)) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xff, 0x81, 0x7, 0x5, 0x0, 0x8, 0x18800, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000740), 0x4}, 0x8, 0x8, 0x1, 0x7, 0x3, 0x8001, 0x100, 0x0, 0x3, 0x0, 0x9}, 0x0, 0x2, r0, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0xabcd, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000240)="ce188c292dab666cbda137cfc79906425927af2d30fc21754079602b142567993766edd6d19c4cd4e67f3c8521f3592b68b992837e8cc91a7c326f9d389294fe2e558996e2e37b8a903a16b7b8ef4e4eb9ceecb2795d69b5485ee20e6afd370f736126da09b6c61db615889ab24665fc59913fddb61272d29aa27dce04d1912d4d953a399ed5890165317c39be7f4e1cf2c6e5b162ee0eff3e6bb6fd74083624dbe3f932be28913129a1e9761b6e0e49c3734f78ec6cc5af46ef916ec39592234be0acf172546d77356af1addfaaeb", 0xcf, 0x3ff}], 0x8000, &(0x7f0000000140)={[{}, {'#['}, {'*&/'}, {'tmpfs\x00'}, {'tmpfs\x00'}, {'tmpfs\x00'}, {'tmpfs\x00'}, {}, {':){+6'}, {'&:'}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@measure}, {@fowner_gt={'fowner>', 0xee01}}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f00000003c0)='./file1\x00', 0x19, 0x1, &(0x7f0000000500)=[{&(0x7f0000000400)="91e3f64ae0cbcb2f56311709e3806d1951822857d85f249dbd36a291c15e377af8d597e8c7151114037773d2a8da2cd5c7949f377b2c867c3f91912ff1ec0ff976ca1027f13bd084e909f83297c624eebde68ff236dd3d0edf8ff040f728fd9c584565c513c94017ba0d5734bb8a5fc60b93878277dc91fa3a71ab54ac67ca572d79c7de7e245db67abda9c445d219e2d259dc4fbb7bb07c4257a255a51e97baef6f5350cadb5936a36f8af4257726cabb39676ac118631444862f10d265abe45345c39e342a", 0xc6, 0x68e0}], 0x802820, &(0x7f0000000600)={[{@shortname_win95}, {@rodir}, {@rodir}, {@shortname_lower}, {@uni_xlate}, {@uni_xlate}], [{@fsname={'fsname', 0x3d, '(u}'}}, {@pcr={'pcr', 0x3d, 0x9}}, {@smackfstransmute={'smackfstransmute', 0x3d, ',\xbe'}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':){+6'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}) fallocate(r2, 0x0, 0x4, 0x7) fallocate(r2, 0x43, 0x20, 0x80000001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) rename(&(0x7f0000000540)='./file1\x00', &(0x7f0000000700)='./file1\x00') write(r4, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r3, 0x0, 0xfffffdef) 16:20:25 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:20:25 executing program 1: chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:20:25 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "1dd7e27187f0e355d937bab8b4091551f99523790b90aba178963564fe2e23ed8cb430d372b309cdd91346be254a40637faabee6339667c8a53e61c30b723357", 0x36}, 0x48, 0x0) r1 = add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="30043c8d8ba4e07d2720dbfcc9ee804ce57c013360bdcdc1b6", 0x19, 0xfffffffffffffffb) keyctl$reject(0x13, r0, 0x0, 0x7fffffff, r1) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) sendfile(r3, r2, 0x0, 0x40100000000) 16:20:25 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591d"], 0x14}}, 0x0) [ 1940.460496] syz-executor.2[13091]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1940.479073] loop2: detected capacity change from 0 to 85 [ 1940.491530] nfs: Unknown parameter '#[' 16:20:25 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591df5d2797f01c245a53cbaac38beb67ec8543ee1fc76da389a2f521469702a87c3b5af9d215c17efc51425aad48737389caf265ffa46a739ff985065b4478c2cc0a581cd"], 0x14}}, 0x0) [ 1940.557628] syz-executor.2[13091]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1940.585050] loop2: detected capacity change from 0 to 104 16:20:25 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x5, 0x20, 0x40, 0x5, 0x0, 0x6, 0x200, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4b55ed20aaf39dc8, @perf_bp={&(0x7f0000000000), 0x4}, 0x8000, 0x1ff, 0xa4, 0x4, 0xfffffffffffffffa, 0x219de9ea, 0x9, 0x0, 0x8, 0x0, 0x1}, r3, 0xf, r1, 0x8) 16:20:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4, 0x0) 16:20:25 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "1dd7e27187f0e355d937bab8b4091551f99523790b90aba178963564fe2e23ed8cb430d372b309cdd91346be254a40637faabee6339667c8a53e61c30b723357", 0x36}, 0x48, 0x0) r1 = add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="30043c8d8ba4e07d2720dbfcc9ee804ce57c013360bdcdc1b6", 0x19, 0xfffffffffffffffb) keyctl$reject(0x13, r0, 0x0, 0x7fffffff, r1) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) sendfile(r3, r2, 0x0, 0x40100000000) 16:20:25 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:20:25 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x3105418, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xc0003, 0x0) openat(r3, &(0x7f0000000080)='./file1\x00', 0x200000, 0x40) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) sendfile(r0, r1, 0x0, 0xfffffdef) getdents(r0, &(0x7f00000000c0)=""/46, 0x2e) 16:20:25 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "1dd7e27187f0e355d937bab8b4091551f99523790b90aba178963564fe2e23ed8cb430d372b309cdd91346be254a40637faabee6339667c8a53e61c30b723357", 0x36}, 0x48, 0x0) r1 = add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="30043c8d8ba4e07d2720dbfcc9ee804ce57c013360bdcdc1b6", 0x19, 0xfffffffffffffffb) keyctl$reject(0x13, r0, 0x0, 0x7fffffff, r1) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) sendfile(r3, r2, 0x0, 0x40100000000) 16:20:25 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591df5d2797f01c245a53cbaac38beb67ec8543ee1fc76da389a2f521469702a87c3b5af9d215c17efc51425aad48737389caf265ffa46a739ff985065b4478c2cc0a581cd"], 0x14}}, 0x0) 16:20:25 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) [ 1941.308825] syz-executor.2[13123]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 16:20:26 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0x0) [ 1941.333169] loop2: detected capacity change from 0 to 85 [ 1941.336064] nfs: Unknown parameter '#[' [ 1941.375008] syz-executor.2[13123]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1941.388411] loop2: detected capacity change from 0 to 104 16:20:41 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:20:41 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) openat(r0, &(0x7f0000000000)='./file1\x00', 0x2, 0x88) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:20:41 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2, 0x8000}}, './file1\x00'}) mknodat$loop(r1, &(0x7f0000000080)='./file1\x00', 0x4, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) sendfile(r2, r3, 0x0, 0xfffffdef) 16:20:41 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591df5d2797f01c245a53cbaac38beb67ec8543ee1fc76da389a2f521469702a87c3b5af9d215c17efc51425aad48737389caf265ffa46a739ff985065b4478c2cc0a581cd"], 0x14}}, 0x0) 16:20:41 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000001c0)='./file1\x00', 0x1, 0x0, 0x0, 0x8000, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc4042, 0x0) r3 = open$dir(&(0x7f0000000000)='./file1/file0\x00', 0x303082, 0x40) openat(r3, &(0x7f0000000240)='./file1/file0\x00', 0x284281, 0x32) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) ioctl$TIOCCBRK(r4, 0x5428) write(r2, &(0x7f0000000200)='E', 0x140000) stat(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000140)) sendfile(r0, r1, 0x0, 0xfffffdef) 16:20:41 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0x0) 16:20:41 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "1dd7e27187f0e355d937bab8b4091551f99523790b90aba178963564fe2e23ed8cb430d372b309cdd91346be254a40637faabee6339667c8a53e61c30b723357", 0x36}, 0x48, 0x0) r1 = add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="30043c8d8ba4e07d2720dbfcc9ee804ce57c013360bdcdc1b6", 0x19, 0xfffffffffffffffb) keyctl$reject(0x13, r0, 0x0, 0x7fffffff, r1) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) sendfile(r3, r2, 0x0, 0x40100000000) 16:20:41 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) 16:20:41 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x6803a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0x0) 16:20:41 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591df5d2797f01c245a53cbaac38beb67ec8543ee1fc76da389a2f521469702a87c3b5af9d215c17efc51425aad48737389caf265ffa46a739ff985065b4478c2cc0a581cd02471cb80059fcfbf9b2b1b1a6f164a6db4cc9c4b3e85bea642af74ef26797a542"], 0x14}}, 0x0) 16:20:41 executing program 0: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "1dd7e27187f0e355d937bab8b4091551f99523790b90aba178963564fe2e23ed8cb430d372b309cdd91346be254a40637faabee6339667c8a53e61c30b723357", 0x36}, 0x48, 0x0) add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="30043c8d8ba4e07d2720dbfcc9ee804ce57c013360bdcdc1b6", 0x19, 0xfffffffffffffffb) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) sendfile(r1, r0, 0x0, 0x40100000000) 16:20:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591df5d2797f01c245a53cbaac38beb67ec8543ee1fc76da389a2f521469702a87c3b5af9d215c17efc51425aad48737389caf265ffa46a739ff985065b4478c2cc0a581cd02471cb80059fcfbf9b2b1b1a6f164a6db4cc9c4b3e85bea642af74ef26797a542"], 0x14}}, 0x0) 16:20:42 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = io_uring_setup(0x6004, &(0x7f0000000080)={0x0, 0xde17, 0x0, 0x1, 0xe}) signalfd4(r2, &(0x7f0000000000)={[0x101]}, 0x8, 0x800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f0000000140)=0x5) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:20:42 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x3105418, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xc0003, 0x0) openat(r3, &(0x7f0000000080)='./file1\x00', 0x200000, 0x40) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) sendfile(r0, r1, 0x0, 0xfffffdef) getdents(r0, &(0x7f00000000c0)=""/46, 0x2e) 16:20:42 executing program 0: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "1dd7e27187f0e355d937bab8b4091551f99523790b90aba178963564fe2e23ed8cb430d372b309cdd91346be254a40637faabee6339667c8a53e61c30b723357", 0x36}, 0x48, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) sendfile(r1, r0, 0x0, 0x40100000000) 16:20:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591df5d2797f01c245a53cbaac38beb67ec8543ee1fc76da389a2f521469702a87c3b5af9d215c17efc51425aad48737389caf265ffa46a739ff985065b4478c2cc0a581cd02471cb80059fcfbf9b2b1b1a6f164a6db4cc9c4b3e85bea642af74ef26797a542"], 0x14}}, 0x0) [ 1957.867880] tmpfs: Unknown parameter './file1/file0' 16:20:55 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591df5d2797f01c245a53cbaac38beb67ec8543ee1fc76da389a2f521469702a87c3b5af9d215c17efc51425aad48737389caf265ffa46a739ff985065b4478c2cc0a581cd"], 0x14}}, 0x0) 16:20:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:20:55 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x7, 0x2, &(0x7f0000000140)=[{&(0x7f0000000240)="058032f73cc448845c694e6eadd50db5031be238c3830ff1e213cde0c9c9136424e0592464a34ea70a8c09be939be265e523117665f2c65051865ebbe6d10b5ab639775d0975cd1d5321e9ff7a61cdc21b575620051de759574c98d7324c637f69effd692db120c03d620176ada602da62f4d6a2f6fae39d35ace9734082876bbb6e543c698343c29491e5cb9d3e3ab91c112e7dcd9b0f5574e654d69893931196460c30164bc878f63120171700887e2eb96c2a778362a6bbb26315934a657498c46cf7bc66175e901091d5da207f5c057e99461782fa82f8", 0xd9, 0x10001}, {&(0x7f00000000c0)="15fe4c3460df3ebdea4ca39fedbe271f8702cc7b44c52c08d6e3ebc03822e3abcfec05a4470aed422d4131fc3bc476391406e1ab6e7cd78bc594ac8c621db68f", 0x40, 0x6}], 0x2000000, &(0x7f0000000380)={[{@uni_xlate}, {@shortname_mixed}, {@nonumtail}], [{@permit_directio}, {@context={'context', 0x3d, 'staff_u'}}, {@uid_gt={'uid>', 0xee01}}, {@obj_type={'obj_type', 0x3d, '\xf1)\xf3'}}, {@appraise}, {@subj_role={'subj_role', 0x3d, '\x0e}'}}, {@dont_measure}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:20:55 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:20:55 executing program 0: chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) sendfile(r1, r0, 0x0, 0x40100000000) 16:20:55 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="cc0000001b0001000000000000000000fe880000000000000000000000000001fe8000"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b4178a52c530e1ef910ea862bd2d9900000000000000000000000000000000000000000000000000000000000000000000000000000c0015000000000000000000"], 0xcc}}, 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYRES64, @ANYRES16, @ANYRESOCT=0x0, @ANYRESOCT=r2], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r3, 0x0, 0xfffffdef) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000080)={0x1, 0x3, 0x1000, 0x22, &(0x7f0000000000)="08bd6b7ba9f0f39ee1f80b15d68575b9da996a2d230a750efb825f654949530cb761", 0xfc, 0x0, &(0x7f0000000240)="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"}) 16:20:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x6, 0x0) 16:20:55 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xa7}}, './file1\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) write$cgroup_pid(r3, &(0x7f0000000140)=r4, 0x12) [ 1970.389949] audit: type=1400 audit(1692375655.181:18): avc: denied { create } for pid=13192 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 1970.407940] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1970.482757] syz-executor.3[13207]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1970.490393] loop3: detected capacity change from 0 to 256 [ 1970.497726] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 16:20:55 executing program 0: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) sendfile(r1, r0, 0x0, 0x40100000000) [ 1970.604271] syz-executor.3[13191]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1970.627546] loop3: detected capacity change from 0 to 256 [ 1970.651240] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 16:20:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:20:55 executing program 0: chdir(0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) sendfile(r1, r0, 0x0, 0x40100000000) 16:20:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x7, 0x0) 16:20:55 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[@txtime={{0x18, 0x1, 0x3d, 0x507d}}], 0x18}}, {{&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x3, {0xa, 0x4e24, 0xdb, @empty, 0x6}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000380)="5818899e5d6749de8a318723690e5991cae3145fe8cab4bcfdea3d0dc2a098a43f22bda697a6b81a9b26599300588c0be3356eb531c46de35993d34b575f107b698df92abef6133eb9ced3abd4d4d9a2e372f62b1e3a804e8bfff42d5a41e0731678720b496b542bfcaf58ec812c975073f6a4de8517044938d56af5aa8474d6b3465a9ff3", 0x85}, {&(0x7f0000000440)="fb17b0b9f7b90b115e01b38301c22d2b975cbac2b93f4340eea73d2197129b73ae133ec3c34db023afd540faaa30471cfa501b28a26d9681f897a8e77fc150399e30c1af6fe02be032e5620326f801fc2b7db78de186fbcf5ec1096355ecfa411e39f4e0b75b983b848ce3c06ac133058f5888b95eb086eb54ac21a3b9f91c8c71f91e7b8fe47653112343784b5c9482d066750759c3006ebf8fb526716f98c04eb7875025bb388e05460a692a6e348ec39a58bc1a14661645652c0a7d6136ad10100edf724b6127ae181cca2585187b8287", 0xd2}], 0x2, &(0x7f0000000600)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x90}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="4b89581c43731873de27f17e70210c0b8706e344c3c7ec1b2663ed557f0b5ff71c4897b041baa37677be57b7a582fa879b84745085e62359bd17c1ac6abc4bf0b18184a341268c615237693eec708aa7f8e423055d269dfae5806ba7cc5323f62bb1806a570b6c8432966d9884822bb0f75f4b6e", 0x74}, {&(0x7f0000000540)="7b716daf", 0x4}, {&(0x7f00000006c0)}], 0x3, &(0x7f0000000740)=[@timestamping={{0x14, 0x1, 0x25, 0x7fff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}}, {{&(0x7f0000000780)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x0, 0x1}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000800)="73d2052d9f495de55ca1891ae4470622819f31c0cafd1c7aa5c0f339e0485d3dc82c329084a8be5ef156e2b5ebd1b94038b77a316f64a2ac0aabca7ca0b0ca4d52274b4ba49945cce2cdbf1052863bbb7536698e3aefa5655466fc9870ac03cd4035321ee12fe3ebef8fca788459907f779adf031fc6c0b2186e9bc0f5c9465f", 0x80}, {&(0x7f0000000880)="9a776bd397a56e15e457ebd4d029b0cb65dcc78024a8716750f10e8ab750484163f4faba5a0e36d010", 0x29}, {&(0x7f00000008c0)="b0988c634aa0cbdf3ab5161e5705f7df6c5b5055e6235649dc251ac5abc7738515d6a61a3d4b6a0d5fadbb8a512c951c8505f55110b89ce0f66305a52593e5a795669c860bbe77002e09f98f0fe4a1f9f4852e7c8d5307a068be6986feb39e1a6389d728f128e06897d93d59e4b220cb92054209f3f3d08c74035f1fa3c0cb9d0a5f6be62bac101ab87d6de5c72c3ee2dc83b002d7c6f134092112058d7c0e6f59037999bae364e7fc5332f37b49e18b82c5df60d8c3c9b240be118110fe87f169f94ab393558e3ff3face0116d9ac08a99b41c0651b9a49471286b5bac05f080ec1cc9b06e15a109394", 0xea}, {&(0x7f00000009c0)="e1f0a365a21133a06f1bc25420e855086f88df0ab9aabc8dec4d16fecd26aaaf38c7a75bd1a597eb518310a202a13245baf24c5f77bb47712ebb078a97c9903c691f2b2a97d02eb6c2c0ba9345d0154869ed41864151e603923d3f211cef66f85dfd239406f1447ef0e17c5e55a7f374904f49c647a824a73ed371f8742beeb99421379ee6b5881f51744f605edeb9cb5261e5c63ae6b389d89a186978bb5c8253be8a5111a9d9238eaa5863d7ac25a68e3b610d3218020c4cb1f910ae99cad4491e8ee32c08a638044049449edc4dd8c250030d22f79f2bd5df445800b14a61585cc5b9952cda373c13ed3149dc84ece793ec40601573", 0xf7}, {&(0x7f0000000ac0)="4753f3dc02556a8aad5b350d173f9f2626f26154267a7e1dab199c0c9f6e8f148116bb1c80c6b473551f40ebc89ebdcf39068d989e2f09c8461ff5b1a8b7b1113528119d62280f0151970aa155bfdc0252adf8acade8273ef055db62360a7d42e46204ac200656f3a592cf83b5dafd4d974d57ed003c2247adbc20693be44ad01b327574fef96c70bca5169c8f48fe87b0971239d6b62d1a360d4501f2d4895fd3fc1be830e5606ee6ebbc8cf66c25b8907b6e1de1ef67fa53f0ee97b5", 0xbd}, {&(0x7f0000000b80)="d9615d67bc0a47882fe63caea55613ed1ab77a35977e72648218bb54facf196cd72382f7c1fff88de209502bea93fc625447b71f550a2df56724257c57864756cb6a9e2fa4b12aca6f70f162ec3921fec66966f86a7e64dae3b1d4cec8faa387237a2555cf705b0aa071f9fce5623742543f273c2d7e4da6dc4f6af37f1e2dfcc333d58eae78dc1171e261b616c351", 0x8f}, {&(0x7f0000000c40)="aec7582288170f1364a5a73619ec96e6c220a48fd9cba393660f03a6253f96044a5ab48f8f36fe5e3c8c11a128144b6574029c3803c9a37f62b8548c685a721dd3a7b9b9ebb8cf34", 0x48}, {&(0x7f0000000cc0)="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", 0x1000}], 0x8, &(0x7f0000001d40)}}, {{&(0x7f0000001d80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x64010100}}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001e00)="d3ed7b42e7b2c4f4c4a3e715d1ce407e6e2c34e25084fc781f2752c6a5cc50aba8e2492b3941801f332e00e40353f1b208884f4031c7c4a11738c0403f430b94a654eac21a72d8c1034db3f3ee719ed23af446bb94d521a64b5ccdc6688d9f103bd7b92157d4e0a30abe60b3ce95f9b2be63db8ac6fa6f4c301b3351b8d63fd59e1a08b97e4b04a38eeb24cd8c7d82f978712301bd5dbaf6c6c2df850350cb7481980e039d73b8183024870ce17fc0fe56d4f5b177d31e89f73f4a14b36313169a4b2a43", 0xc4}, {&(0x7f0000001f00)="bf1793e0e8a226cc8eedc19d644aa8479291faaeb73ee6fe831299bd8ceb8180ca068bcca4d7d60aa80f7c500dfb971b33b69915d70971b720de6167410414a02fb919c46dfc9c00b8655b4d9d362853b44ad031a51a687dc8", 0x59}], 0x2, &(0x7f0000001fc0)=[@txtime={{0x18, 0x1, 0x3d, 0x100000000}}, @mark={{0x14, 0x1, 0x24, 0x56d0a3b0}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x78}}, {{&(0x7f0000002040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x4, 0x0, 0x2, {0xa, 0x6, 0x6, @loopback}}}, 0x80, &(0x7f0000002240)=[{&(0x7f00000020c0)="325e61689b12bf0d0e2671c53aa8e89407b5cddc3f98a00a64fcdaa911238d56fe07b35d8009a2e76921539f9b0d225b20caf8d5370ef0dc05dedb4573b16b69ba9aea0d7083e0b158bdae084e29f9f308f465970b28db0722a2d3ab2f56d57d031d3f183a10e50a9bf70fdb12e6f3b4e1257caf902f98cde486820056f9c8e4f839bc74b8c143d4a00278289e02c3d285e0901093e5b81204c9df9234547c40155571bb740a6f40d9e59b22a9d119ee4d0789f85d6aa116fa70092868ac0277da65053e630db0aaca2cbb37dd149b84ef35", 0xd2}, {&(0x7f00000021c0)="bbcf0b919974dc92b825bb7fd39cdcff6b8f5ee85ea3a0787d222ef50d9cdb2b3afba4a1b4ecaf9bf24d5584b82e1310787a6f6242084a1fc9de6637908dfdf8441d63f1a3cc932a976a5c99cf909da9b4233050e2c5c8c51e5765cca810d36ddda6ca09902ff16a355521b5dc76d8a656c60a9f83c1ee846582d7", 0x7b}], 0x10000000000001a5, &(0x7f0000002280)=[@timestamping={{0x14, 0x1, 0x25, 0x52a}}, @mark={{0x14, 0x1, 0x24, 0x22}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14}}], 0x78}}, {{&(0x7f0000002300)=@sco={0x1f, @none}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002380)="4d44cfb444f2d34885958595b41ba82032a67e2194", 0x15}], 0x1}}], 0x7, 0x4) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x45c400, 0x0) inotify_add_watch(r4, &(0x7f00000000c0)='./file1\x00', 0x12000018) r5 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0xdd909f65e5e8ecd8, 0x20) r6 = openat(r5, &(0x7f0000000040)='./file1\x00', 0xcc042, 0x0) write(r6, &(0x7f0000000200)='E', 0x140000) sendfile(r2, r3, 0x0, 0xfffffdef) [ 1971.052845] tmpfs: Unknown parameter '2utlpH9ֶ-6Eԉ_0`n뼌l%{ngS' 16:21:08 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') open_tree(r0, &(0x7f0000000080)='./file1\x00', 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2300, 0xe1) r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x109042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) sendfile(r2, r3, 0x0, 0xfffffdef) 16:21:08 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x7, 0x2, &(0x7f0000000140)=[{&(0x7f0000000240)="058032f73cc448845c694e6eadd50db5031be238c3830ff1e213cde0c9c9136424e0592464a34ea70a8c09be939be265e523117665f2c65051865ebbe6d10b5ab639775d0975cd1d5321e9ff7a61cdc21b575620051de759574c98d7324c637f69effd692db120c03d620176ada602da62f4d6a2f6fae39d35ace9734082876bbb6e543c698343c29491e5cb9d3e3ab91c112e7dcd9b0f5574e654d69893931196460c30164bc878f63120171700887e2eb96c2a778362a6bbb26315934a657498c46cf7bc66175e901091d5da207f5c057e99461782fa82f8", 0xd9, 0x10001}, {&(0x7f00000000c0)="15fe4c3460df3ebdea4ca39fedbe271f8702cc7b44c52c08d6e3ebc03822e3abcfec05a4470aed422d4131fc3bc476391406e1ab6e7cd78bc594ac8c621db68f", 0x40, 0x6}], 0x2000000, &(0x7f0000000380)={[{@uni_xlate}, {@shortname_mixed}, {@nonumtail}], [{@permit_directio}, {@context={'context', 0x3d, 'staff_u'}}, {@uid_gt={'uid>', 0xee01}}, {@obj_type={'obj_type', 0x3d, '\xf1)\xf3'}}, {@appraise}, {@subj_role={'subj_role', 0x3d, '\x0e}'}}, {@dont_measure}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:21:08 executing program 0: chdir(0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) sendfile(r1, r0, 0x0, 0x40100000000) 16:21:08 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x4, 0x3, &(0x7f0000000180)=[{&(0x7f0000000140)="5ef4602394a7a5384ff42e5131bf21b12782e6f1d70c0a39e15fd671fb12fffbc71ef6d563f7ea2e3ee07bd1a668fbfe40878638", 0x34, 0x2}, {&(0x7f0000000240)="452cd7cb69985ef21f2034483c348afa9297b748524fd57a2d9ca6c6485b631600c3ba6753cf4d2acab321a5d2d477ccf1e7b6af3a124bf0d8fcdb93e8f087a017680cd5209bb30015a0b7691ad342455bdc6d920185557e855119c157f9c362c1d28e2d8cd1a9f0302a1147983c7ed0279a5adf7ff37ce0053324e649805bb0f58ba42e4c633e249ef33cc00aa2449c317311516576930f46c3ee2383570f408086ea18f9e3acf05ef03d119882fbb8ec4fb7774dfc8c94dfa2635569fd5806788c50e359f23726aee2af42d9a2f96179c18340b34d9c", 0xd7, 0x6}, {&(0x7f0000000600)="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", 0x1000, 0x7}], 0x4008, &(0x7f0000000480)={[{@shortname_mixed}, {@fat=@uid={'uid', 0x3d, r1}}, {@rodir}, {@numtail}, {@utf8no}, {@shortname_lower}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@smackfsdef={'smackfsdef', 0x3d, 'tmpfs\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<', r1}}, {@fsname={'fsname', 0x3d, '<\x8b*\xa2\xaf<\x9f\xca\xddca\xb2\x98\xd4-\x13d\xda\x9dS?v\xe0\x82B*\xcf\x0f\xa0\x93g\x1eK\xf4e#r\xf3\x9d4\xab'}}, {@subj_user={'subj_user', 0x3d, 'shortname=lower'}}]}) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) r4 = eventfd(0x1f) sendfile(r4, r2, &(0x7f0000000000), 0x0) sendfile(r0, r2, 0x0, 0xfffffdef) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r3, r5, &(0x7f0000000440)=0x9, 0x9) 16:21:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591df5d2797f01c245a53cbaac38beb67ec8543ee1fc76da389a2f521469702a87c3b5af9d215c17efc51425aad48737389caf265ffa46a739ff985065b4478c2cc0a581cd02471cb80059fcfbf9b2b1b1a6f164a6db4cc9c4b3e85bea642af74ef26797a542eadecdecba86ac5a23f879037c5bcb5d47"], 0x14}}, 0x0) 16:21:08 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x8, 0x0) 16:21:08 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4002, 0x103) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) write(r0, &(0x7f0000000000)="ce92adc202ae6e804622cd947845dd72555e20b53fdef38a343c5d71f43206c7982febb4206611e1cfaffdd99cd839145826976ea7a116f9e123", 0x3a) 16:21:08 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) [ 1983.939819] syz-executor.5[13240]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1983.957871] loop5: detected capacity change from 0 to 256 [ 1983.958822] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 16:21:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591df5d2797f01c245a53cbaac38beb67ec8543ee1fc76da389a2f521469702a87c3b5af9d215c17efc51425aad48737389caf265ffa46a739ff985065b4478c2cc0a581cd02471cb80059fcfbf9b2b1b1a6f164a6db4cc9c4b3e85bea642af74ef26797a542eadecdecba86ac5a23f879037c5bcb5d47201eca38085fd918"], 0x14}}, 0x0) [ 1984.005641] syz-executor.6[13250]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1984.052902] loop6: detected capacity change from 0 to 8 [ 1984.069661] FAT-fs (loop6): Unrecognized mount option "func=KEXEC_INITRAMFS_CHECK" or missing value 16:21:08 executing program 0: chdir(0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) sendfile(r1, r0, 0x0, 0x40100000000) 16:21:08 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) chmod(&(0x7f0000000000)='./file1\x00', 0x50) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:21:09 executing program 0: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) sendfile(r1, r0, 0x0, 0x40100000000) 16:21:09 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x7, 0x2, &(0x7f0000000140)=[{&(0x7f0000000240)="058032f73cc448845c694e6eadd50db5031be238c3830ff1e213cde0c9c9136424e0592464a34ea70a8c09be939be265e523117665f2c65051865ebbe6d10b5ab639775d0975cd1d5321e9ff7a61cdc21b575620051de759574c98d7324c637f69effd692db120c03d620176ada602da62f4d6a2f6fae39d35ace9734082876bbb6e543c698343c29491e5cb9d3e3ab91c112e7dcd9b0f5574e654d69893931196460c30164bc878f63120171700887e2eb96c2a778362a6bbb26315934a657498c46cf7bc66175e901091d5da207f5c057e99461782fa82f8", 0xd9, 0x10001}, {&(0x7f00000000c0)="15fe4c3460df3ebdea4ca39fedbe271f8702cc7b44c52c08d6e3ebc03822e3abcfec05a4470aed422d4131fc3bc476391406e1ab6e7cd78bc594ac8c621db68f", 0x40, 0x6}], 0x2000000, &(0x7f0000000380)={[{@uni_xlate}, {@shortname_mixed}, {@nonumtail}], [{@permit_directio}, {@context={'context', 0x3d, 'staff_u'}}, {@uid_gt={'uid>', 0xee01}}, {@obj_type={'obj_type', 0x3d, '\xf1)\xf3'}}, {@appraise}, {@subj_role={'subj_role', 0x3d, '\x0e}'}}, {@dont_measure}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:21:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:21:09 executing program 0: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) sendfile(r1, r0, 0x0, 0x40100000000) 16:21:09 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x8801) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000240)={0x940a, 0x0, 0x4, 0x800, 0x3, [{0x0, 0x7f, 0x100, '\x00', 0x2901}, {0x8, 0x10001, 0xa893, '\x00', 0x400}, {0x6, 0x10001, 0xda, '\x00', 0xc00}]}) sendfile(r0, r1, 0x0, 0xfffffdef) 16:21:09 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0x0) [ 1984.797262] tmpfs: Unknown parameter 'O\Wh_׮IfI6g]?!O' [ 1984.817030] syz-executor.6[13250]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1984.829090] loop6: detected capacity change from 0 to 8 [ 1984.835811] syz-executor.5[13283]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1984.843299] FAT-fs (loop6): Unrecognized mount option "func=KEXEC_INITRAMFS_CHECK" or missing value 16:21:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:21:09 executing program 0: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x101400, 0x26) sendfile(r1, r0, 0x0, 0x40100000000) [ 1984.900555] loop5: detected capacity change from 0 to 256 [ 1984.920256] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 16:21:23 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x7, 0x2, &(0x7f0000000140)=[{&(0x7f0000000240)="058032f73cc448845c694e6eadd50db5031be238c3830ff1e213cde0c9c9136424e0592464a34ea70a8c09be939be265e523117665f2c65051865ebbe6d10b5ab639775d0975cd1d5321e9ff7a61cdc21b575620051de759574c98d7324c637f69effd692db120c03d620176ada602da62f4d6a2f6fae39d35ace9734082876bbb6e543c698343c29491e5cb9d3e3ab91c112e7dcd9b0f5574e654d69893931196460c30164bc878f63120171700887e2eb96c2a778362a6bbb26315934a657498c46cf7bc66175e901091d5da207f5c057e99461782fa82f8", 0xd9, 0x10001}, {&(0x7f00000000c0)="15fe4c3460df3ebdea4ca39fedbe271f8702cc7b44c52c08d6e3ebc03822e3abcfec05a4470aed422d4131fc3bc476391406e1ab6e7cd78bc594ac8c621db68f", 0x40, 0x6}], 0x2000000, &(0x7f0000000380)={[{@uni_xlate}, {@shortname_mixed}, {@nonumtail}], [{@permit_directio}, {@context={'context', 0x3d, 'staff_u'}}, {@uid_gt={'uid>', 0xee01}}, {@obj_type={'obj_type', 0x3d, '\xf1)\xf3'}}, {@appraise}, {@subj_role={'subj_role', 0x3d, '\x0e}'}}, {@dont_measure}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:21:23 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x48, 0x0) 16:21:23 executing program 0: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101400, 0x26) sendfile(r1, r0, 0x0, 0x40100000000) 16:21:23 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:21:23 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:21:23 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000380)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8) mount$cgroup2(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x1002, &(0x7f0000000480)={[{@memory_localevents}, {@memory_localevents}, {@memory_recursiveprot}], [{@pcr={'pcr', 0x3d, 0x31}}, {@obj_type}, {@euid_eq}, {@fowner_gt={'fowner>', r5}}]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000240)={"24596d0f43a6f454c07db166aab85086", 0x0, 0x0, {0xd6, 0xfffffeff}, {0x8, 0x7fffffff}, 0x7ff, [0x10000, 0x80000000, 0x100, 0x8, 0xf2, 0x1, 0x1, 0x661, 0x1, 0xffff, 0x1f, 0xfffffffffffffff9, 0x3ff, 0x0, 0xc0b5, 0x5]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000600)={{r0}, r6, 0x12, @inherit={0x50, &(0x7f0000000080)={0x0, 0x1, 0xff, 0x100000000, {0x30, 0x8, 0x4, 0x7, 0x3}, [0x41c8]}}, @name="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"}) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r2, 0x0, 0xfffffdef) 16:21:23 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) r3 = syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x4, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000600)="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", 0x1000, 0x4}], 0x180020, &(0x7f0000000140)={[{@orlov}, {@minixdf}, {@i_version}, {@orlov}, {@user_xattr}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x3}}], [{@dont_appraise}, {@fsname={'fsname', 0x3d, 'tmpfs\x00'}}, {@obj_type={'obj_type', 0x3d, '[@&)-$$@r,*+('}}, {@subj_user={'subj_user', 0x3d, 'tmpfs\x00'}}]}) unlinkat(r3, &(0x7f0000000240)='./file1\x00', 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) symlink(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='./file1\x00') ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000001600)={{r4}, "2d282945c0e031251cf8e80179decf8e9c1bf174fb822b67508d29a2b3cf38a4bcc612c84a16f5faaaedd3e152f475f064f3f04b6304a71039209178dac49bb75cc4fe519f6a30adc1ac709e42ca3dfe244721f43ef842a390dff21b72f10904b1e4c2916a6ea925d328172aa55513d44d4dc2fa10afe59dc12be9610d2df906130625b3abd8d39a62e8118a342c24acc1db1130bc8ccd716b0fbb7a3d3d0b1fd88261a98ac40587620db4b5f37b45759b0733056c24196a408b92eae15bc2feab1666700cabed824e78d7e149475a126aeab57575dab1c0b77ac1ce506a7f0df547f7640a5f157aac49587dfb18e0333ef4e0beae9824887eb701a1124f50f48a6f8aa329116fb47f2dfe0e184de3bd371513e27249f2eac9203b8c8680552e513fdd76cd8961fcbdff3d30c56e1490305c90a209625214697739cfdfef34e24aed748f079895732da026a18ffb50a4be4182fe6ce5d5eaa1e305002734ac2e70223fc377540a076b386dfcee37c0a3e2e2834e91fe06959007fa9da694e69830e74554263ac92cdb18d629b6c9abcdb2b7ba54a44b6db0775359fef36d3eb1938501d170dd8ceca514f4318a3df98fa7954a787774d41f3ad7051fc1631db6069354b4deae6d0b1412849bb26e8d406b67c9672a24a82d686997f0548b6d57e183f7e996ed4914cec76a0af2dc2d5f023def386dbf751a6bcd9874cbd4a18b1e003e06e93d31f8532314b428a0841ca34fd93ae154c06105145c334d7fe2a81d1eea0ec0988e9a53924f74fe8b0bbb5b48c33346a93c1eef3098228b94456cbe0eb34e5ad3f1ade9055ea7abdf7db208e88f8c6e8e8a3fb0064284cfe8ce7ecce78742df9d0bf2e28ae57edef6c2484961973a45a3bc5a9494da20cb27dc7d69f4aacd6586f9b18363e94d911b844a8c2133a858cd4a034c6d90b0ed52800792b00959bfd5f92e5de7f19bc9316b62f8b5793fc9b2811ccb973067229341aa736926b4e7219aa8485202aa75d5386a03c88e6464c44c2e36fd7492c8ab75a147901b753ffdbe0b167af3cb1c78382e33f2b4b376635eb4248a41a747fefb05e263e679fc7246d72820838bf0104a3d935106aa2b03a77184e60df510eb9f30330ac0e6e5cfd70ed9ddf5a57aa8914c93d39360e97158451514609fdf7d99000252adce925b24e96748ae933b6bc884609fcd61e67e5c6f65eaa770f6fcd40721938bb99ddd430a6dae145bd2b2a50693e0c9f98cd288d4121e166bff3425138827d864c4a79f7a5ad1c4a08edfb70cdaf997b32fb79b6328bc33c93cc5fece3800b03a41ee4178a3730e1fab3ef73e4915af763e95bf9a1162e818d0765fdb853878f194d4baec5538941f9ee337238cf6b7b7b2edb72ab043efa93f5b6e6852491db59f2ef028460d272b5b7379285801e5c0c0adae355e6f79e7395b29ccb434c42491024f04c919bbcbe5418da39b2cdc5eedd19281af2d3f44ef0dc751d1e706e559980ebb830881bf649e2c0a97fc71ea0a8efc3f7771cd4a31e7ff72d08bbd294e3286270d7f1f537c0cdd9b3ef28b1a8d077690b700bd7968dcf7e6859ea6b79e1777b0937a9fcf107a197757fbcd6d0d5d3e491ec9e262dab55bc3247eee8a911a6cdb67619315f60aef805c4b5a1f0e01c58faaf2f44f35d44c761b8d47f187216585698663dfa8ba7706b6c78c1ec9cb2ef17ee6f8dd087abcc426d0578f134987a225f6e1c70f93bfa93d1c72be95512f4e8030595f467a60a11837c31d3eac9f3a8e9a9081c4c4a5fa8986f17582ea313d95d7bd157ddb7b0bd9615aa495b9db0b1d500b4318a4be22812d738ed7131f1b9cf980de5f26eb000dc1e1c37f877adad3b1d8b41a2778ca1a5f4c6aa9a5c645b9f89a4a6bda3f739bb372b1e8c99912ba6b3deac269163365853f338dade7aab14e2767517812bfff246b878dd3de9fb03a8cad8ab31a8b378b49d1ba4588fb96a06fafbbb0ab4c8117e1b23ce46c1826136f5d0b6c02ef97b8ded8fbea6082f0c70172938f0bf2d3091aec7b32ea2dd8588630bbfe58ad16e8ee2e70e490cb6f10f65adb7dc19999428129fc0cd69ba09341cb90ae814fa4f0cae3619b1e9ac03c62e0fb34a747d11681376535cb892045d1e83ffd873a9bafeaf3d4da0fc7f7c164cd46c392defa3ac13264c462d5b0a4f76953751ac42089d7993a5554ec6d0569dcb97880445af91f08629100755330191fc2974a78f7c57994b137b22a1dc35b170f8890cb133715eb9999cd0d52e023f5bee40297748173325e96fef88233537645ec35cb6729aad036dcb1b1c36d1a0da8df1badecdc8359581f558dcdf07e7bbb5104eb733e71a26ac9000c041760d34de7ba4349f302ec403924e489f35da0450adfd27a54e22c0a81116d020f1b7e7f702b49e55e24a7f3f1c2a12d95d1ef0cb3e4de4bbca08d45e89424450edf07d5f5f4199466b08e873b56f46583f51c80ec72a5ce937a5cfece7785fc535159eaebb503932c368f382ac4757c159507bd8b74a2c8e2a17214395f784e5ba00d87beca49a687598afe92b6e1bba982ffe30f3941947818ebe2c1f779e34ecc786f7922be60cdb8b45991e081a6ad8f5f9a223863afbae2b840507240c5ae4420dbb5821a5105ad97d5cad763e410f6a1d139efdbf9cf2609ec39a21c488d766c1b040fb7f8dbb881e455f74dab444c793494e0296fcd9f03e1d2fa293fa5a599a3331b1f4bc0a91a47300fba059e61cbad8d5b56f6bba4ebb5da4bde50c7de200a5c3e4458b9886fd9f12cc3bb2a766cf691302b6e50e6b17bd29073dcb9425ba2263e1c6a958e5bd2cee32ac4b4be9bb7804176307519ed73f4537c08d4e0008882db095eac6b76465e51674dfec6e4e9f5de890dad18b1c123589cce0345500516388a8bb6111256a505cf8845b57c8a4957638c27b15697d42e5674fc7412ae655fde315f5c7a87015cb8b6462ec8ac16c0f3d4e1051dea251b01c67896cf5d215dd3139aaeb6924f186902297c8be36e947d541238115c389f8707db794916ecfd1065d168605e40260f21b16a30e49b486ab018e31a13e4cb4b7dc4640e117f0cd7eee961513a93fd18ec9abdb42134ff2f5660ab42b4153e619b28941fafb024d0d76aee0381b4d2cd11a33d230d4027a56e028abe4b8ba3ef31d5371e4c123f1c07f1a93ed1d0605d635b35feaca712b15adb37f824d3dbe74225880c8272c48b693362592698d8dd706675250b6755565e40d976f758cb5377687c4555143ec3e731540ca284c585319ff25203eaf484472b4356faeac94ade684c8a717e63ebca3cb63891edc993da6a19f5fe210b2d72acbb5a48ff86580c079f19b46219541f0b713d48ae9b98175b7f535ad1c425b6b40cc2f0f2c866c4a3360449adb83a05ae9c36a4121a5a3189db5d59502d92887dbd4b2256ba0a5eee2ad9a90659a93768cd3dacf46571f90d23ff3149e2bc92d0a1a2a1acd4c3c731ba996aa44e503403f8810c8b78227291c966589f8c1e9ffd73da3c23d01a5b880f58281cf71f8026846e1443d94e347e4f6cb32c3bafe9a7f48b11ccf99f0308f4d932c8c65d7104f57e29338ee086a3f13699dec8bb470e1e1733717628a54e867f8149acad0fe6afb368231c867eeed572d78540ad14cde3cfdf33f7a13f74fb957942075e19d5861624de158eff9c03030bb3f59461e329292de56ad168ba6ba177da2b69dadd2201b89967d356d2ec880e93eb270138bc3261a04b699b5cac8569935c4fdcc7c76368f6c151ab7a1fc04ea1114461b604340bd2698e57a59c8ac2b92f5ff1e4f7454c7e0e70508cb7d7ef69fa2e8b3c86b763c8f52ce98fdc81208f1cf556408734f2ba15d6ec43bd9e07fe21a3626c1554baac137ffeebdae05256b0f1f0085ed11b6333f2ccc5b8f4f47086a83864419753df8f5612998c60ebbf0429984bf82e1e0ee4e63ac0bd150d31f81dbd1d46aa94679529081bc3a0e6beaea0253511a0cc063e88cce27293c0a8ef1ab09aa4fb3e0b134e5bb60d218417a1479ebe0cb5a03f915bfc7472a83c8bf3613950cdabea00c657b387a98675cf3e5fc7c33d4fc105c3da37dddf7709cc3089a9b4541a5a83edde3cd318429d4d57d35956455eb726267d098eafb06f5d18a37a201dc14e31409fb9f805903fb18cdb8117ef9521d56543f9709a9babcde7a10cac3f4044d3d71a78efa66b3909be1a39fc7acf66fe600c8869e23753e5b5d2aa63037826ba21da792348074bc0392651ffa3b967d4074409da4934307fe8386fad538027d66d91e1f79e62fb4e1abe1005a2ed8cb85088643698bea9cd7c96fa39ed9adbf2d1ac18f45928b95b812c20b59f52350c8907bad2811c4073dc4d9e98104ec49d219a10dc3b9ab0b7c870413408b83f175948ccab22c04ebfc68bef92491d819ade9464f04ea47103e865662fcff6df78e04cfaa4bd42643e8a866de5db71c1382e6829be5d61c0b57a406f5967bc3e76096bcd1145f0c7ddfa6ba13d262492aec765f2052329f276bc31790137429f63c0403cbcfb11433445eebfab411c7b8ba6cefe64121275d637c17f2faef7daaca62eed6577b4ff2431bf52f52fdb6fb167fb6934ee4bcaaf34929971c76b6ee80bcd5599e496a85c049bdd5633af8bd1635feaa5640ced5fdfd91d67f2a0ff3647be1e98ce8eccf57ca5fb97bd05b582e53a1740b7b94dc6c3d3d7826ddf54f1c9bef0d5926127dbfee49936095aff488c88f394b2d372f064cc56fc6a2cb2f78fee5fc9d02f0b365f00d582cc5b98ce6e6be1590c0d7f52e95ed7e7c1682c6680185521065bd56920a683acd9645d74a1e968be45a40012dfb0bc7f86a77700c0fb4b9c511d09b0d02ada1455a6c751c46521da33ca076925992aadf2c6632309c4da64ad60b4e6d8f68246ad214265ba73c7e54371e082930cb1fcfb03223e66deabdedc1bdfa660e175d349087ac78be30106a7140256f78a159754e602962f718919e55da9e253afb2b733159daf88c5c55b292347353886b3cceb5585f1155dcf854010dad400eb855ca73773d651c0adc40408978a0fb6a176662303168e6da3f9780b9e02996d37dafa949a75cb43e138ddde21610150e43def712e068d95623dc9e2535a29d47aaa7d9202208971e5fe2ccb7d26f47006776f5814e956d3a27917b5dafbe9e398c5819c5afe13990daf4abfb75796415b23ff0f70e77c5bbbe9da8617dd607e48cccd4a45989ad1d7863701d5d220115fe3cd94bd20999011439a818acef5142b73cb746041b86db428091e649d4c3e26523d8c9a23b2b5188528a7b06b0801f28c6ebc3b50a6909c093f9cd15ae6d03add8f877e843358f447f66ff2fdc198c73cbbe794c9fb2176ad42d7d46514ccb0eafad2785defc481c16c6d588d23f731f5e867e12bbf13c2e297b6e71196801b335381e41a043e252579032dc94962acd051d6d56b11f8a2924542bad29433dffe45697ca64321dcc6cf853a26fcdea618ed7b429265773ac749b6423334473b6c4a7cc84adea80ab48cf8c1facbf007c37d25daf9236d145a32647c9dcfc06506a4d68d24bc036fa010729bb63c3077657dfe57fd6f6ff06ebd4d777ca9b67bb3f98042d586fa9ba7b6423834d2f5932b3f65622c8c7ae91d511ad4732dccfceddbf7dbe15a0d8fba84df888443cfeaffb79b013b0c1a735e2a28ba8f1bc4807934e5bdfc4bf12ced27494da184c1e4908357d943e954322812fed81796ec46ba021f0a9e8dd5"}) 16:21:23 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:21:23 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4c, 0x0) 16:21:23 executing program 0: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101400, 0x26) sendfile(r1, r0, 0x0, 0x40100000000) [ 1998.813803] syz-executor.3[13319]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1998.821188] loop3: detected capacity change from 0 to 8 [ 1998.828135] syz-executor.5[13311]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1998.832391] loop5: detected capacity change from 0 to 256 [ 1998.833683] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1998.846313] tmpfs: Unknown parameter '^Ħl#%5zU> i¯Rϼbj' [ 1998.900693] syz-executor.3[13319]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1998.920553] loop3: detected capacity change from 0 to 8 16:21:23 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x68, 0x0) 16:21:23 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:21:23 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:21:23 executing program 0: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101400, 0x26) sendfile(r1, r0, 0x0, 0x40100000000) [ 1999.563602] tmpfs: Unknown parameter '(BDg "ܴ2w8Weˑ3z b-OPIg ' 16:21:40 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x7, 0x2, &(0x7f0000000140)=[{&(0x7f0000000240)="058032f73cc448845c694e6eadd50db5031be238c3830ff1e213cde0c9c9136424e0592464a34ea70a8c09be939be265e523117665f2c65051865ebbe6d10b5ab639775d0975cd1d5321e9ff7a61cdc21b575620051de759574c98d7324c637f69effd692db120c03d620176ada602da62f4d6a2f6fae39d35ace9734082876bbb6e543c698343c29491e5cb9d3e3ab91c112e7dcd9b0f5574e654d69893931196460c30164bc878f63120171700887e2eb96c2a778362a6bbb26315934a657498c46cf7bc66175e901091d5da207f5c057e99461782fa82f8", 0xd9, 0x10001}, {&(0x7f00000000c0)="15fe4c3460df3ebdea4ca39fedbe271f8702cc7b44c52c08d6e3ebc03822e3abcfec05a4470aed422d4131fc3bc476391406e1ab6e7cd78bc594ac8c621db68f", 0x40, 0x6}], 0x2000000, &(0x7f0000000380)={[{@uni_xlate}, {@shortname_mixed}, {@nonumtail}], [{@permit_directio}, {@context={'context', 0x3d, 'staff_u'}}, {@uid_gt={'uid>', 0xee01}}, {@obj_type={'obj_type', 0x3d, '\xf1)\xf3'}}, {@appraise}, {@subj_role={'subj_role', 0x3d, '\x0e}'}}, {@dont_measure}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:21:40 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:21:40 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x6c, 0x0) 16:21:40 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:21:40 executing program 0: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x0, 0x26) sendfile(r1, r0, 0x0, 0x40100000000) 16:21:40 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)={'U+', 0x5}, 0x16, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/pata_oldpiix', 0x105602, 0x1dc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001840)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/3\x00') pread64(r5, &(0x7f0000000700)=""/4096, 0x1000, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000600)={0x0, 0x0, 0x6, 0x0, '\x00', [{0x2, 0xfff, 0xfd, 0x1f, 0x7, 0xc6d}, {0x5, 0x9, 0x5, 0xffff, 0x458110b5, 0xd8}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) write(r2, &(0x7f0000000200)='E', 0x140000) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='})$**\\.\x00', &(0x7f00000000c0)='./file1\x00', r2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r7, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r6, 0x0, 0xfffffdef) 16:21:40 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:21:40 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f0000000080)='./file1\x00', 0x7, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="56b41a8934f6fdb13c44e6e86295eee798631157ba99a67ee2e82fb8e856fb7574544665a755dcac9f794c0139d160e4c26d5e1e5b78a76b09b7ab9617c9580ec75c1a899536ef6300e60c98d26a9a583c7f1b026aa599ce3c6f38552d328e"]) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {r3}}, './file2\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000380)={'syztnl2\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0x1, 0x9, 0x20, @mcast2, @private2, 0x0, 0x7, 0x9, 0x1ff}}) sendmsg$nl_xfrm(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=@expire={0x126c, 0x18, 0x100, 0x70bd29, 0x25dfdbfe, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x4e24, 0xfffc, 0x4e22, 0x0, 0x2, 0x80, 0x80, 0xe7, r5}, {@in6=@empty, 0x4d3, 0xff}, @in=@rand_addr=0x64010100, {0x2, 0x2, 0x0, 0x8, 0x8001, 0x7b, 0x800007f, 0x7f}, {0xffffffffffffcd87, 0x6, 0x1, 0x6}, {0x4, 0x5, 0x1}, 0x70bd29, 0x0, 0x2, 0x0, 0x4, 0x10}, 0xc7}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @algo_auth_trunc={0xee, 0x14, {{'sha224-arm64-neon\x00'}, 0x510, 0x80, "d8df2c252d110827e4fcc6820ae09645cc0545da6043a2f91aad81c8b6c38fab23191fa5f2c796545752f4fd7a86117912032ffe63a34190c55f9c5c6c294b1cc72345f66ea51acec3d9520e76a205445925fd794d5685297e9e484a95f498c2d424a4f2d810aa8161f4757a0647a16d2a5a0c0a1b8c790ac9653c6c808134b9a1712b71259670d35086323bb8a28c7761188f64dca329e4da2da2353eafbf370e71"}}, @XFRMA_IF_ID={0x8, 0x1f, r5}, @sec_ctx={0x100c, 0x8, {0x212, 0x8, 0x0, 0x69, 0x1000, "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"}}, @replay_thresh={0x8, 0xb, 0x5}, @address_filter={0x28, 0x1a, {@in=@empty, @in=@local, 0xa, 0x10, 0x1f}}, @offload={0xc, 0x1c, {0x0, 0x2}}, @etimer_thresh={0x8, 0xc, 0x4}, @encap={0x1c, 0x4, {0x1, 0x4e24, 0x4e22, @in6=@local}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x6}]}, 0x126c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r6, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@allocspi={0x294, 0x16, 0x300, 0x70bd2c, 0x25dfdbfd, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x13}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e24, 0x0, 0x4e24, 0x1, 0x876b240c77a52f0e, 0x0, 0x0, 0x6c, 0x0, r6}, {@in=@empty, 0x4d5, 0x32}, @in=@rand_addr=0x64010100, {0x1, 0x3f, 0x8, 0xd7, 0x1f, 0xc229, 0x800, 0x2}, {0x56a16ad1, 0x8, 0x4, 0x2}, {0x6, 0x0, 0xff}, 0x70bd25, 0x3503, 0x2, 0x3, 0xb7, 0x89}, 0x9, 0x6}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x10001}, @tfcpad={0x8, 0x16, 0x404}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e21, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x35}}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8000}, @algo_auth_trunc={0xff, 0x14, {{'sm3\x00'}, 0x598, 0x80, "80f579705ac05109e39b408fa660a844ebb027cdc536ea891784826e8cf3b40d46d96aa9d24ad811a8c056ca26bdc00804d8f066459b9c63fbedca1f4497b2e2cf81cbb18a88a4a4e8c4ad11869eec18130b67b6d4bf4c74f9a6e83fb77a4993f52da2b7e5490856736f0ee52f4b94b2c22fd763dce3459773b433ac11294b815b0c9c55db4662a02b6af0e2b46f05e76cc5c1b71289888c9a06898f77303e810d68e44f01f9424667f771a2f0a6a73e47a33c"}}, @proto={0x5, 0x19, 0x32}, @tmpl={0x44, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x2b}, 0xa, @in=@multicast2, 0x0, 0x2, 0x1, 0x8, 0xffff, 0x5, 0x2}]}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e23, 0x4e24, @in6=@local}}]}, 0x294}, 0x1, 0x0, 0x0, 0x800}, 0x408c1) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r2, r3, 0x0, 0xfffffdef) [ 2016.162461] tmpfs: Unknown parameter 'V4r0}, './file1\x00'}) openat(r1, &(0x7f0000000080)='./file1/file0\x00', 0x90002, 0x80) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) sendfile(r2, r3, 0x0, 0xfffffdef) 16:21:57 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:21:57 executing program 0: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x40100000000) 16:21:57 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x7, 0x2, &(0x7f0000000140)=[{&(0x7f0000000240)="058032f73cc448845c694e6eadd50db5031be238c3830ff1e213cde0c9c9136424e0592464a34ea70a8c09be939be265e523117665f2c65051865ebbe6d10b5ab639775d0975cd1d5321e9ff7a61cdc21b575620051de759574c98d7324c637f69effd692db120c03d620176ada602da62f4d6a2f6fae39d35ace9734082876bbb6e543c698343c29491e5cb9d3e3ab91c112e7dcd9b0f5574e654d69893931196460c30164bc878f63120171700887e2eb96c2a778362a6bbb26315934a657498c46cf7bc66175e901091d5da207f5c057e99461782fa82f8", 0xd9, 0x10001}, {&(0x7f00000000c0)="15fe4c3460df3ebdea4ca39fedbe271f8702cc7b44c52c08d6e3ebc03822e3abcfec05a4470aed422d4131fc3bc476391406e1ab6e7cd78bc594ac8c621db68f", 0x40, 0x6}], 0x2000000, &(0x7f0000000380)={[{@uni_xlate}, {@shortname_mixed}, {@nonumtail}], [{@permit_directio}, {@context={'context', 0x3d, 'staff_u'}}, {@uid_gt={'uid>', 0xee01}}, {@obj_type={'obj_type', 0x3d, '\xf1)\xf3'}}, {@appraise}, {@subj_role={'subj_role', 0x3d, '\x0e}'}}, {@dont_measure}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:21:57 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') creat(&(0x7f0000000000)='./file1\x00', 0x138) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x10900, 0xc) sendfile(r0, r1, 0x0, 0xfffffdef) 16:21:57 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:21:57 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000700)=@abs, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000780)=""/103, 0x67}, {&(0x7f0000000800)=""/215, 0xd7}, {&(0x7f0000000900)=""/148, 0x94}, {&(0x7f00000009c0)=""/141, 0x8d}], 0x4, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x22) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0xfffffffffffffffd, 0x4, &(0x7f0000000500)=[{&(0x7f0000000140)="0c6742f91d0918aa314f3ff307aa9cedc1322fc798dc59fe7329a185a244fc9a654ff75fe41f382b63918d13b73172123969676eb81242ebb264419620037663001b951267cd49ad5917b46b42090070034ff7eb67779e52f32b0b0940eaed5e50abc0482c2d1fa7d64b58274fe51bb9", 0x70, 0xae2}, {&(0x7f0000000240)="5c2a8abf3d055a61af5d821df092d0d291f468a2af97eec49594cdbeb7465f9d84ca2e756e84e149bd92b5f971751c294352c91c1f7e854af0fb1952ece6992b0b7d674fafe85d5adc08ae47c621e5ceb5f88c20cf98a616b7a1c6589c29963628fb78db57f5706caa0f295c2b72609af6c3333f8d737260485c059c80417031a925f7", 0x83, 0x101}, {&(0x7f0000000380)="3b122ef08838aac34f69ead90ee2b4af6e06a5c577fdd2b460e8002757865c745bd5972cb6cdda166dd70c1b52a04884c115780d92798e7ffdd61436eade06b902f1c9c3354a3ead29dbe06ed789ce5b3297d2b91552345dac0191662d33de6e25b526ef0e2cdd0f2c539353039370c44e4e6489dbf82763b9f5312fdbdac39c6cedd9f7fb30a349db83f25a97ca66d84745700e4021722add948f36e4d9fe356a64ac897e98be8950bc50d9abc4", 0xae, 0x3ff}, {&(0x7f0000000440)="945a3a9671aa2acaabffafe847998cc38a1c4361a2374e5d0d687b60c4c13f2dc97e418dd81c7e3af643504afd480acb27d9309249a6bf6850f49a1901b0efa557805a48deb90b10b23b21fe22e5a0a5157a8d3a9e423a39bd79cd377f6bee57a55a7def3da77b1d19891874d9464da81c41bbb97b1977107b75182ee72cf1456e84537d92c670bc", 0x88, 0x100}], 0x17020, &(0x7f0000000b80)={[{}, {'tmpfs\x00'}, {}], [{@euid_eq={'euid', 0x3d, r3}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fowner_gt={'fowner>', r4}}, {@fsname}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/*!\\%'}}]}) 16:21:57 executing program 0: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x40100000000) 16:21:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x7a, 0x0) [ 2032.643475] syz-executor.5[13396]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2032.656476] loop5: detected capacity change from 0 to 256 [ 2032.657701] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 16:21:57 executing program 0: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x40100000000) 16:21:57 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) [ 2032.779856] syz-executor.2[13401]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 16:21:57 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x7, 0x2, &(0x7f0000000140)=[{&(0x7f0000000240)="058032f73cc448845c694e6eadd50db5031be238c3830ff1e213cde0c9c9136424e0592464a34ea70a8c09be939be265e523117665f2c65051865ebbe6d10b5ab639775d0975cd1d5321e9ff7a61cdc21b575620051de759574c98d7324c637f69effd692db120c03d620176ada602da62f4d6a2f6fae39d35ace9734082876bbb6e543c698343c29491e5cb9d3e3ab91c112e7dcd9b0f5574e654d69893931196460c30164bc878f63120171700887e2eb96c2a778362a6bbb26315934a657498c46cf7bc66175e901091d5da207f5c057e99461782fa82f8", 0xd9, 0x10001}, {&(0x7f00000000c0)="15fe4c3460df3ebdea4ca39fedbe271f8702cc7b44c52c08d6e3ebc03822e3abcfec05a4470aed422d4131fc3bc476391406e1ab6e7cd78bc594ac8c621db68f", 0x40, 0x6}], 0x2000000, &(0x7f0000000380)={[{@uni_xlate}, {@shortname_mixed}, {@nonumtail}], [{@permit_directio}, {@context={'context', 0x3d, 'staff_u'}}, {@uid_gt={'uid>', 0xee01}}, {@obj_type={'obj_type', 0x3d, '\xf1)\xf3'}}, {@appraise}, {@subj_role={'subj_role', 0x3d, '\x0e}'}}, {@dont_measure}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) [ 2032.801892] loop2: detected capacity change from 0 to 264192 [ 2033.048867] syz-executor.5[13416]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2033.058802] loop5: detected capacity change from 0 to 256 [ 2033.062106] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 2033.466821] syz-executor.2[13419]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2033.471387] loop2: detected capacity change from 0 to 264192 16:22:10 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x106, 0x0) 16:22:10 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x501400, 0x40) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4442, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x62, 0x0, 0xee00}, {0x0, 0x6ef6000000000000, 0x0, 0x72}, {}, 0xf99, 0x6e6bba, 0x0, 0x0, 0x2}}, [@mark={0xc, 0x15, {0xfffffffd}}]}, 0xcc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/76, 0x4c}, {&(0x7f0000000240)=""/82, 0x52}], 0x2, 0x3, 0x7f1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x3}}, './file0\x00'}) sendfile(r0, r1, 0x0, 0xfffffdef) 16:22:10 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x7, 0x2, &(0x7f0000000140)=[{&(0x7f0000000240)="058032f73cc448845c694e6eadd50db5031be238c3830ff1e213cde0c9c9136424e0592464a34ea70a8c09be939be265e523117665f2c65051865ebbe6d10b5ab639775d0975cd1d5321e9ff7a61cdc21b575620051de759574c98d7324c637f69effd692db120c03d620176ada602da62f4d6a2f6fae39d35ace9734082876bbb6e543c698343c29491e5cb9d3e3ab91c112e7dcd9b0f5574e654d69893931196460c30164bc878f63120171700887e2eb96c2a778362a6bbb26315934a657498c46cf7bc66175e901091d5da207f5c057e99461782fa82f8", 0xd9, 0x10001}, {&(0x7f00000000c0)="15fe4c3460df3ebdea4ca39fedbe271f8702cc7b44c52c08d6e3ebc03822e3abcfec05a4470aed422d4131fc3bc476391406e1ab6e7cd78bc594ac8c621db68f", 0x40, 0x6}], 0x2000000, &(0x7f0000000380)={[{@uni_xlate}, {@shortname_mixed}, {@nonumtail}], [{@permit_directio}, {@context={'context', 0x3d, 'staff_u'}}, {@uid_gt={'uid>', 0xee01}}, {@obj_type={'obj_type', 0x3d, '\xf1)\xf3'}}, {@appraise}, {@subj_role={'subj_role', 0x3d, '\x0e}'}}, {@dont_measure}]}) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:22:10 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:22:10 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x709200, 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r2, 0x0, 0xfffffdef) 16:22:10 executing program 0: chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x40100000000) 16:22:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:22:10 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x60) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000001c0)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000240)='net/packet\x00') pread64(r5, &(0x7f0000000000)=""/55, 0x37, 0x600) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0xf7, 0x7f, 0x1, 0x0, 0x0, 0x8, 0x100000, 0x58e6e23d91a505ab, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xbcd, 0x1, @perf_config_ext={0x471, 0x3f}, 0x12, 0x80000001, 0x8, 0x2, 0x5, 0x9, 0x5242, 0x0, 0x8, 0x0, 0x5}, r6, 0x5, r3, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r7, &(0x7f0000000200)='E', 0x140000) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x6, 0x9, 0x80, 0x0, 0x80000001, 0x20, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x2, @perf_config_ext={0xffffffffffffffe0, 0x3}, 0x802, 0x8, 0x1, 0x6, 0x6757, 0x6, 0x2, 0x0, 0x6, 0x0, 0x1}, r6, 0xc, r7, 0x2) 16:22:10 executing program 0: chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x40100000000) 16:22:10 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2f0, 0x0) 16:22:10 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x300, 0x0) [ 2045.551516] syz-executor.5[13451]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2045.555617] loop5: detected capacity change from 0 to 256 [ 2045.561176] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 16:22:10 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000080)={0xb7f, 0x14}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) openat(r4, &(0x7f00000000c0)='./file1\x00', 0x18000, 0xdb) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000140)=ANY=[@ANYRESHEX=r5, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00./file1\x00']) ioctl$BTRFS_IOC_SPACE_INFO(r6, 0xc0109414, &(0x7f0000000600)={0xaf3, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendfile(r1, r2, 0x0, 0xfffffdef) 16:22:10 executing program 0: chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x40100000000) 16:22:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:22:23 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x480, 0x0) 16:22:23 executing program 0: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cpuidle_haltpoll', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x0) 16:22:23 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x7, 0x2, &(0x7f0000000140)=[{&(0x7f0000000240)="058032f73cc448845c694e6eadd50db5031be238c3830ff1e213cde0c9c9136424e0592464a34ea70a8c09be939be265e523117665f2c65051865ebbe6d10b5ab639775d0975cd1d5321e9ff7a61cdc21b575620051de759574c98d7324c637f69effd692db120c03d620176ada602da62f4d6a2f6fae39d35ace9734082876bbb6e543c698343c29491e5cb9d3e3ab91c112e7dcd9b0f5574e654d69893931196460c30164bc878f63120171700887e2eb96c2a778362a6bbb26315934a657498c46cf7bc66175e901091d5da207f5c057e99461782fa82f8", 0xd9, 0x10001}, {&(0x7f00000000c0)="15fe4c3460df3ebdea4ca39fedbe271f8702cc7b44c52c08d6e3ebc03822e3abcfec05a4470aed422d4131fc3bc476391406e1ab6e7cd78bc594ac8c621db68f", 0x40, 0x6}], 0x2000000, &(0x7f0000000380)={[{@uni_xlate}, {@shortname_mixed}, {@nonumtail}], [{@permit_directio}, {@context={'context', 0x3d, 'staff_u'}}, {@uid_gt={'uid>', 0xee01}}, {@obj_type={'obj_type', 0x3d, '\xf1)\xf3'}}, {@appraise}, {@subj_role={'subj_role', 0x3d, '\x0e}'}}, {@dont_measure}]}) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:22:23 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000013010500000000000000000000000000bba8771689516ef0b9ab60246e0906e731cbc7986d0919b50160b0f9ab1ac147cf0d5c01b76029334327a2230a517c979eeebeb441c2a65beef110866dfcb97d31658ee5f81773a1c862efd57935e7651ed6b90ad4e7a5b23891c71173f3e9a8c28d5b4fb113049df015d7f2057c865b591df5d2797f01c245a53cbaac38beb67ec8543ee1fc76da389a2f521469702a87c3b5af9d215c17efc51425aad48737389caf265ffa46a739ff985065b4478c2cc0a581cd02471cb80059fcfbf9b2b1b1a6f164a6db4cc9c4b3e85bea642af74ef26797a542eadecdecba86ac5a23f879037c5bcb5d47201eca38085fd91832076149d22dc2"], 0x14}}, 0x0) 16:22:23 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x9, 0x0, &(0x7f0000000180), 0x800002, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffd}}, {@nodiscard}, {@grpquota}, {@test_dummy_encryption}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x400, @mcast2, 0x9}, 0x1c) r3 = syz_open_dev$mouse(&(0x7f0000000080), 0xfffffffffffffffa, 0x2025c0) sendfile(r0, r3, 0x0, 0x5) 16:22:23 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:22:23 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x404443, 0x40) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r2, 0x0, 0xfffffdef) 16:22:23 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) open$dir(&(0x7f0000000180)='./file1\x00', 0x40002, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) kcmp(0x0, r2, 0x4, r3, r0) sendmsg$netlink(r0, &(0x7f0000002240)={&(0x7f0000000400)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000021c0)=[{&(0x7f0000000880)={0xac, 0x24, 0xbec4570988cbbf13, 0x70bd29, 0x25dfdbfe, "", [@generic="d686d82f4fee4964c73b49de333fba814bffe7eba99cc580664922b9b370a78319f820b5c900afb139680ac77d7ac858a669179a20d52ae80d3c865f1247ca13fb83e60f6ff94f47c1e0a7a2fda5c5a5064b7063030af02829ca2b7008bc1646977ce8b01f57bf77dea7fd6ac39b795be9ba80a1637e96c4fd954b0b8a54dee134191d6fdeb1f5f5322fef495381bb441172d75a6ed2d57dd1d8cb"]}, 0xac}, {&(0x7f0000002280)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000900ffff000008002000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x2e0}, {&(0x7f0000000e40)={0x110, 0x26, 0x20, 0x70bd27, 0x25dfdbff, "", [@nested={0xfe, 0x3e, 0x0, 0x1, [@typed={0x8, 0x8e, 0x0, 0x0, @pid=r2}, @generic="6f96cc6c326def0d8646e2e5588aa2d7fcfe76f974347b83d6ebffd7f3859426d49c40af536960590e80e1a263f1753926d6d16293e1d3dd420723b6048ede5ea59eb006ad37a4319d6773616c8ecf996842232f2c5985289892e6769ea0c22a1d97385382d9f283956951d29b586a495f04f8bb975490eadc5a3216aab647afb0c85c3ab99543a06d2bd0d273eb3b662972b27767fbf0f4e4e58a04fc7b4085350c586ce7997d689bd259c7fb92554f9c802f5f9135dea884639c1820b6c4753c9ab82da441bc0c1aaf7ba702c4877c1e24187408b567cd4b6c08fdf6141c303adb63155fb0ccb99729", @typed={0x8, 0x84, 0x0, 0x0, @u32}]}]}, 0x110}, {&(0x7f0000000500)={0x14, 0x30, 0x300, 0x70bd2a, 0x25dfdbff, "", [@typed={0x4, 0x7d}]}, 0x14}, {&(0x7f0000000fc0)={0x10a0, 0x21, 0x800, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x1089, 0x61, 0x0, 0x1, [@typed={0x8, 0x4e, 0x0, 0x0, @pid}, @generic="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", @typed={0x8, 0x48, 0x0, 0x0, @fd}, @generic="d896c07430afd86184ac6fb07231073112f36be4869ab2f81e266d9ab575d1961d866877645319f76edeaeeb9ff0aa41c9841da7a52d30471d8d6d94c675d55682d9e4f587f6183874d845cf2f0f338831205f4da2894821f202ad0c5754719e8fa95aa1f7", @typed={0x8, 0x6b, 0x0, 0x0, @pid}, @typed={0x8, 0x74, 0x0, 0x0, @pid=r2}]}, @typed={0x4, 0x21}]}, 0x10a0}, {&(0x7f0000002080)=ANY=[@ANYBLOB="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"], 0x114}], 0x6, 0x0, 0x0, 0x4000}, 0x24000084) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x282009f, r4}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="b4020000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006e72300000000000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="140002007665746830000000000000000000000008000300010000002cf5e486adaacfc460ed6986631640a6f3e8470243be9bc3df0540a378cd183e10d7cec1a10ed0bb7727bfa53d031799b3a1271cc5bd8c3daf224f45d27aef3a3c92c9113a3caef8e46c9366b4cce22f3d6e4c082496452d2c2e555b61bd1a723b88"], 0x2b4}, 0x1, 0x0, 0x0, 0xa79178773df43c7}, 0x4ccc0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fcdbdf250200000000000300060000000800030008000000080002000500000028000180050002000100000008000700", @ANYRES32=r4, @ANYBLOB="1400fbfffffff30000000000000000000000000100000300050000000800030003000000d0fc03000500000048000180060001000a000000060001286bd0e53c97eeebaefb26016c73000a0000003e0002000200000014000400ff01000000000000000000000000000108000700", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="0500020013000000"], 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000c40)=@polexpire={0x1a4, 0x1b, 0x1, 0x0, 0x0, {{{@in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x260e, 0x0, 0xfffffffffffffffe}, {0x0, 0x4}, 0x0, 0x0, 0x0, 0x1, 0x3}}, [@sa={0xe4, 0x6, {{@in=@dev={0xac, 0x14, 0x14, 0x3e}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0x5, 0x4e23, 0x7, 0x2, 0x0, 0x6e01a49f58b45820, 0x5e}, {@in=@remote, 0x4d3, 0x2b}, @in=@private=0xa010101, {0x1, 0x6, 0x825, 0x6, 0x7, 0x9, 0x7000000000000000, 0x1f}, {0x3, 0x7, 0x2, 0x8}, {0x5, 0x9, 0x3ff}, 0x70bd2b, 0x3507, 0xa, 0x4, 0xf8, 0x22}}]}, 0x1a4}}, 0x0) fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000000000), &(0x7f0000000080), 0x2, 0x2) [ 2059.250003] syz-executor.5[13479]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2059.251852] loop5: detected capacity change from 0 to 256 [ 2059.252760] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 16:22:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x500, 0x0) 16:22:24 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x7, 0x2, &(0x7f0000000140)=[{&(0x7f0000000240)="058032f73cc448845c694e6eadd50db5031be238c3830ff1e213cde0c9c9136424e0592464a34ea70a8c09be939be265e523117665f2c65051865ebbe6d10b5ab639775d0975cd1d5321e9ff7a61cdc21b575620051de759574c98d7324c637f69effd692db120c03d620176ada602da62f4d6a2f6fae39d35ace9734082876bbb6e543c698343c29491e5cb9d3e3ab91c112e7dcd9b0f5574e654d69893931196460c30164bc878f63120171700887e2eb96c2a778362a6bbb26315934a657498c46cf7bc66175e901091d5da207f5c057e99461782fa82f8", 0xd9, 0x10001}, {&(0x7f00000000c0)="15fe4c3460df3ebdea4ca39fedbe271f8702cc7b44c52c08d6e3ebc03822e3abcfec05a4470aed422d4131fc3bc476391406e1ab6e7cd78bc594ac8c621db68f", 0x40, 0x6}], 0x2000000, &(0x7f0000000380)={[{@uni_xlate}, {@shortname_mixed}, {@nonumtail}], [{@permit_directio}, {@context={'context', 0x3d, 'staff_u'}}, {@uid_gt={'uid>', 0xee01}}, {@obj_type={'obj_type', 0x3d, '\xf1)\xf3'}}, {@appraise}, {@subj_role={'subj_role', 0x3d, '\x0e}'}}, {@dont_measure}]}) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 2059.347218] syz-executor.3[13487]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2059.356138] ext4: Bad value for 'min_batch_time' [ 2059.356696] tmpfs: Unknown parameter '' [ 2059.456354] syz-executor.3[13487]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2059.479381] loop3: detected capacity change from 0 to 464 [ 2059.497247] ext4: Bad value for 'min_batch_time' 16:22:24 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x27800, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x109042, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file1/file0\x00', 0x40082, 0x99febad0d25db329) openat(r1, &(0x7f0000000080)='./file1/file0\x00', 0x2, 0xa8) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f0000000040)='./file1/file0\x00', 0xcc0c2, 0x130) write(r3, &(0x7f0000000200)='E', 0x140000) creat(&(0x7f0000000180)='./file1\x00', 0x6a) sendfile(r0, r2, 0x0, 0xfffffdef) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) write$binfmt_elf32(r5, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x3f, 0x6a, 0xfd, 0x7ff, 0x2, 0x3e, 0x20, 0x22d, 0x38, 0x3c1, 0x0, 0x7fff, 0x20, 0x1, 0x1, 0x5, 0x52fb}, [{0x5, 0xe0d1, 0x7, 0x3, 0xfff, 0x800, 0x7ff, 0x1}], "b05c52e10434dbfb436ba9649d2c6f4706c19b8bd3fb20630c7c448e3c5189c1979fd7cf4a857e5a0369f961c7daa1", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa87) r6 = syz_open_dev$hiddev(&(0x7f0000000140), 0xfe9, 0x200) ioctl$LOOP_SET_FD(r4, 0x4c00, r6) 16:22:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x600, 0x0) 16:22:24 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x501400, 0x40) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4442, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x62, 0x0, 0xee00}, {0x0, 0x6ef6000000000000, 0x0, 0x72}, {}, 0xf99, 0x6e6bba, 0x0, 0x0, 0x2}}, [@mark={0xc, 0x15, {0xfffffffd}}]}, 0xcc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/76, 0x4c}, {&(0x7f0000000240)=""/82, 0x52}], 0x2, 0x3, 0x7f1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x3}}, './file0\x00'}) sendfile(r0, r1, 0x0, 0xfffffdef) [ 2059.654048] syz-executor.5[13505]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 16:22:24 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)={0x58c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x144, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0bd6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "34e6683c578d13bc52018686bbe2db0e045e8ca4c512966f987eeb7e32c2dfc32216c14d"}}, @TIPC_NLA_NODE_ID={0x26, 0x3, "9cec2f6b660404dd905a956f0653bf1d22c7fc5a9d3def7ae686c97bf076028b75be"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "35c33d4c263330bda20095acbc14fbdc287bc5802ad0"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "0d0a20d896c7d5504b68a34940e4dc5e04c39592caaf90ec3ab0d1b5cebb"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe4a8}, @TIPC_NLA_NODE_ID={0x29, 0x3, "f1be31a11a9a9c7dc757b08b8d361d97629745d14880a0003ff639f6c6524c7bc3bdb922fb"}]}, @TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff801}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc08}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x28000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1a1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x85}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd8e8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffe1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x213a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xdc00000000000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd0}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9034}]}]}, 0x58c}, 0x1, 0x0, 0x0, 0x4000800}, 0x68060000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:22:24 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) rmdir(&(0x7f0000000080)='./file1\x00') write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(r0, &(0x7f00000000c0)='./file1/../file0\x00', 0x2, 0x40) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) openat(r3, &(0x7f0000000380)='./file1\x00', 0x640400, 0x122) sendmsg$nl_xfrm(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x4, 0x0, 0x0, 0x2}}}}, 0xc0}}, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000001ac0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000600)="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"/4096, 0x1000}, {&(0x7f0000001800)="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", 0x2b7}, {&(0x7f0000000240)="3524720f07d2c1b68125691716fedc7a9c6d2171cb7c4049802ddf0d3d40f2480a27928fbf075f3f35abda46f1482db389cca68c62697e2ca5c6768b059e722aea950d35cc17134082505c15ef0f531496f2c387e46bdb7b4fb35d354598c4bf1557c92d5900d02d889f78a23b1caf2cf974caf68699535e6bd8f43479e76189901dbc8622e136d5fe72eedf6e01b3fe7ca502f6fa1ee6f4d419251a3a072b834a3bd0b0f6f156fcebbe2af081fabc7669bc63b21b49a87eea5e4a1e7d4485ceb83a9d79919d34e132a3d1f984777093ac111791aefdda750ffee0a73a723c0a91b5d2798c46f2e8ef40d8cc2adfef30c972", 0xf2}, {&(0x7f0000000140)="4909986f62fc326c13dfa4f5de946eb19c8085106b26c6073320cffd2acbccf25a2400f6e21b9f7182926ebe22747076f53c153d26b2f6281c70af32b4bcde0cea488b319073982e0087e8603292537b2939ed68d8f13890e27dd46ddd967a7445c30c0a6ef2d42b5efc7cf8b8da8bf13c009e1e004f32bf4cf4537834716a9f1f511d11d40b9b35650bec23ee5e", 0x8e}], 0x4, 0x80000000, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) write(r3, &(0x7f0000000200)='E', 0x140000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000003c0)={"943dc1c8f31698e2996f6c29ee8ff617", 0x0, 0x0, {0x8, 0x4}, {0x100000000}, 0x3ff, [0xb7, 0x100000000, 0xfffffffffffffffc, 0x7, 0xde36, 0xffffffff, 0x2, 0x7ff, 0xe43c, 0x6, 0xdc7, 0x8001, 0xbbb, 0xffffffffffff7a3f, 0x9, 0x100]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000001600)={"26553a4de98bf20a58435ec1e8bbf0b6", 0x0, r5, {0xffffffffffff298e, 0x159f}, {0xfff, 0xa7}, 0x1, [0x0, 0x3fffc000000000, 0x4, 0x20, 0x5, 0xb45, 0x1, 0xfff, 0x9ee, 0x4, 0x6, 0x0, 0x7, 0x3, 0x4]}) sendfile(r0, r1, 0x0, 0xfffffdef) [ 2059.709695] loop5: detected capacity change from 0 to 256 [ 2059.717396] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 16:22:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1199, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@private2, r4}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x7a, r4}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x8}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x53, r4}) r5 = dup(r1) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 16:22:24 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:22:24 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:22:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x601, 0x0) [ 2060.120475] tmpfs: Unknown parameter '' 16:22:38 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x501400, 0x40) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4442, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x62, 0x0, 0xee00}, {0x0, 0x6ef6000000000000, 0x0, 0x72}, {}, 0xf99, 0x6e6bba, 0x0, 0x0, 0x2}}, [@mark={0xc, 0x15, {0xfffffffd}}]}, 0xcc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/76, 0x4c}, {&(0x7f0000000240)=""/82, 0x52}], 0x2, 0x3, 0x7f1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x3}}, './file0\x00'}) sendfile(r0, r1, 0x0, 0xfffffdef) 16:22:38 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:22:38 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:22:38 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x10902, 0x108) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x94042, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) sendfile(r0, r4, &(0x7f0000000000)=0x3, 0x8) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r2, 0x0, 0xfffffdef) 16:22:38 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x700, 0x0) 16:22:38 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x9, 0x0, &(0x7f0000000180), 0x800002, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffd}}, {@nodiscard}, {@grpquota}, {@test_dummy_encryption}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x400, @mcast2, 0x9}, 0x1c) r3 = syz_open_dev$mouse(&(0x7f0000000080), 0xfffffffffffffffa, 0x2025c0) sendfile(r0, r3, 0x0, 0x5) 16:22:38 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015000000000000000000"], 0xcc}}, 0x0) r3 = accept$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10) getsockname(r3, &(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @private2}, &(0x7f00000001c0)=0x80) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000600)={0x0, 0x2, 0x1, [0x2, 0x7, 0x8001, 0x9, 0x1], [0x4, 0x1f, 0x7, 0x3f, 0x0, 0x30000, 0x1, 0x8001, 0x51, 0x4, 0x6, 0xff, 0x3ff, 0x8, 0xa2b, 0x2, 0x80000000, 0x3, 0xff, 0x1d6, 0x80000001, 0x8, 0x4, 0x2, 0x8, 0x0, 0x81, 0x5, 0x2, 0x7, 0x6, 0x7fff, 0x54, 0xffffffffffffffff, 0xffffffffffffffff, 0x7ff, 0x1, 0x3, 0x5, 0x80000, 0xff21, 0x3ff, 0x2cc, 0x80000001, 0x2, 0x2, 0x1, 0x9, 0x247f, 0x1, 0x3a, 0xfffffffffffffffb, 0x6, 0x5, 0x9, 0xfff, 0x2, 0x2, 0x80000000, 0x5, 0xdc0, 0x6, 0x2, 0xffffffff, 0x1fc2d443, 0x3, 0x2, 0xfffffffffffff801, 0x7, 0x1, 0xfff, 0x1, 0x1, 0x1, 0x4, 0x1, 0x1, 0x2, 0x7708, 0x1564, 0x1, 0x7, 0x10001, 0x5dd, 0xc13, 0x400, 0x7ff, 0x6, 0x5, 0xe3d, 0x5, 0x9c7c, 0x6, 0xec9, 0x6, 0x6, 0x5, 0x7254946, 0x7fffffff, 0x80, 0x4, 0x3, 0x1, 0x8, 0x4, 0x0, 0x2, 0x3, 0x1a, 0x1, 0x10001, 0x2, 0x5f, 0x13b, 0x4, 0x81, 0x3f, 0x4, 0x5482, 0x0, 0x7]}) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000000)={{r0}, {@val={r4}, @max}}) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r6, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r5, 0x0, 0xfffffdef) 16:22:38 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = getgid() openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x2, 0x1) setgroups(0x1, &(0x7f0000000000)=[r3]) lstat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x800c, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_any}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@privport}, {@access_uid={'access', 0x3d, r4}}, {@privport}, {@debug={'debug', 0x3d, 0x7}}, {@loose}], [{@euid_gt={'euid>', r5}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}) sendfile(r0, r1, 0x0, 0xfffffdef) [ 2073.897534] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 16:22:38 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x58242, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 2074.029371] syz-executor.4[13551]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2074.061012] ext4: Bad value for 'min_batch_time' [ 2074.080808] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 16:22:38 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:22:38 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa00, 0x0) 16:22:39 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:22:39 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4800, 0x0) 16:22:39 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x40181, 0x41) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) rmdir(&(0x7f0000000000)='./file1\x00') 16:22:39 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:22:39 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x9, 0x0, &(0x7f0000000180), 0x800002, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffd}}, {@nodiscard}, {@grpquota}, {@test_dummy_encryption}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x400, @mcast2, 0x9}, 0x1c) r3 = syz_open_dev$mouse(&(0x7f0000000080), 0xfffffffffffffffa, 0x2025c0) sendfile(r0, r3, 0x0, 0x5) [ 2074.883685] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 2075.047177] syz-executor.4[13581]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2075.062364] ext4: Bad value for 'min_batch_time' 16:22:55 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x501400, 0x40) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4442, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x62, 0x0, 0xee00}, {0x0, 0x6ef6000000000000, 0x0, 0x72}, {}, 0xf99, 0x6e6bba, 0x0, 0x0, 0x2}}, [@mark={0xc, 0x15, {0xfffffffd}}]}, 0xcc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/76, 0x4c}, {&(0x7f0000000240)=""/82, 0x52}], 0x2, 0x3, 0x7f1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x3}}, './file0\x00'}) sendfile(r0, r1, 0x0, 0xfffffdef) 16:22:55 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:22:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4c00, 0x0) 16:22:55 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000005c0)='./file0\x00', 0x1, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = signalfd(r0, &(0x7f0000000080)={[0xffff]}, 0x8) r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x109041, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) sendfile(r2, r3, 0x0, 0x8) 16:22:55 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r7 = getgid() setgroups(0x1, &(0x7f0000000000)=[r7]) getgroups(0x9, &(0x7f0000000380)=[0xee01, 0xee00, 0xee01, 0xee00, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file0\x00'}) setxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000400)={{}, {}, [{}, {0x2, 0x0, 0xee00}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x1, 0xee00}, {0x2, 0x4, 0xee00}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x4, r2}, {0x2, 0x7, r3}], {0x4, 0x4}, [{0x8, 0x2, r4}, {0x8, 0x7}, {0x8, 0x5, r5}, {0x8, 0x4}, {0x8, 0x5, r6}, {0x8, 0x4, r7}, {0x8, 0x4, r8}, {0x8, 0x4, r9}, {0x8, 0x2, 0xee01}, {0x8, 0x7, 0xffffffffffffffff}], {0x10, 0x3}, {0x20, 0x3}}, 0xb4, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r11, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r10, 0x0, 0xfffffdef) 16:22:55 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:22:55 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) openat(r1, &(0x7f0000000000)='./file1\x00', 0x1, 0x6d) sendfile(r0, r1, 0x0, 0xfffffdef) 16:22:55 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x9, 0x0, &(0x7f0000000180), 0x800002, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffd}}, {@nodiscard}, {@grpquota}, {@test_dummy_encryption}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x400, @mcast2, 0x9}, 0x1c) r3 = syz_open_dev$mouse(&(0x7f0000000080), 0xfffffffffffffffa, 0x2025c0) sendfile(r0, r3, 0x0, 0x5) 16:22:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x6800, 0x0) [ 2090.943965] syz-executor.4[13602]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2090.955934] ext4: Bad value for 'min_batch_time' 16:22:55 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0xc0000000000, 0x8, &(0x7f0000000800)=[{&(0x7f0000000240)="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", 0xff, 0x575800000000}, {&(0x7f00000000c0)="1b407adda362a198c2ae6082bcd94b53c7f6c7224b4c1a0aa79cba0b3394212166b6bc", 0x23, 0x1}, {&(0x7f0000000140)="c0c3cb29f5e43bf9ff9d29d27b5536354cf87b7d3c52ac091222965ac89f04402a3d2fbb0a896ada999fe865c5cffa74671c7f47465f6e13162a171b9d6118cd6ca0a2d23702a075e2252c5cb104701b2ab1f076feb23673f30e291c560e5c307e0b2a8ef4a22f347277bdc2823d72039b2df8c5fe37b16e72f772aa489b452b3013671aee802b54a2c0", 0x8a, 0x5}, {&(0x7f0000000380)="9f0577e8e9a7a8b0b30df6c892e78aef69dc8c61fa2a923565ac787359bd17f3f389712773e6782a30b36a6b981ef81418d9e4a0a6cda238fe826362d4e8", 0x3e, 0x2}, {&(0x7f00000003c0)="59d91546f73c2476d2ff20f6e443930b5b52751aa8cc496ef0a23981b47c5cb1ed71736352362d85af38e94bf4da4076a712fdc77ce17152a73598563a2b5f47cfd130acedc7ec839eef1b0858a6113d2b770985365ebca86db878ca11b7b53456ca633153c62451a0ed6884756f505dc203553c7dab23dbffda8f22ff9bf1492abb7203c0ba0d2a865901bda9b8923d59cf5228fa2706425ed1741b7fb13b549fd8ee55944f5a902287c8", 0xab, 0xffff}, {&(0x7f0000000480)="5d9e7b22b0401af2bee7655e952b81758f9629694228f6ab28df162e99f6618b01b8bd973f05d8d7c62102fa2cc7e30573bf9b38d844b6b64016cc04724dcd2a0def4d5ad7edd518f28540636734398914f097e301dc57cd29b79488a47a551b927a3b7297acacaea3fe213d923f66bde386b63fc36ecc34e3e7317afb8ead1b62f573ef09c3c9e619b7fd0a81c17ec5f09d44a718c53177a9325f874890d68b4bdd23e1a9c616bb5a3ec92c7da654ace7d7f77e57ce3a34a35c0a7d2b1decae7d6dd0ccee5af99c199790b6147f3d50ac55ad7066bf9d5b4cf47f2d4229589bd53b104460d3527d3be50b3e476bf2e982c3", 0xf2, 0x1}, {&(0x7f0000000600)="893aa52f3877d7bb591e540489a4484f9939745a37a67f0efa0093ef1de1bdc5f5ea05d47851aed2409b9a856dd9e62127914ca28c058ba758c61ac7be110266bbc4312e9e3ea0c8f6fd0e3b7471ae7c3e4d7e72e44440d5558b938507003c33e1066cb709f4ee7adc1011e93f7b5c4412a03b30552d63125a0c22fd8716883b05f94cd0c8a4123656df7456b76256a50a5a18f225bf6185ce8e91e81edca3cab95ecbacb9bf002953722c6484ca58926edeb9605dd7cec86f54f6e1c9bdfbfeed49257ff2c0fc783146e7219050efb0000df7ee9e81", 0xd6, 0x7}, {&(0x7f0000000700)="a6ee77590e37c91146b9321da855a6fe16d886ab3c4ffe73d54662c2beaf347cdcaa244c2336b650f129483e6b35c2fb53205a8bbe90709269ca9ddfabbe426d0e1ab79ff7fb78b073242b31d5ff6e7e40e058b73f14c0467b1268e06b22f3872b839fb465eb1cf5b500b2ad9a25eb3bd990b3a210630a1cf4d2ef22871f96047cc48881856efadad7a2de51773bd4a0fabe24983f9c98397f8385a3465339dfeaa43b5b40393292e02e1ccff24c28d55fdda93d002513b4ce18d2d28fb8b80c6da26c720fcd65c04fcc51d328667ebd37ce280a1cc5ff", 0xd7, 0x7fffffff}], 0x30835, &(0x7f00000008c0)={[{'tmpfs\x00'}, {'tmpfs\x00'}, {'(-(:^\xfd'}, {}, {'$'}], [{@euid_eq={'euid', 0x3d, 0xee01}}]}) openat(r3, &(0x7f0000000900)='./file1\x00', 0x40000, 0x100) sendfile(r0, r1, 0x0, 0xfffffdef) 16:22:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x6c00, 0x0) 16:22:55 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:22:56 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xfe9d87053f182ec8, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2d2ee624c61ac055c66a06865e920158e561d173a973a446c6c7a7ad25c70938e5551168f1a242f9abacd8c1af4cce79a3ea935e38c1e0", 0x37}, {&(0x7f0000000240)="6a4568c09b524d298ac6500e2b159b36ab1ce64eb0eb2ad14d93bbb81bb14e4f1da553eee93ba25602c907eabf169f675ec35153318f9ba7684bb1365b0f4cfff6364d29f7941e52a958fbda62ac9d9a314a958b587424703b6e94e57b101cc7037f7b43de524109022b96ddca3aec37cc752b2c0640181389af1788a2d62697cc7179bae60ca90fada2c7e5279957afed44de2adddf014f0438dbf90aa6a7e4a4c8d2fe99f01398fb92f16d06e2c11fcbfb12ad322e20a829b485019a511915f3a002f60cf75f94cde3ff817ec6346d58df32cad4d2f626844abf90a4b04ea2", 0xe0}, {&(0x7f0000000080)="f98b2a7a7a1f6da25dcf16b9d8b9caa682c1d895a927", 0x16}], 0x3, 0x3, 0xc0000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 2091.217861] syz-executor.3[13613]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2091.239346] loop3: detected capacity change from 0 to 264192 16:22:56 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x9, 0x0, &(0x7f0000000180), 0x800002, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffd}}, {@nodiscard}, {@grpquota}, {@test_dummy_encryption}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x400, @mcast2, 0x9}, 0x1c) syz_open_dev$mouse(&(0x7f0000000080), 0xfffffffffffffffa, 0x2025c0) 16:22:56 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 2091.327555] syz-executor.3[13613]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2091.351435] loop3: detected capacity change from 0 to 264192 16:22:56 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x7400, 0x0) [ 2091.641477] syz-executor.4[13628]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2091.666294] ext4: Bad value for 'min_batch_time' 16:23:11 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x9, 0x0, &(0x7f0000000180), 0x800002, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffd}}, {@nodiscard}, {@grpquota}, {@test_dummy_encryption}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x400, @mcast2, 0x9}, 0x1c) 16:23:11 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x7a00, 0x0) 16:23:11 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x501400, 0x40) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4442, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x62, 0x0, 0xee00}, {0x0, 0x6ef6000000000000, 0x0, 0x72}, {}, 0xf99, 0x6e6bba, 0x0, 0x0, 0x2}}, [@mark={0xc, 0x15, {0xfffffffd}}]}, 0xcc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/76, 0x4c}, {&(0x7f0000000240)=""/82, 0x52}], 0x2, 0x3, 0x7f1) sendfile(r0, r1, 0x0, 0xfffffdef) 16:23:11 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:23:11 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYRES16, @ANYRES32, @ANYRES64=r1, @ANYRES64], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r3, 0x0, 0xfffffdef) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') unlink(&(0x7f00000000c0)='./file1\x00') fcntl$notify(r5, 0x402, 0x2) 16:23:11 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x406, r0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000000)='tmpfs\x00', &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r2, 0x0, 0xfffffdef) 16:23:11 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)=ANY=[@ANYBLOB="be80fa6a18743c63c1b2296c", @ANYRES32=r0, @ANYRES16=r0]) r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x8000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) setxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)=@random={'btrfs.', 'tmpfs\x00'}, &(0x7f00000002c0)='-\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) getsockname$unix(r3, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff}, 0x4800) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {0x1f}}, './file1\x00'}) write(r4, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r2, 0x0, 0xfffffdef) r6 = accept4(r0, &(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f00000001c0)=0x80, 0x80c00) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0xd0009411, &(0x7f0000000600)={{0x0, 0x1, 0x9, 0x1ff, 0xf6a8, 0x3, 0x3ff, 0x0, 0x84, 0x200, 0x100, 0x1, 0x7, 0x0, 0x6}}) 16:23:11 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) [ 2107.309448] syz-executor.4[13653]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2107.311665] ext4: Bad value for 'min_batch_time' 16:23:12 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x8004, 0x0) 16:23:12 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:23:12 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x9, 0x0, &(0x7f0000000180), 0x800002, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffd}}, {@nodiscard}, {@grpquota}, {@test_dummy_encryption}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) 16:23:12 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:23:12 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1, 0x4, &(0x7f0000000440)=[{&(0x7f0000000140)="136f7ed778a8445ade8022f8018a81bfab3206896dc16de0a4399673fb12097e703fbe4a2dc43b3281ee2bbd4e3ef83a8e37ee4401b01bef86850d8a57aa9852020f26098a80b4645a7c5a6791fc40ca2a670ee9cd", 0x55, 0xffffffffffffff2c}, {&(0x7f0000000240)="85f669992e75cac24e102116f5e3fbe90037858a50a440bf186bfdb46ecb30473ff4c7b2c9567312055e3bb0906d45e61c31a340575c2750c7fdcacd2cce06c07407584458f1ddd536230b6d09f8bf4f547f602469100216c95c35ea240efc121c5187bbf315947aca55eb994746699311302ffdb07763d3426f22bc", 0x7c, 0x10000}, {&(0x7f00000002c0)="c03d8f73a2a8477a1c4399aa3f4235b71cb1ad3d1185c29da4c5e3477376e2b5079ccda22b4623213fb39994a7d341b8c8ff3a253083e12cf30de553ee0a9927f253e7599818546661a5406948546923eeaf1f06644a98c361ccaa0ee31fa3b29a58019237416cae8c036b", 0x6b, 0x1}, {&(0x7f0000000380)="792275aea4dd523567077303297bdba5ea8c0399706fd35b4bf96afee6b9b5ebbd3a763365b8c3883df79f1064060e70016c533393200f190cdc04cc5e2055f99f163f8d56b2f5f21e7600a232dfc044ef487f1214c160d1c7b44ea6a38a80b2af63ba3499bd32ae003002bb2a59ec319af09c2ddebf61b5c464509b5526b2b0bb6af15aa842c16940017f136efa11518f81bca5dea93ac14347a1a28e5968c4638345bae4", 0xa5, 0x8000}], 0x1000000, &(0x7f00000004c0)={[{'-,.@-\''}, {'tmpfs\x00'}, {'tmpfs\x00'}, {'tmpfs\x00'}, {'tmpfs\x00'}, {'^'}, {'tmpfs\x00'}, {'\xf5@+@{#\\]*'}, {'\xcf'}, {'V\xb4&\x17'}], [{@subj_role={'subj_role', 0x3d, '+-,\x0e!%!\\./--'}}, {@fsname={'fsname', 0x3d, 'tmpfs\x00'}}, {@appraise}, {@defcontext={'defcontext', 0x3d, 'root'}}]}) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:23:12 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xf002, 0x0) [ 2107.869814] syz-executor.4[13669]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2107.892409] ext4: Bad value for 'min_batch_time' 16:23:12 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) [ 2107.972780] syz-executor.3[13672]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2107.987022] loop3: detected capacity change from 0 to 16383 [ 2108.004527] nfs: Unknown parameter '-' 16:23:12 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x501400, 0x40) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4442, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x62, 0x0, 0xee00}, {0x0, 0x6ef6000000000000, 0x0, 0x72}, {}, 0xf99, 0x6e6bba, 0x0, 0x0, 0x2}}, [@mark={0xc, 0x15, {0xfffffffd}}]}, 0xcc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:23:12 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x9, 0x0, &(0x7f0000000180), 0x800002, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffd}}, {@nodiscard}, {@grpquota}, {@test_dummy_encryption}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) 16:23:12 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0x7) 16:23:12 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x20000, 0x0) 16:23:13 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) [ 2108.224979] syz-executor.3[13685]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2108.307524] loop3: detected capacity change from 0 to 16383 [ 2108.352495] syz-executor.4[13693]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2108.367667] ext4: Bad value for 'min_batch_time' 16:23:28 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:23:28 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) write$P9_RREADDIR(r0, &(0x7f0000000080)={0x68, 0x29, 0x1, {0x8, [{{0x4, 0x2, 0x8}, 0x4c2, 0xd0, 0x7, './file1'}, {{0xc5, 0x2, 0x1}, 0x8, 0x9, 0x7, './file1'}, {{0x40, 0x3}, 0x9, 0x80, 0x7, './file1'}]}}, 0x68) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:23:28 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x501400, 0x40) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4442, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x62, 0x0, 0xee00}, {0x0, 0x6ef6000000000000, 0x0, 0x72}, {}, 0xf99, 0x6e6bba, 0x0, 0x0, 0x2}}, [@mark={0xc, 0x15, {0xfffffffd}}]}, 0xcc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r0, r1, 0x0, 0xfffffdef) 16:23:28 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80000, 0x0) 16:23:28 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000240)="d4ba531c70a71f53f3c01c8684ea6f4c527a975966fc38bc0fdd57be1de7d519554300bf85d02a7db81cae37b68c0cce99ab4905ed509baaefa8f5b92c0365ab99c4b519a6a2ea1587a88572a4c06bca2261198d4c8ad1adb0fa364aa0e6fa7f373dfb878eb2c4ddc06ebce7abd61f33360b48cf9451a288d03f9d1960b09051f2d481d8cd768cf8358f221550814abf09385deaa1239d690110f139cff561008342dae5d9058f08c7644d915dc6f6418447ad361eb3d278469fc4a346ae3335ac17f8b5f0d8c7deac4176beae5bc206b836f5b47d269aa33c4564cfa5a724", 0xdf}, {&(0x7f0000000380)="15e13c77ddf628b9ba14df21d71a5a14efd1f5fef6e3705b0cfa948996ac6d23902ec7e78d174124fd4ee114c6cb844ddcc9ca148471895ac89089ae664bf23d069af3d66c0b185ad7c1bc03a18b04127d76f2ea88ee05f6134e481a931b3f9a189d398071abc3fc85fa858b23baa439daf5a7fd54e008a61e8615d7a02b0e11aa999f604c327f77af84f144717b32e6a0b5bc276ff68bc09fbea3d52f0b64d1fbe4fc7210033e94a4edb5b5d64201ad3f733276b84d627690a229be7b5b1198b91a9080cdd82b445893db5e4fc9c5e6c5", 0xd1}], 0x2, 0x0, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:23:28 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:23:28 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x9, 0x0, &(0x7f0000000180), 0x800002, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffd}}, {@nodiscard}, {@grpquota}, {@test_dummy_encryption}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 16:23:28 executing program 6: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f00000000c0)=0xfff) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) r4 = openat(r1, &(0x7f0000000000)='./file1\x00', 0xd4042, 0x50) write(r4, &(0x7f0000000200)='E', 0x140000) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) sendfile(r1, r2, 0x0, 0xfffffdef) [ 2123.937917] syz-executor.4[13716]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2123.961606] ext4: Bad value for 'min_batch_time' 16:23:28 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:23:28 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x9, 0x0, &(0x7f0000000180), 0x800002, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffd}}, {@nodiscard}, {@grpquota}, {@test_dummy_encryption}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) 16:23:28 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:23:29 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) [ 2124.250163] syz-executor.4[13728]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2124.262227] ext4: Bad value for 'min_batch_time' 16:23:29 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8002, 0xd5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) 16:23:29 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x9, 0x0, &(0x7f0000000180), 0x800002, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffd}}, {@nodiscard}, {@grpquota}, {@test_dummy_encryption}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) [ 2124.486785] syz-executor.4[13733]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2124.498896] ext4: Bad value for 'min_batch_time' 16:23:29 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:23:29 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x9, 0x0, &(0x7f0000000180), 0x800002, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffd}}, {@nodiscard}, {@grpquota}, {@test_dummy_encryption}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) [ 2124.741376] syz-executor.4[13746]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 16:23:29 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1000000, 0x0) 16:23:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2000000, 0x0) 16:23:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x1514c2, 0x86) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r2, 0x0, 0xfffffdef) 16:23:43 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x40) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:23:43 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:23:43 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x501400, 0x40) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4442, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x62, 0x0, 0xee00}, {0x0, 0x6ef6000000000000, 0x0, 0x72}, {}, 0xf99, 0x6e6bba, 0x0, 0x0, 0x2}}, [@mark={0xc, 0x15, {0xfffffffd}}]}, 0xcc}}, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:23:43 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) mount$cgroup2(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x22040, &(0x7f0000000380)={[{@memory_localevents}, {@subsystem='perf_event'}, {@memory_recursiveprot}, {@subsystem='cpu'}, {@subsystem='blkio'}, {}, {@memory_localevents}, {@memory_localevents}, {}, {@subsystem='perf_event'}], [{@smackfsdef={'smackfsdef', 0x3d, '-*'}}, {@uid_lt={'uid<', r1}}, {@fowner_gt}, {@permit_directio}, {@permit_directio}, {@pcr={'pcr', 0x3d, 0x1d}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r2, 0x0, 0xfffffdef) 16:23:43 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:23:43 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x9, 0x0, &(0x7f0000000180), 0x800002, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffd}}, {@nodiscard}, {@grpquota}, {@test_dummy_encryption}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) [ 2138.999049] syz-executor.4[13765]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2139.005194] ext4: Bad value for 'min_batch_time' 16:23:43 executing program 4: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x9, 0x0, &(0x7f0000000180), 0x800002, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffd}}, {@nodiscard}, {@grpquota}, {@test_dummy_encryption}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) 16:23:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3000000, 0x0) [ 2139.230259] syz-executor.4[13782]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 16:23:44 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) [ 2139.280302] ext4: Bad value for 'min_batch_time' 16:23:44 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x248) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:24:00 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000, 0x0) 16:24:00 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x14000, 0x1, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x406002, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = syz_mount_image$nfs(&(0x7f00000001c0), &(0x7f0000000240)='./file1\x00', 0x3, 0x2, &(0x7f0000000400)=[{&(0x7f0000000280)="59bda4e74754b4a8ce038aa62529cd4b891d92a6f8c49ea35f8e0c5fd2a5f2edc8f50850120926595d0b64abacc1eaf8c69b2e07e00971a01818ec1c211640817f5838262a7cc1b4c036925ea709c3596b8d2e2e81026b7063b128569760384e09f451e42c0fe36471cb2714f8343f84d85b75504a13a98bd97741576f5b36bca0b3e3caea231b5a6d30b300d55a6163406ab8d13a2c5af7000391d6e85e218b", 0xa0, 0x7495}, {&(0x7f0000000380)="3a9f3446abf7d57290d8c41e15ef1685d332d5f55f4869e16a609c451f2c37edb1f8d6f10525eabd492914dc6c2dab839d1245e9793808b41c916bbb9503204438e387dc7f0d98bcaef2320673026fad94e34a27f9ac83013c342d9cec2078209edc5333f6849933e44a78fc32ea5d277c8b71e061333107b0a5659366", 0x7d, 0x13d}], 0x0, &(0x7f0000000440)={[{'tmpfs\x00'}, {}, {'-/$${'}, {}, {'!'}, {'tmpfs\x00'}], [{@euid_gt}]}) openat(r3, &(0x7f0000000480)='./file1\x00', 0x100100, 0x1b) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r2, 0x0, 0xfffffdef) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, [@mark={0xc}]}, 0xcc}}, 0x0) write(r5, &(0x7f0000000800)="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", 0x1b5) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140)={0x4b0001, 0x20}, 0x18) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000180)) 16:24:00 executing program 2: chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) openat2(r1, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)={0x20080, 0x100, 0x9}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x0, &(0x7f0000000340), 0x0, 0x4) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x0, 0x0, 0x5d}, 0xed) mknodat$loop(r3, &(0x7f0000000000)='./file1\x00', 0x20, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:24:00 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 16:24:00 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0xd0a00000}}, './file1/file0\x00'}) write(r2, &(0x7f0000000200)='E', 0x140000) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1/file0\x00', 0x600, 0x4a) sendfile(r0, r1, 0x0, 0xfffffdef) 16:24:00 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:24:00 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x9, 0x0, &(0x7f0000000180), 0x800002, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffd}}, {@nodiscard}, {@grpquota}, {@test_dummy_encryption}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) 16:24:00 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x501400, 0x40) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4442, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r0, r1, 0x0, 0xfffffdef) [ 2155.996383] syz-executor.4[13809]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 16:24:00 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5000000, 0x0) 16:24:00 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x9, 0x0, &(0x7f0000000180), 0x800002, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffd}}, {@nodiscard}, {@grpquota}, {@test_dummy_encryption}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) [ 2156.310800] syz-executor.6[13817]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 16:24:01 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) [ 2156.345267] loop6: detected capacity change from 0 to 116 [ 2156.362114] nfs: Unknown parameter 'tmpfs' 16:24:01 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) [ 2156.452503] syz-executor.4[13825]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 16:24:01 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) r2 = getgid() setgroups(0x1, &(0x7f0000000000)=[r2]) chown(&(0x7f0000000000)='./file1\x00', r1, r2) chdir(&(0x7f0000000340)='./file1\x00') openat(r0, &(0x7f00000000c0)='./file1\x00', 0x509840, 0x110) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r5, &(0x7f0000000200)='E', 0x140000) sendfile(r3, r4, 0x0, 0xfffffdef) 16:24:01 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x6000000, 0x0) [ 2156.583224] syz-executor.6[13826]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2156.596565] loop6: detected capacity change from 0 to 116 [ 2156.625068] nfs: Unknown parameter 'tmpfs' 16:24:01 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x9, 0x0, &(0x7f0000000180), 0x800002, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffd}}, {@nodiscard}, {@grpquota}, {@test_dummy_encryption}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) 16:24:01 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x501400, 0x40) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4442, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:24:01 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0xee00, 0xee01}}, './file1\x00'}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x7}}, './file1\x00'}) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 2156.978927] syz-executor.4[13841]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 16:24:01 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x6010000, 0x0) [ 2157.129029] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 2157.130772] File: /syzkaller-testdir797828906/syzkaller.PXLnhj/223/file1 PID: 13839 Comm: syz-executor.2 16:24:18 executing program 4: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', 0x0, 0x9, 0x0, &(0x7f0000000180), 0x800002, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffd}}, {@nodiscard}, {@grpquota}, {@test_dummy_encryption}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) 16:24:18 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:24:18 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:24:18 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:24:18 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x501400, 0x40) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4442, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:24:18 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x98180, 0x84) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000140), 0x4000) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:24:18 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x7000000, 0x0) 16:24:18 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000000)="c3aa472d3fef8d", 0x7) sendfile(r0, r1, 0x0, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) pwritev(r4, &(0x7f0000000240), 0x0, 0x44e, 0x1) sendmsg$nl_xfrm(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="cc0000001b0001000000000000000000fe880000000000000000000000000001fe8000"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015000000000000000000"], 0xcc}}, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000180), 0x3c23, 0x101000) openat(r5, &(0x7f00000001c0)='./file1\x00', 0x200, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x5}}, './file1\x00'}) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f00000000c0)) [ 2173.380384] syz-executor.4[13869]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2173.560568] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 16:24:18 executing program 4: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', 0x0, 0x9, 0x0, &(0x7f0000000180), 0x800002, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffd}}, {@nodiscard}, {@grpquota}, {@test_dummy_encryption}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) [ 2173.654501] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2173.745950] syz-executor.4[13886]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 16:24:18 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa000000, 0x0) 16:24:18 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:24:18 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x4, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r1 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x5, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="64afbca9da163ddb02308606a92089c2a87dfa8ce77b06c5c3c0c1274f3aeb895cdba944a2af214231e53d9c776232c47e1ff62fda154e4decf070845fd5c299e646ddfabe", 0x45, 0x7fffffff}], 0x11000, &(0x7f0000000280)={[{@fat=@quiet}, {@shortname_winnt}], [{@appraise_type}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@subj_type={'subj_type', 0x3d, 'tmpfs\x00'}}]}) r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1/../file0\x00', 0x184882, 0x8) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4, @in_args={0x2}}, './file1/../file0\x00'}) openat(r5, &(0x7f0000000380)='./file0\x00', 0x101240, 0x6a) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r6, &(0x7f0000000200)='E', 0x140000) sendfile(r2, r3, 0x0, 0x6) 16:24:18 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) [ 2174.089731] syz-executor.3[13892]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2174.129290] loop3: detected capacity change from 0 to 264192 [ 2174.200032] syz-executor.3[13892]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 16:24:33 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:24:33 executing program 4: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', 0x0, 0x9, 0x0, &(0x7f0000000180), 0x800002, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffd}}, {@nodiscard}, {@grpquota}, {@test_dummy_encryption}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) 16:24:33 executing program 6: ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)={0x3, 0x6, 0x7}) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x101040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:24:33 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x282009f, r1}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private1, @private2, @mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x282009f, r4}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r5, 0x890b, &(0x7f0000000380)={@private1, @private2, @mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x282009f, r7}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="b4020000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="08000100", @ANYRES16=r2, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRESOCT, @ANYBLOB="140002006e72300000000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="1400020076657468300000000000000000000000080003002cf5e486adaacfc460ed6986631640a6f3e8470243be9bc3df0540a378cd183e10d7cec1000ed0bb7727bfa53d031799b3a1271cc5bd8c3daf224f45d27aef3a3c92c9913a3caef8e46c9366b4cce22f3d6e4c082496452d2c2e555b61bd1a723b8800000000122d6e5a5b9b323afcc7d5c1b17bfea82f031fa6"], 0x2b4}, 0x1, 0x0, 0x0, 0xa79178773df43c7}, 0x4ccc0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="dc010000", @ANYRES16=0x0, @ANYBLOB="000127bd7000ffdbdf25170000006c00018008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006d616376746170300000000000000000080003000200000008000300030000004800018014000200626f6e6430000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=r4, @ANYBLOB="3c000180140002006d61637365633000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a6b616c6c657230000000000000"], 0x1dc}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000004) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r10, &(0x7f0000000200)='E', 0x140000) sendfile(r8, r9, 0x0, 0xfffffdef) 16:24:33 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x501400, 0x40) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:24:33 executing program 2: write(0xffffffffffffffff, &(0x7f0000000080)="2b071512b4f12f8706c6a333d36bf5772594893f29f563899d0f6485a2fe1cd8a20f0d881f7fd2b521077ddf8ad3b1655ce17c4c3cd610da18bee409e83bfbfb96f60cfa2a7039575ae5741fbe2faa3ed93519061cce1174", 0x58) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:24:33 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:24:33 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x48000000, 0x0) [ 2189.279860] syz-executor.4[13915]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 16:24:34 executing program 5: chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:24:34 executing program 4: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x800002, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffd}}, {@nodiscard}, {@grpquota}, {@test_dummy_encryption}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) 16:24:34 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4c000000, 0x0) 16:24:34 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:24:34 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000240)=""/227) sendfile(r0, r1, 0x0, 0xfffffdef) openat(r3, &(0x7f0000000000)='./file1\x00', 0x101000, 0x0) [ 2189.641418] syz-executor.4[13933]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2189.669762] ext4: Bad value for 'min_batch_time' 16:24:34 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='\x00', &(0x7f00000000c0)='./file1\x00', r1) 16:24:34 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x68000000, 0x0) 16:24:34 executing program 4: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x800002, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffd}}, {@nodiscard}, {@grpquota}, {@test_dummy_encryption}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) [ 2190.051917] ext4: Bad value for 'min_batch_time' 16:24:49 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000008800), &(0x7f0000008840)=0x4) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x7}}, './file1\x00'}) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) sendfile(r1, r2, 0x0, 0xfffffdef) 16:24:49 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) rmdir(&(0x7f0000000000)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:24:49 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x6c000000, 0x0) 16:24:49 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x501400, 0x40) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:24:49 executing program 4: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffd}}, {@nodiscard}, {@grpquota}, {@test_dummy_encryption}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) 16:24:49 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4d01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x100, 0x7e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) recvmmsg$unix(r0, &(0x7f0000002200)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000380)=""/235, 0xeb}, {&(0x7f00000002c0)=""/48, 0x30}, {&(0x7f0000000480)=""/140, 0x8c}, {&(0x7f0000000600)=""/150, 0x96}, {&(0x7f00000006c0)=""/152, 0x98}], 0x5, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f00000008c0), 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000a40)=""/247, 0xf7}, {&(0x7f0000000300)=""/16, 0x10}, {&(0x7f0000000b40)=""/210, 0xd2}, {&(0x7f0000000c40)=""/219, 0xdb}], 0x5}}, {{&(0x7f0000000dc0), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000e40)=""/209, 0xd1}, {&(0x7f0000000540)=""/21, 0x15}, {&(0x7f0000000f40)=""/232, 0xe8}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x4, &(0x7f0000002080)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x158}}], 0x3, 0x2040, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000022c0)={{}, {0x1, 0x6}, [{0x2, 0x0, r4}], {0x4, 0x4}, [{0x8, 0x0, r5}, {0x8, 0x3, 0xee01}, {}, {0x8, 0x3, 0xee00}, {0x8, 0x5, 0xffffffffffffffff}], {}, {0x20, 0x7}}, 0x54, 0x3) openat(0xffffffffffffffff, &(0x7f0000002340)='./file1/file0\x00', 0x8c200, 0x0) sendfile(r0, r2, 0x0, 0xfffffdef) 16:24:49 executing program 5: chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:24:49 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) [ 2205.089371] ext4: Bad value for 'min_batch_time' 16:24:49 executing program 4: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 16:24:49 executing program 4: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 16:24:50 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x501400, 0x40) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:24:50 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) mknodat(r3, &(0x7f0000000000)='./file1\x00', 0x8000, 0x5) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:24:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x74000000, 0x0) 16:24:50 executing program 4: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 16:24:50 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) 16:24:50 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') openat(r0, &(0x7f0000000000)='./file1\x00', 0x202400, 0x2c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES64=r2, @ANYRES32, @ANYRESOCT=r4, @ANYRES32=r5, @ANYRES64=r5, @ANYRES16], 0x220) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r8, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r7, 0x0, 0xfffffdef) 16:25:04 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mknodat$loop(r0, &(0x7f0000000140)='./file1\x00', 0x2, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) getpeername(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000000)=0x80) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x120) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r2, 0x0, 0xfffffdef) 16:25:04 executing program 5: chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:25:04 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x501400, 0x40) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 16:25:04 executing program 4: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffd}}, {@nodiscard}, {@grpquota}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) 16:25:04 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x305011, &(0x7f0000000140)={[{@subsystem='freezer'}, {@release_agent={'release_agent', 0x3d, './file1'}}, {@cpuset_v2_mode}], [{@euid_eq={'euid', 0x3d, 0xee00}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x62, 0x37, 0x39, 0x34, 0x38, 0x31, 0x36], 0x2d, [0x36, 0x63, 0x63, 0x30], 0x2d, [0x66, 0x64, 0x61, 0x31], 0x2d, [0x37, 0x37, 0x35, 0x66], 0x2d, [0x63, 0x66, 0x33, 0x65, 0x31, 0x0, 0x65, 0x61]}}}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) r2 = accept4$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c, 0x0) write(r2, &(0x7f0000000200)='E', 0x1) sendfile(r0, r1, 0x0, 0xfffffdef) creat(&(0x7f0000000240)='./file1\x00', 0x0) 16:25:04 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x7a000000, 0x0) 16:25:04 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) 16:25:04 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000080)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="3f00001e000000002e2f66696c653100"]) mkdir(&(0x7f0000000600)='./file1\x00', 0x70) io_submit(0x0, 0x4, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, r4, &(0x7f0000000140)="7176699b05762767b61134c9e0cb992cc938f6318d1758c1b546b7a6741665544aad2d84c6ac4d162d6559209692386d902d47a6e056a15b2911a05ccc84dc7962c99c9a02ea7f35959eddee2c4ddd13090db4330c5200c8ec33214bc30bb09f456c7a96e01851da", 0x68, 0x9}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x9, r1, &(0x7f00000001c0)="2c68f179cdb3f2cf52340d57336c1b712c1ff42d23db6ecf0a5ca272acd7611f966a6fe7b0d29c7fd8c3ec4301", 0x2d, 0x7, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x0, r2, &(0x7f0000000240)="54dad85505b012e71987fc596404cc1c9973fd57ef5829562116b25162caa95a3ef3ae37770025db5b77c5595b78dcc0668f1b89180580db84ec6c51779ab022de257209fe7e743c539f941cf21737133d4c8d5ab3a63d8a678852422724dff9a95bdd9aa0bb39eea2762ffade4d0b6742980085afebb2414f9bf95bdeae5eeaa2abedc22296135164aae3bc1707647ff45644b5b621a42fd27ddff2500f9ca82757c6084c2f0b4ff3433b7cd7a7d6daedfccb15f8e869de108bd98e334ab89a6a1b74d7f308e1c381f9ddca22bdfbe6c9700b777fd9430c390adb97136c6e41d2f1", 0xe2, 0x8, 0x0, 0x3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x6, r3, &(0x7f00000003c0)="d104322e590da29745945362c15ff85c08b5b8c3fbe89d44764c366ecabc4d77321545ce92caaa2b239542babc20a7d976ebc1158838ba376cf9eb150fc5039242aafbfb9784ee140c74bfa78c7947e11633080677e43d5dcdf10fd6ff7bb4a650efbe9457763e94776d5e267384a4064f39d15bcc08d442f627027cf8a7a7a6696f0849d8afa3e69185bb83f5bd94a6398b1f9b6158044ff48952e48e1b0663a87f203b4cfd3b98c4324c2397b2adab7332d290cddb6ed8a35f0ff2909f9f90510b2e7c", 0xc4, 0x3, 0x0, 0x3, r0}]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r6, &(0x7f0000000000)="45325c47085fed8f22d0d1fdb753d91f0aea6ccb4dbd08b2a63176dc8635ac81b05c3f8d05fc39529d1d91141d8cb792d957171f67bcb82cbb77c955d3dbd5", 0x3f) sendfile(r0, r5, 0x0, 0xfffffdef) [ 2219.914282] ext4: Bad value for 'min_batch_time' 16:25:04 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) 16:25:04 executing program 4: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffd}}, {@nodiscard}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) 16:25:04 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x501400, 0x40) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:25:04 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80040000, 0x0) 16:25:04 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x420280, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, 0x0, 0x22, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x85}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40048}, 0x40) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$inet6_tcp_int(r1, 0x6, 0x2f, &(0x7f0000000240)=0x80000000, 0x4) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) sendfile(r2, r3, 0x0, 0xfffffdef) 16:25:04 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000600)={{}, r1, 0x0, @inherit={0x68, &(0x7f0000000080)={0x1, 0x4, 0x1f, 0x6, {0x14, 0x2, 0x2, 0x20, 0x3}, [0xe81, 0x2, 0x9d52, 0x7]}}, @name="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"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001600)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x7fffffff, 0x5, 0x49, 0xfff, 0x1ff, 0x17}, {0x7f, 0xffff, 0x7, 0x6, 0x34f3d8ff, 0x9000000}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file1/file0\x00', &(0x7f0000000200), 0x80000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r5, &(0x7f0000000140)="a6d6361f23703745", 0x8) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0) sendfile(r3, r4, 0x0, 0xfffffdef) 16:25:04 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x501400, 0x40) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) [ 2220.215534] ext4: Bad value for 'min_batch_time' [ 2220.258938] tmpfs: Unknown parameter 'wN' 16:25:05 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) [ 2220.317797] tmpfs: Unknown parameter 'wN' 16:25:17 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file1\x00', 0x24a300, 0x0) openat(r2, &(0x7f0000000080)='./file1\x00', 0x80042, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) openat(r1, &(0x7f00000000c0)='./file1\x00', 0x208200, 0x10) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:25:17 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdec) 16:25:17 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x8cffffff, 0x0) 16:25:17 executing program 4: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffd}}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) 16:25:17 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x680040, 0x0) openat(r3, &(0x7f0000000080)='./file1\x00', 0x248000, 0x44) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:25:17 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x501400, 0x40) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:25:17 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:25:17 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:25:18 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x501400, 0x40) chdir(&(0x7f0000000340)='./file1\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) [ 2233.336974] ext4: Bad value for 'min_batch_time' 16:25:18 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x501400, 0x40) chdir(&(0x7f0000000340)='./file1\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 16:25:18 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xf0020000, 0x0) 16:25:18 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:25:18 executing program 4: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) 16:25:18 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:25:18 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) chown(&(0x7f00000000c0)='./file1\x00', 0xee00, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xd4301, 0x155) r3 = memfd_create(&(0x7f0000000080)='&\x00', 0x7) r4 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0xc00, 0x89) openat(r4, &(0x7f0000000180)='./file1/file0\x00', 0x402000, 0x20) fallocate(r3, 0x8, 0x4, 0x0) lremovexattr(&(0x7f0000001800)='./file1/file0\x00', &(0x7f0000001840)=@random={'system.', '.]/-]\'\x00'}) write(r2, &(0x7f0000000200)='E', 0x140000) chdir(&(0x7f0000000540)='./file1\x00') r5 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000240)='./file1/file0\x00', 0x50, 0x5, &(0x7f00000016c0)=[{&(0x7f0000000280)="73fd50d6ea0522bcbd8cca636d66ca0b6abf46d9805cb744a2e36a2f9e8dd652245664a97694996a70f0dacc820dbe6f3c39fefe918498bec3a5b0afb5f150e20a698e5134a7fb34cdd6d88450b6f3e95a33541b29e4eb9b96d0ca497cdfd0e607bc94ace905158b45e8c14ded46f88fcafe4c6bd070a03acf2f4d744d9498cb7dac68351d14caa556fa", 0x8a, 0x2}, {&(0x7f0000000600)="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", 0x1000, 0x1c3e9e3f}, {&(0x7f0000000380)="27037fbadbbfa285f6f90bff614bdee167d3f451826e5e2823d2814773c5254a5ea9d9bd7acbbc4da83e9693857b0ca107f6143330a93635ff95312ae7c3399fc5d1750739f0574f2e438b6a0e462e3f5898b65d9cf5787d62fecddddf7207ac03c1a6b8db9be8f6408671bc4bf76301f85bb0d05de4ed669caf95685012066519625a22b841a0dbc9c1836776514c5155edb2a2ec2799e08586cddb2132756377db45af694ae14c91bbfe8c50ea684165de7d", 0xb3, 0x9}, {&(0x7f0000000440)="c77c10e1e7f484b0c24ab0a8c93f7b825b39c2a2d4ed3f6c6e92b7db5df3db302fd1cc42cb0793404e0672f31ad0684886dc34ccaeb6800a36f98ab5a207b2f584b64ee6cf7181ac05248af2c74b3a5b64529a9dbe7790544a7b074d15bdc0bd9ade63d61680e50d710ec4002fa3c3c9f10e67c4cc7a99425c0848fad8beb9ef0acb8fa45d508ee8f9d77e24121d3817331501188a9b51dc2dc01291115280743588679a12c0d221f41b1d10215813f6973add32e2f596869bc62128eaa9d9164e58fd60d32e56ee972b7230", 0xcc, 0x9979}, {&(0x7f0000001600)="633077863dc0737fa4205d639033ac818c07ef0558d4e67e115d29989e88fbf0b46302b9644d1d5658f56837e3f74e3d3a4c2ef34449307f278ceb0776ca4ea69aa90b014c7b2941b0a22ca48aea75c0dbe4d8946756f7f8fdb2c24df8b99d69b4056331b1e1c89519f9a29b424888a7eb2e9879b58d183d37df05073a19bb8ae28f537f37bdf6939e02f77a763c369af1e08f6c740116", 0x97, 0x4}], 0x4000, &(0x7f0000001780)=ANY=[@ANYBLOB="6d706f6c3d7072656665722c6f626a5f726f6c653d5c267d002c646f6e745f686173682c0093c773768a7b39452a953e0b00027d419e6f441692dd7593e86fa9d3d40a02db246b21c7d5a9669fab60cd3626f4f13dda0c6a6a68dd8ceeb60a0e2ea3"]) r6 = dup(r2) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f0000001880)=0x80000001) openat(r5, &(0x7f0000001740)='./file1\x00', 0x2, 0x15c) sendfile(r0, r1, 0x0, 0xfffffdef) [ 2233.794482] ext4: Unknown parameter 'uid>18446744073709551615' [ 2233.868507] syz-executor.3[14083]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2233.924512] syz-executor.3[14083]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2233.949823] loop3: detected capacity change from 0 to 264192 [ 2233.970272] tmpfs: Unknown parameter 'N9b^Gyg[ZP׏' [ 2233.982814] syz-executor.3[14085]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2233.994377] syz-executor.3[14083]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2233.999168] loop3: detected capacity change from 0 to 264192 16:25:31 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xfeffffff, 0x0) 16:25:31 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:25:31 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) sendfile(r0, r2, 0x0, 0x7) 16:25:31 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x10824c3, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000080)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc40c2, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:25:31 executing program 4: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) 16:25:31 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x0, 0xcf8eb26fd64ecade) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)=ANY=[@ANYBLOB="012100000100000018000000", @ANYRES32=r0, @ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00./file1\x00']) fadvise64(r4, 0x235e, 0x0, 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r5, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r3, 0x0, 0xfffffdef) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000180)={0x7, 0x7, 0x3}, &(0x7f00000001c0)=0x28) r6 = dup3(r3, r1, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x490200, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f00000000c0)={0x0, r7, 0x6, 0x100000000, 0x2a, 0x5}) r8 = eventfd2(0x5, 0x801) ioctl$BTRFS_IOC_SYNC(r8, 0x9408, 0x0) 16:25:31 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:25:31 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x501400, 0x40) chdir(&(0x7f0000000340)='./file1\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) [ 2247.057847] ext4: Unknown parameter 'uid>18446744073709551615' 16:25:31 executing program 4: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) 16:25:32 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x501400, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:25:32 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xffffff8c, 0x0) [ 2247.309159] ext4: Unknown parameter 'uid>18446744073709551615' 16:25:32 executing program 4: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@min_batch_time}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) 16:25:32 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {r1}}, './file1\x00'}) syz_io_uring_setup(0x52e, &(0x7f0000000080)={0x0, 0x3c4b, 0x8, 0x0, 0x200, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r2, 0x0, 0xfffffdef) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000001c0)={0xfffffffffffffff9, 0x6, 0x3}) 16:25:32 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) mknodat$loop(r1, &(0x7f0000000080)='./file1/file0\x00', 0x100, 0x1) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000001740)={{r3}, 0x34, 0x4, 0x2}) sendmsg$nl_xfrm(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) pwritev(r4, &(0x7f00000016c0)=[{&(0x7f0000000240)="6eebbdaaa8020225a7ab8b2a16f34211e492077184d0d2ccb3867e37ee2dbf54517be8b3f3d5f780d5a28c1bfeb803f3819c67a4e5e162749943b1fac565c9ab51bb19651f116a8b4472a618314e6ce0debc43148d4692186a2fa1b1dbd88f735f93bb0764db3d0ec2d9f1567db488e7bd27f5f69556a3600d8c3230cff40135965618e66e2756149687b83c835b1ef846c9000c0c38bfc349e83f26e5f6f5963c1f4c3c0904e38a2410a5eb2bd7c81446e76f5c921cf94c2884278c6aa3e318ed73f33259ae8968760df01f9a4965f9b11a011bf5a27e41e4", 0xd9}, {&(0x7f0000000140)="7dcd2671fed412677a78808564b8c08cb56c46f5b2c39e2c9a71cfc47d8720a1fe938f0d955e8d73074c5bb55ffcabde11e5c46438c983fe1a48cb7e3499c388c506c22cf6132855f7d79fe40c71806ff3e816a4c4a1eec5f7f28a37cd75da70019518a788599ac03c28e2a8202362eeae5abcc31c7d9bf9171026b59356fdfa16666ffa3d2cbdf4325553ffb224f0b9aa4780128606c25fe6ceae20ca5c9c64141eb5d0adae448fb9994b1e13fc45a28ec356cc6081081effe1b2", 0xbb}, {&(0x7f0000000380)="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", 0xfb}, {&(0x7f0000000480)="61c4f60b07586ea7877ae72730696cf7121d146437c54435d338e4ec04584c0090478f31ec364cbba27dbb68bbd22cd0b50dd3f51064e3ad56fe792dbfdbe311b289107155c115c1251a56a2891413a35b1617ae32974e80abad8bfdc6c266896133cebfff0640dc0b7280b5c5db170e49276be65f12a408194e76a1462540ee7689b033ed97c731df37c4f686b9fb3eec8cb1d1571cef3e0e66f8fc1639a49111ea5809bc3caf47d6e1c3569c1826df2276587015191e196e8e5653ba403da2ae40e22e24521c853420c6ef0f6bdf37c5d9e78001c2c56cf331d9428cc6976b6724a74619", 0xe5}, {&(0x7f0000000600)="66b59a951964e92f7806a04fc7fd0e60747c34b1a9bf161df99ec7792f35bf9a9007d58e5153c42f09c3b3a566c41b8b242273fe38561f004e0f172acaa7c08162912c17425757fe2581013a796d49d2c265dca2366af3f72d5171e714c534915b9b8e32c70afaf60ef82b9f35ab8d75432e3955833cb4899f8efe71128aae43510a6b51315c230c68b64675985b1601900f5215d3d4b7338bc18347e24f41ac8bb0b6af244a4c96ce18ea70131967c9a1129982f4938d591917632a2691fd9cbc00f4fb9f56b2993aebf36ab25c27d68b82a2bae38651a75fddfea2ffd84afd337db8824780329fc7788a97dd68bd5f17d1f8f683d74a7bc9fce79e758eb72b4afaa593a539af7808f212bd8561b354c943d9313594cd9ffb33b074792ea7fd8a2dc6a52acee6365e282f89881f0b52ed78cae5b8291cf23877dfb1079aeeca654c676f176f24801ecf22068342fa4dc6ffd3f11c645ede2f8160e8a4153fd7427c1c128086edb64ea5eb8eff26fca1a6aec4ff4fd5f05bbb040433f7a35214f02b5569bff033c6a6b3f3363657bf827b35f76faa7d5db353f8e833ace417b97e4b780ee700a56c415eb793acc6fc98ab05de768a075bff1fde893f3128db8ce3f7b523970737e96f31c596c17412a94a48febabd05e013cc09aaf370f23933480c376895fb959acecbc35eb4a3e0634ba91effa8876fa92978ac782ea59a9c96dcc77fb07f1537077acd3fba65ccc69242f6bbcd4acbc06261fccff935a98a358c9976495b73ef1653a4c68d9847168be08081e668719576405653dca4a44073b468d9519860e2cc20f8e074cd07e2fc3e8ef336afdb8ba4c5163cb709b061026094ec550593d6e5d0d127e5b276b353772dc5d296a3e654151e1bc3bfc08ca87c3d16521305fa1f6faa6af7122e7737642a8ebfdef181d6bedebeddf7d92113a84d39c7017b8234553261a0f5b7d91f5beeaf78daf8d2beb246cb59e05858333938a58184fe6af74b7ebeeabe9e1eba1c4d395f4b91d6786ea2d82070b763b3b5992f16e01249ca137f434e87f4c9429a210b3d4d2f205c5113a6adf5506c140258434af41e3ec213e8bf91966e3baf305ebc133ed82e4e6ba4f4d0b80189c6863e961280e305ab56cbae2b210b340cd8477dfc9a03d2cd14f5a39ed8957a934463c8021908380d01d734bc9a04bc126cabebb19b132adeb3be6d6e2bf951dda1d2342ce528e47eb7839b9e6b5d79a4db91ca8122a48f0a95444a568db001e0191c5894b8cc010e839fa63bcf12ae057262f6406f053d71fe20b205e6dd94c39ed442fee45e0f51f9c56200d8449f21e799699e26e0ab04953dd677dfccf9553b6d6e3565904677aa4045f15581ff06f839877b71e0ba6efc7e75623dd38e4a10850c2a931238896ba5d92fe0f23399ab2543ac73946641b2462b2765407215baa8080be2ba707e13e5bf6caa8dfc72f278e34ba6f33e1c4b5219e76c2252336553f6c44a28486013026669e2614cd1c441fc9cf293af0e56493ca1645453404341dd799235d19d9072aa477f3ce124b2430b5071c231b0b97906da56379b98daec5c6bc6d31ba5acf279d23bf18b94d35ca07ef7a68b457b867cd047f592063e51db26f411bbe2ae5bd2e29ea33ce2619b03c0054d434165d77b4bdf0f85626d4cb38ea051d15e69df947f0cc9d9d352910af1d96f02d567357d6bb13a46ffb6d4ee6f32fcc57cd5bc2389ee92207083014005d84ce55c96c60405b2e2297b440e8c9a806bff291966768891b40af2749f45eb1b15e8f7672983d0080206dbe6e5ec4528f6c8bb7314e621df3f5fce036a20e204b47823c4df3f9fc502c136aa98f9684910eb8a9a0a3dd8868bdd6e819eb3415621a1b702eb22d6214615026bf457dcae3b5ec38d9998c3952e96ed614e7e2aa8b29223b037209f98eb51e37df68e006eaf844598780b9c4892e7cbf796ff9a44f5218749a1c331d4c4b712d26a6e2061fd52e11029b29ddb7c026a4dbc4e7529c6decfd852f9aa7819378045299d1cc93d5b45199a9315509b22f10d59fd4fa2cb30851dd74ebf785ea67aa586bef01abdeeba5802d3e8c82adf219180551013c1065ac02012b139ef733a8ddb95f8d2d95b69fb3d01d31760e79cdd3a4efba0beddfd4acc6b5d652578a9c7b69d29492b67e1bcca2a5b14a723ed744f831226d4fa5df84a8bc6eed8949b3c729f86734a2c23630ad19421c409b96f32136b48047fe709106d7aab14d6edf48dc847548eaa0c5cdb1b03c854dfc028afa1cb71147d1109b9c1fe04084351966a5a60e41830a5096fa4ca2d945e435c614134f3adccd097b26078bf9bc64c1fed5b4ac38c553589b00aa69221967c53ce0661b4110ba82b4dcb17f12ebc45ab2a35e0aafb646f42829a78e6593eeac451790edffbee14bf1f74ea4ceb34fcdd69c5c422be70dd7896aa89b004f27ad74504b697a5036940d5d21ade5a301e736ca74922cfa4b5b69203b15575d1d5d5909c9a46161bc1417788e1e39dc355e990c8ef4d721c47ddde4b78263ef8ca3bd2a877994c00ce173a35db965aa7d9c162beb60feb50cf1a1bd47a590f49179c7c7777d259a6c2e9680f83774b3f4dc8fbcd93d7482d984e7f98fe2fb6074a8d3a79e35d3c861236dfab2405cf30c5a514f5c9c13acff125f0dba03d63d746bbb74c5e155d3bf585480f69ccefca09dc56ca8a44df3767dbd48ae6049c0947ead32fb16b64445821ac862beca7230170aaabb49d13d49942c3106145881c1e942954dd923c1e15a662223264373dbce05251e8be6440868dcabcbd7d33b72b93dd0409ba4445ba7e3cc77f4d6816c5e4466665b4e9871493f272ae97e0c57edac1e1d010019e7c07af3d7bca8cf617fe72ad65d7a15b345bd58cd97d058fd1afe7e06bbb7df8391f2b9ec4d6cdb99e50fac2c235880659d1ea22fd06757c385a1773d277164611ef2dcd0e69cc49d7f3317549512ec3a1ffea3b27e45fe71d8717f76d51b5467765badcfd24a760ce002a63c30ec41e43dc613bbfcc28bca41529271b9ebb98c83cb1b7c979d1fe13b85b3dc0a941809f0056dd302dd5a83a3befc2138fc3c64077484f36fbda89fed5b31a83401671a0333caf4f80cb684cb012761cc91a24de5203c1146988d9b288ef8a39f5c3e228844a2c4fc7c37b9a1d218644968b35d739ee427b584480d619ee27c8961079cf6a89e25aa0e4e56a94eaa81b77bf92b2615f0a64dc532671a80fa28ccb7471e1ffa12824d50876ba6878818d60c5b61a54cfc0d9c4b1016d3b74ac02292b5b71cfc9b44fc8c94791e454b15a6738f2472ea40501583793efa5016095a11ccbfca3f2de22843ba21f688fcbbb5f6def041988cc1ec4a8b4d1ae500744e06efc2356b032033c1d729ba0a9a2fd0f0f92357d113cd21a73027e07d4df3706ee8ab2e4102b10d8c3e99b8f30d2101a4f036a0710da547b6c23713509839a5bbd5c14c010477fec032416384e9677c0c629a780df60b41eb0910d61a6db3757980c4acf2da4ff7840cf9569d54e9f9631b9687094b4f93f92cc58f1e8accb23cef211acc3d54617628b6baa489f932cda699a7bf0b5cf01c4e55615409e452e4b59d47671c04fecf972ba9bfdec35c9ea89184321d38d5b12c4570db9613ff2a04c43e4108d3d0d7cdd944a407d67466fe5daad964802b7df8e2bd84aba6543ee4c853aa1529ce11db56db187d271974098d2ace16ea8af7a52a19115f5a35dbba24ad9a6624923537964b98ebcc2c2d8a71b4ef47509d0f6bcc296636cd78516696320a00f424797ac5d957ba7574d4cff7ae0b11e95dd229adccc0479243eddf103554337beb4638aab882d76d54fa135c1ce9d0e6b264dd225419c11a53bdf0a0608bc9f2cdddb55a63688c17af2ef6148fc86f71ed0775488f0a796f7e016d0b9be4ec4e1cfe7cc0847b3fc3b8fea0e6a59fcfad020a160601ec4cce0a99d7a9cd62b40369b691096688b5d6760522aabd7388629d8c6abfba92536e2f9ac120e626f719b50d7ade27894fef8ca27788632278be5818d53f68372081377c03e4f6490f1e9e69c49231680653125d6a1ade544052ff0078f5d7d54139ee608219873d50543b02635bb1913a3566913d5f61a997f26fa25c1b5d86591e5ed1e4977e503433ed31887a01747bed30f775e980726a16779db86515ff61148731948a36dbfd3a2d07f41026b98c0d9922de10a8c2161fb66683438fb8f7257434cc58b7201a04a8998e973cee39921b5ce158717458ebaa0e0595d7a16c0c7687da245582796d0e1ba12e3b8c3b7b047e480d8c999a23f4ef2580211cb4d58f8ebffcf7ba17be7d445b798afb53c8ca7d244fb7c37df5fe62c77713c44c2b4006c9df9d97c37fe6aa75b15d1f7c5cc13b21483a21769b02d1d2f9eca245f22c6bd38254a076ea2470df9fd3e220534eee05aba401960f2aeccf25e63b5c6937d7eaa171fa594f22863c22a5b6989dd89702065b947626156757d43747b5295f7b657ba07a7d78da3d7ba0bf556ccd855d2f8f70e2e06fb1e62445febd1ac02c25cfd993a5ac383852e4938d93267a8890cebf584db67831d2320d318613c1e943478bab0ee6a854fe0cceec6b852342feb671380e80b7141455b7fd73abb1f381f3236282787d6514d3defd8226d0e1468f882f777bd74f27b96dfe832e8f68d38e8d51b015756a2d89de12f88a09dfa2dadce6c890da234a66bf935c15b786cb1d84db71b64bd3a3cd3aefafebeb5a362b4997fd09a0876be304cbd67efa6e3e46cd3d167f83898f9267751c760ee0cd427922244d88f44a76e17c20b03afd1687d31e5804ffb5cbe635aeac01d26e6a729824fa5cf6cb8d45e6c50914b828a9c7e83d52be3b3390357f5d773731dbc6f3c8ae2938d581bf6ce3d7efd6a449893225c88ff17ec9867855ae05003d2d86409e2dd3f89b38b148cc68cedd04eb1aba45fca8a1f18a953de3ae6bbb7a6326a2b9254301564ab1095a553579d3f5379624d17c426de89c8e572c6950ecb9797b73a5cca8e01b2d89f9de6ea6be0275d0b6541cb1a8df3347d0277a90b7a246e4375f67dfdbebfd7109971a1dfe4e9bfb91fd00dd4963b1d1a3addcee310478139f09245d6049d94994ec4bbc5263345a70dc116a17bc288a2e8107418368b64bc366c74a6462af1fb37439f1f58da0ca4a2339d2bacd4fb401dccfe97aa811664fa68c5e03628d430a09fac741e9383a103fe86a4391414e92f64165e5f359f1f219a3edb10d069a2221a379539daf59586915036d46614f30c6084325825f24e6276e8f1c6b98bc6e910a6e48150827b29887131b1164d3fe73016ca5abed1105ea72ceb768e269652b63950ae5c8a24323a2bbeb83c651c8bfb202ff3124b71707b1dc04440cd28d1447397d1279430f2941f4d1330fb1078cf4e93f4ec13529041a94e38b114089663b4c79fae9c29f46361024c9f8cc5d751c3d60fcf51d33907db7e15dc969cf17598ee1b3079b761171a1b2751db83727032c9d98e2cc89e847e8a94f658688b1af86ba56f7439d837c4cb491ec8d22ac0e43c198687da102c414060533ff576de2777035b5a641b16cc831a72fb822b9e5d621880481d20d4988e1af84460a69753bc4143a173f1889276740af6e0f4e97b26a20e0288b7cb6adf7a7cd42bb517633304c1a32333e3c5e44e851de6b0a92dcdcb297a04cbcf57deea8675b990797c9954f63d54e5898be0247ae51c6ec529560d1e991407c5c784d9ae0aa2", 0x1000}, {&(0x7f0000001600)="65c88734a8f96f930a58acc628092248456f3531770e311ed3d928bdc29d65a09c449f90731c1a61c2f78b8f4eef511b5afa0ada2e7d2478c6ad5d3531192eef032989319eeafe2eba08ddc2086386846385b3e8b3132ca61ccefff179695cdb12f1369a9209", 0x66}, {&(0x7f00000000c0)="7ec8745bdf3426728f14b2e9", 0xc}, {&(0x7f0000001680)="838a212f6243cca0c825d93fa7aa1e00d77b7d6d7ad244c138be85944bf661ecd120ae0c4947e66483965e2755de37751450a39b", 0x34}], 0x8, 0xe8, 0x1) sendfile(r0, r2, 0x0, 0xfffffdef) [ 2247.616365] ext4: Unknown parameter 'uid>18446744073709551615' 16:25:32 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x501400, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:25:32 executing program 4: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@min_batch_time}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) 16:25:32 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xfffffffe, 0x0) [ 2248.029803] ext4: Unknown parameter 'uid>18446744073709551615' 16:25:32 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x501400, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:25:32 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:25:33 executing program 4: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@min_batch_time}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_appraise}]}) 16:25:33 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80000000000, 0x0) 16:25:33 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:25:33 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 2248.429531] ext4: Unknown parameter 'uid>18446744073709551615' [ 2248.516358] tmpfs: Unknown parameter 'kWܮ;^ÍÕ.aN~*#7 Q}' 16:25:47 executing program 4: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffd}}], [{@uid_gt={'uid>', 0xffffffffffffffff}}]}) 16:25:47 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@polexpire={0xfffffffffffffdae, 0x1b, 0x1, 0x0, 0x0, {{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x20000000, 0x5}, {0x0, 0x5}}}, [@mark={0xc}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x374dbe49, @empty, 0xb43}, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r2, 0x0, 0xfffffdef) 16:25:47 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:25:47 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2000000000000, 0x0) 16:25:47 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x0, 0xfffffffffffffffe}}}, [@mark={0xc}]}, 0xcc}}, 0x0) fcntl$dupfd(r2, 0x406, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r3, 0x0, 0xfffffdef) 16:25:47 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:25:47 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:25:47 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x4000, 0x1b4) sendfile(r0, r1, 0x0, 0xfffffdef) [ 2262.508507] ext4: Bad value for 'min_batch_time' 16:25:47 executing program 4: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffd}}]}) [ 2262.679977] ext4: Bad value for 'min_batch_time' 16:25:47 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x8000000000000, 0x0) 16:25:47 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1/file0\x00', 0x441c2, 0x1d3) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r2, 0x0, 0xfffffdef) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f00000000c0)) 16:25:48 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:25:48 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) memfd_secret(0x80000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:25:48 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:25:48 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x100000000000000, 0x0) 16:26:00 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:26:00 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:26:00 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:26:00 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) write(r0, &(0x7f0000000080)="5fc72abc753331a03f0cea99c0359fbd6fabb25b0746aeacc1a21b3ca324b1cce1fbfed37750bfb0052f48def6d25fd8f41b1026a73009b7b513522860c3b78b6cdabdc6f4a227470c1e84f707cbd304eeb4a76ce331034daafdc169d6ebf89d31c47cb382c8af9ee004b6f0e080d840c6604dc6a36d85723954750a2710f8", 0x7f) sendfile(r1, r2, 0x0, 0xfffffdef) 16:26:00 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r2, 0x0, 0xfffffdef) openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x42) 16:26:00 executing program 0: chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:26:00 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') mknod$loop(&(0x7f0000000000)='./file1\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:26:00 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x200000000000000, 0x0) 16:26:01 executing program 0: chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:26:16 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x300000000000000, 0x0) 16:26:16 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4842, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305839, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x80) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x98080, 0x0) process_vm_writev(0x0, &(0x7f0000000380), 0x3, &(0x7f0000000440)=[{&(0x7f0000002940)=""/128}, {&(0x7f0000000380)=""/168}, {&(0x7f0000002880)=""/179}, {&(0x7f0000000400)}], 0xe99, 0x0) r1 = getpid() process_vm_writev(r1, &(0x7f0000000400), 0x0, &(0x7f0000000480)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1, 0x0) process_vm_writev(r1, &(0x7f0000003880)=[{&(0x7f0000000140)=""/21, 0x15}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/153, 0x99}, {&(0x7f0000002600)=""/154, 0x9a}, {&(0x7f00000026c0)=""/235, 0xeb}, {&(0x7f0000004d00)=""/4101, 0x1005}, {&(0x7f00000037c0)=""/136, 0x88}, {&(0x7f00000002c0)=""/114, 0x72}], 0x8, &(0x7f0000004c80)=[{&(0x7f0000003900)=""/137, 0x89}, {&(0x7f00000039c0)=""/120, 0x78}, {&(0x7f0000003a40)=""/128, 0x80}, {&(0x7f0000000180)=""/35, 0x23}, {&(0x7f0000003ac0)=""/206, 0xce}, {&(0x7f0000003bc0)=""/8, 0x8}, {&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/110, 0x6e}], 0x8, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r2, &(0x7f0000000080)="01", 0x292e9) 16:26:16 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 16:26:16 executing program 0: chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:26:16 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) open(&(0x7f0000000000)='./file1\x00', 0x40000, 0xa9) 16:26:16 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = accept$unix(r1, &(0x7f0000000080), &(0x7f0000000000)=0x6e) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000001, 0x2010, r2, 0xc58a8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:26:16 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:26:16 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x0, 0xcf8eb26fd64ecade) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)=ANY=[@ANYBLOB="012100000100000018000000", @ANYRES32=r0, @ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00./file1\x00']) fadvise64(r4, 0x235e, 0x0, 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r5, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r3, 0x0, 0xfffffdef) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000180)={0x7, 0x7, 0x3}, &(0x7f00000001c0)=0x28) r6 = dup3(r3, r1, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x490200, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f00000000c0)={0x0, r7, 0x6, 0x100000000, 0x2a, 0x5}) r8 = eventfd2(0x5, 0x801) ioctl$BTRFS_IOC_SYNC(r8, 0x9408, 0x0) 16:26:16 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:26:16 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) chown(&(0x7f00000000c0)='./file1\x00', 0xee00, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xd4301, 0x155) r3 = memfd_create(&(0x7f0000000080)='&\x00', 0x7) r4 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0xc00, 0x89) openat(r4, &(0x7f0000000180)='./file1/file0\x00', 0x402000, 0x20) fallocate(r3, 0x8, 0x4, 0x0) lremovexattr(&(0x7f0000001800)='./file1/file0\x00', &(0x7f0000001840)=@random={'system.', '.]/-]\'\x00'}) write(r2, &(0x7f0000000200)='E', 0x140000) chdir(&(0x7f0000000540)='./file1\x00') r5 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000240)='./file1/file0\x00', 0x50, 0x5, &(0x7f00000016c0)=[{&(0x7f0000000280)="73fd50d6ea0522bcbd8cca636d66ca0b6abf46d9805cb744a2e36a2f9e8dd652245664a97694996a70f0dacc820dbe6f3c39fefe918498bec3a5b0afb5f150e20a698e5134a7fb34cdd6d88450b6f3e95a33541b29e4eb9b96d0ca497cdfd0e607bc94ace905158b45e8c14ded46f88fcafe4c6bd070a03acf2f4d744d9498cb7dac68351d14caa556fa", 0x8a, 0x2}, {&(0x7f0000000600)="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", 0x1000, 0x1c3e9e3f}, {&(0x7f0000000380)="27037fbadbbfa285f6f90bff614bdee167d3f451826e5e2823d2814773c5254a5ea9d9bd7acbbc4da83e9693857b0ca107f6143330a93635ff95312ae7c3399fc5d1750739f0574f2e438b6a0e462e3f5898b65d9cf5787d62fecddddf7207ac03c1a6b8db9be8f6408671bc4bf76301f85bb0d05de4ed669caf95685012066519625a22b841a0dbc9c1836776514c5155edb2a2ec2799e08586cddb2132756377db45af694ae14c91bbfe8c50ea684165de7d", 0xb3, 0x9}, {&(0x7f0000000440)="c77c10e1e7f484b0c24ab0a8c93f7b825b39c2a2d4ed3f6c6e92b7db5df3db302fd1cc42cb0793404e0672f31ad0684886dc34ccaeb6800a36f98ab5a207b2f584b64ee6cf7181ac05248af2c74b3a5b64529a9dbe7790544a7b074d15bdc0bd9ade63d61680e50d710ec4002fa3c3c9f10e67c4cc7a99425c0848fad8beb9ef0acb8fa45d508ee8f9d77e24121d3817331501188a9b51dc2dc01291115280743588679a12c0d221f41b1d10215813f6973add32e2f596869bc62128eaa9d9164e58fd60d32e56ee972b7230", 0xcc, 0x9979}, {&(0x7f0000001600)="633077863dc0737fa4205d639033ac818c07ef0558d4e67e115d29989e88fbf0b46302b9644d1d5658f56837e3f74e3d3a4c2ef34449307f278ceb0776ca4ea69aa90b014c7b2941b0a22ca48aea75c0dbe4d8946756f7f8fdb2c24df8b99d69b4056331b1e1c89519f9a29b424888a7eb2e9879b58d183d37df05073a19bb8ae28f537f37bdf6939e02f77a763c369af1e08f6c740116", 0x97, 0x4}], 0x4000, &(0x7f0000001780)=ANY=[@ANYBLOB="6d706f6c3d7072656665722c6f626a5f726f6c653d5c267d002c646f6e745f686173682c0093c773768a7b39452a953e0b00027d419e6f441692dd7593e86fa9d3d40a02db246b21c7d5a9669fab60cd3626f4f13dda0c6a6a68dd8ceeb60a0e2ea3"]) r6 = dup(r2) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f0000001880)=0x80000001) openat(r5, &(0x7f0000001740)='./file1\x00', 0x2, 0x15c) sendfile(r0, r1, 0x0, 0xfffffdef) 16:26:16 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x4000) chmod(&(0x7f0000000140)='./file1\x00', 0x23) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) fsetxattr(r3, &(0x7f0000000180)=@known='user.incfs.size\x00', &(0x7f00000001c0)='\x00', 0x1, 0x1) 16:26:17 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000000000, 0x0) 16:26:17 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:26:17 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000005c0)='./file1\x00', 0x1f, 0x0, 0x0, 0x20000, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:26:17 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x64a582, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:26:17 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) 16:26:17 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:26:17 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x2000, 0x10) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 2292.635958] syz-executor.4[14298]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2292.674134] syz-executor.4[14298]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2292.697370] loop4: detected capacity change from 0 to 264192 16:26:17 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) chown(&(0x7f00000000c0)='./file1\x00', 0xee00, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xd4301, 0x155) r3 = memfd_create(&(0x7f0000000080)='&\x00', 0x7) r4 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0xc00, 0x89) openat(r4, &(0x7f0000000180)='./file1/file0\x00', 0x402000, 0x20) fallocate(r3, 0x8, 0x4, 0x0) lremovexattr(&(0x7f0000001800)='./file1/file0\x00', &(0x7f0000001840)=@random={'system.', '.]/-]\'\x00'}) write(r2, &(0x7f0000000200)='E', 0x140000) chdir(&(0x7f0000000540)='./file1\x00') r5 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000240)='./file1/file0\x00', 0x50, 0x5, &(0x7f00000016c0)=[{&(0x7f0000000280)="73fd50d6ea0522bcbd8cca636d66ca0b6abf46d9805cb744a2e36a2f9e8dd652245664a97694996a70f0dacc820dbe6f3c39fefe918498bec3a5b0afb5f150e20a698e5134a7fb34cdd6d88450b6f3e95a33541b29e4eb9b96d0ca497cdfd0e607bc94ace905158b45e8c14ded46f88fcafe4c6bd070a03acf2f4d744d9498cb7dac68351d14caa556fa", 0x8a, 0x2}, {&(0x7f0000000600)="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", 0x1000, 0x1c3e9e3f}, {&(0x7f0000000380)="27037fbadbbfa285f6f90bff614bdee167d3f451826e5e2823d2814773c5254a5ea9d9bd7acbbc4da83e9693857b0ca107f6143330a93635ff95312ae7c3399fc5d1750739f0574f2e438b6a0e462e3f5898b65d9cf5787d62fecddddf7207ac03c1a6b8db9be8f6408671bc4bf76301f85bb0d05de4ed669caf95685012066519625a22b841a0dbc9c1836776514c5155edb2a2ec2799e08586cddb2132756377db45af694ae14c91bbfe8c50ea684165de7d", 0xb3, 0x9}, {&(0x7f0000000440)="c77c10e1e7f484b0c24ab0a8c93f7b825b39c2a2d4ed3f6c6e92b7db5df3db302fd1cc42cb0793404e0672f31ad0684886dc34ccaeb6800a36f98ab5a207b2f584b64ee6cf7181ac05248af2c74b3a5b64529a9dbe7790544a7b074d15bdc0bd9ade63d61680e50d710ec4002fa3c3c9f10e67c4cc7a99425c0848fad8beb9ef0acb8fa45d508ee8f9d77e24121d3817331501188a9b51dc2dc01291115280743588679a12c0d221f41b1d10215813f6973add32e2f596869bc62128eaa9d9164e58fd60d32e56ee972b7230", 0xcc, 0x9979}, {&(0x7f0000001600)="633077863dc0737fa4205d639033ac818c07ef0558d4e67e115d29989e88fbf0b46302b9644d1d5658f56837e3f74e3d3a4c2ef34449307f278ceb0776ca4ea69aa90b014c7b2941b0a22ca48aea75c0dbe4d8946756f7f8fdb2c24df8b99d69b4056331b1e1c89519f9a29b424888a7eb2e9879b58d183d37df05073a19bb8ae28f537f37bdf6939e02f77a763c369af1e08f6c740116", 0x97, 0x4}], 0x4000, &(0x7f0000001780)=ANY=[@ANYBLOB="6d706f6c3d7072656665722c6f626a5f726f6c653d5c267d002c646f6e745f686173682c0093c773768a7b39452a953e0b00027d419e6f441692dd7593e86fa9d3d40a02db246b21c7d5a9669fab60cd3626f4f13dda0c6a6a68dd8ceeb60a0e2ea3"]) r6 = dup(r2) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f0000001880)=0x80000001) openat(r5, &(0x7f0000001740)='./file1\x00', 0x2, 0x15c) sendfile(r0, r1, 0x0, 0xfffffdef) 16:26:17 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:26:17 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(r0, &(0x7f0000000080)='./file1\x00', 0x101100, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) [ 2293.280442] syz-executor.4[14321]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2293.309877] syz-executor.4[14321]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2293.323702] loop4: detected capacity change from 0 to 264192 16:26:32 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) linkat(r0, &(0x7f0000000000)='./file1\x00', r2, &(0x7f0000000080)='./file1\x00', 0x1600) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r3, 0x0, 0xfffffdef) 16:26:32 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) r3 = socket$inet6_udp(0xa, 0x2, 0x0) pwrite64(r3, &(0x7f0000000080)="6c005f55e409358670ea71196e8e6acfec01d838e5e123029118d30ee7cdd193703881c502960af628e9c47915d4aaffd66bd0f0a0e7ab45e84bc7d751852256b6c8af2f20cc17c348af13dc9201a3b39014b06e805a1969b6f2615e072c8dd828bf92f8d8c882a7153532b096416d", 0x6f, 0xfffffffffffffffe) 16:26:32 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000080)='Z', 0x1) openat(r0, &(0x7f0000000000)='./file1\x00', 0x20000, 0x65) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) sendfile(r2, r3, 0x0, 0xfffffdef) 16:26:32 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:26:32 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x500000000000000, 0x0) 16:26:32 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:26:32 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) chown(&(0x7f00000000c0)='./file1\x00', 0xee00, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xd4301, 0x155) r3 = memfd_create(&(0x7f0000000080)='&\x00', 0x7) r4 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0xc00, 0x89) openat(r4, &(0x7f0000000180)='./file1/file0\x00', 0x402000, 0x20) fallocate(r3, 0x8, 0x4, 0x0) lremovexattr(&(0x7f0000001800)='./file1/file0\x00', &(0x7f0000001840)=@random={'system.', '.]/-]\'\x00'}) write(r2, &(0x7f0000000200)='E', 0x140000) chdir(&(0x7f0000000540)='./file1\x00') r5 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000240)='./file1/file0\x00', 0x50, 0x5, &(0x7f00000016c0)=[{&(0x7f0000000280)="73fd50d6ea0522bcbd8cca636d66ca0b6abf46d9805cb744a2e36a2f9e8dd652245664a97694996a70f0dacc820dbe6f3c39fefe918498bec3a5b0afb5f150e20a698e5134a7fb34cdd6d88450b6f3e95a33541b29e4eb9b96d0ca497cdfd0e607bc94ace905158b45e8c14ded46f88fcafe4c6bd070a03acf2f4d744d9498cb7dac68351d14caa556fa", 0x8a, 0x2}, {&(0x7f0000000600)="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", 0x1000, 0x1c3e9e3f}, {&(0x7f0000000380)="27037fbadbbfa285f6f90bff614bdee167d3f451826e5e2823d2814773c5254a5ea9d9bd7acbbc4da83e9693857b0ca107f6143330a93635ff95312ae7c3399fc5d1750739f0574f2e438b6a0e462e3f5898b65d9cf5787d62fecddddf7207ac03c1a6b8db9be8f6408671bc4bf76301f85bb0d05de4ed669caf95685012066519625a22b841a0dbc9c1836776514c5155edb2a2ec2799e08586cddb2132756377db45af694ae14c91bbfe8c50ea684165de7d", 0xb3, 0x9}, {&(0x7f0000000440)="c77c10e1e7f484b0c24ab0a8c93f7b825b39c2a2d4ed3f6c6e92b7db5df3db302fd1cc42cb0793404e0672f31ad0684886dc34ccaeb6800a36f98ab5a207b2f584b64ee6cf7181ac05248af2c74b3a5b64529a9dbe7790544a7b074d15bdc0bd9ade63d61680e50d710ec4002fa3c3c9f10e67c4cc7a99425c0848fad8beb9ef0acb8fa45d508ee8f9d77e24121d3817331501188a9b51dc2dc01291115280743588679a12c0d221f41b1d10215813f6973add32e2f596869bc62128eaa9d9164e58fd60d32e56ee972b7230", 0xcc, 0x9979}, {&(0x7f0000001600)="633077863dc0737fa4205d639033ac818c07ef0558d4e67e115d29989e88fbf0b46302b9644d1d5658f56837e3f74e3d3a4c2ef34449307f278ceb0776ca4ea69aa90b014c7b2941b0a22ca48aea75c0dbe4d8946756f7f8fdb2c24df8b99d69b4056331b1e1c89519f9a29b424888a7eb2e9879b58d183d37df05073a19bb8ae28f537f37bdf6939e02f77a763c369af1e08f6c740116", 0x97, 0x4}], 0x4000, &(0x7f0000001780)=ANY=[@ANYBLOB="6d706f6c3d7072656665722c6f626a5f726f6c653d5c267d002c646f6e745f686173682c0093c773768a7b39452a953e0b00027d419e6f441692dd7593e86fa9d3d40a02db246b21c7d5a9669fab60cd3626f4f13dda0c6a6a68dd8ceeb60a0e2ea3"]) r6 = dup(r2) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f0000001880)=0x80000001) openat(r5, &(0x7f0000001740)='./file1\x00', 0x2, 0x15c) sendfile(r0, r1, 0x0, 0xfffffdef) 16:26:32 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) [ 2307.388808] syz-executor.4[14343]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2307.404496] syz-executor.4[14343]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2307.406487] loop4: detected capacity change from 0 to 264192 16:26:32 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:26:32 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) chown(&(0x7f00000000c0)='./file1\x00', 0xee00, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xd4301, 0x155) r1 = memfd_create(&(0x7f0000000080)='&\x00', 0x7) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0xc00, 0x89) openat(r2, &(0x7f0000000180)='./file1/file0\x00', 0x402000, 0x20) fallocate(r1, 0x8, 0x4, 0x0) lremovexattr(&(0x7f0000001800)='./file1/file0\x00', &(0x7f0000001840)=@random={'system.', '.]/-]\'\x00'}) write(r0, &(0x7f0000000200)='E', 0x140000) chdir(&(0x7f0000000540)='./file1\x00') r3 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000240)='./file1/file0\x00', 0x50, 0x5, &(0x7f00000016c0)=[{&(0x7f0000000280)="73fd50d6ea0522bcbd8cca636d66ca0b6abf46d9805cb744a2e36a2f9e8dd652245664a97694996a70f0dacc820dbe6f3c39fefe918498bec3a5b0afb5f150e20a698e5134a7fb34cdd6d88450b6f3e95a33541b29e4eb9b96d0ca497cdfd0e607bc94ace905158b45e8c14ded46f88fcafe4c6bd070a03acf2f4d744d9498cb7dac68351d14caa556fa", 0x8a, 0x2}, {&(0x7f0000000600)="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", 0x1000, 0x1c3e9e3f}, {&(0x7f0000000380)="27037fbadbbfa285f6f90bff614bdee167d3f451826e5e2823d2814773c5254a5ea9d9bd7acbbc4da83e9693857b0ca107f6143330a93635ff95312ae7c3399fc5d1750739f0574f2e438b6a0e462e3f5898b65d9cf5787d62fecddddf7207ac03c1a6b8db9be8f6408671bc4bf76301f85bb0d05de4ed669caf95685012066519625a22b841a0dbc9c1836776514c5155edb2a2ec2799e08586cddb2132756377db45af694ae14c91bbfe8c50ea684165de7d", 0xb3, 0x9}, {&(0x7f0000000440)="c77c10e1e7f484b0c24ab0a8c93f7b825b39c2a2d4ed3f6c6e92b7db5df3db302fd1cc42cb0793404e0672f31ad0684886dc34ccaeb6800a36f98ab5a207b2f584b64ee6cf7181ac05248af2c74b3a5b64529a9dbe7790544a7b074d15bdc0bd9ade63d61680e50d710ec4002fa3c3c9f10e67c4cc7a99425c0848fad8beb9ef0acb8fa45d508ee8f9d77e24121d3817331501188a9b51dc2dc01291115280743588679a12c0d221f41b1d10215813f6973add32e2f596869bc62128eaa9d9164e58fd60d32e56ee972b7230", 0xcc, 0x9979}, {&(0x7f0000001600)="633077863dc0737fa4205d639033ac818c07ef0558d4e67e115d29989e88fbf0b46302b9644d1d5658f56837e3f74e3d3a4c2ef34449307f278ceb0776ca4ea69aa90b014c7b2941b0a22ca48aea75c0dbe4d8946756f7f8fdb2c24df8b99d69b4056331b1e1c89519f9a29b424888a7eb2e9879b58d183d37df05073a19bb8ae28f537f37bdf6939e02f77a763c369af1e08f6c740116", 0x97, 0x4}], 0x4000, &(0x7f0000001780)=ANY=[@ANYBLOB="6d706f6c3d7072656665722c6f626a5f726f6c653d5c267d002c646f6e745f686173682c0093c773768a7b39452a953e0b00027d419e6f441692dd7593e86fa9d3d40a02db246b21c7d5a9669fab60cd3626f4f13dda0c6a6a68dd8ceeb60a0e2ea3"]) r4 = dup(r0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000001880)=0x80000001) openat(r3, &(0x7f0000001740)='./file1\x00', 0x2, 0x15c) 16:26:32 executing program 3: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file1\x00'}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x359040, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="cc0000001b0001000000000000000000fe880000000000000000000000000001fe8000"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000465f869639b3c388791008bc748f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050b40f826a8056c9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015"], 0xcc}}, 0x0) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[r1, r2, r3, r4], 0x4) syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r7, &(0x7f0000000200)='E', 0x140000) sendfile(r5, r6, 0x0, 0xfffffdef) [ 2307.842679] syz-executor.4[14365]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2307.858662] syz-executor.4[14365]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2307.874533] loop4: detected capacity change from 0 to 264192 [ 2307.887959] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2308.183638] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 16:26:45 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x600000000000000, 0x0) 16:26:45 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) chown(&(0x7f00000000c0)='./file1\x00', 0xee00, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xd4301, 0x155) r1 = memfd_create(&(0x7f0000000080)='&\x00', 0x7) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0xc00, 0x89) openat(r2, &(0x7f0000000180)='./file1/file0\x00', 0x402000, 0x20) fallocate(r1, 0x8, 0x4, 0x0) lremovexattr(&(0x7f0000001800)='./file1/file0\x00', &(0x7f0000001840)=@random={'system.', '.]/-]\'\x00'}) write(r0, &(0x7f0000000200)='E', 0x140000) chdir(&(0x7f0000000540)='./file1\x00') syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000240)='./file1/file0\x00', 0x50, 0x5, &(0x7f00000016c0)=[{&(0x7f0000000280)="73fd50d6ea0522bcbd8cca636d66ca0b6abf46d9805cb744a2e36a2f9e8dd652245664a97694996a70f0dacc820dbe6f3c39fefe918498bec3a5b0afb5f150e20a698e5134a7fb34cdd6d88450b6f3e95a33541b29e4eb9b96d0ca497cdfd0e607bc94ace905158b45e8c14ded46f88fcafe4c6bd070a03acf2f4d744d9498cb7dac68351d14caa556fa", 0x8a, 0x2}, {&(0x7f0000000600)="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", 0x1000, 0x1c3e9e3f}, {&(0x7f0000000380)="27037fbadbbfa285f6f90bff614bdee167d3f451826e5e2823d2814773c5254a5ea9d9bd7acbbc4da83e9693857b0ca107f6143330a93635ff95312ae7c3399fc5d1750739f0574f2e438b6a0e462e3f5898b65d9cf5787d62fecddddf7207ac03c1a6b8db9be8f6408671bc4bf76301f85bb0d05de4ed669caf95685012066519625a22b841a0dbc9c1836776514c5155edb2a2ec2799e08586cddb2132756377db45af694ae14c91bbfe8c50ea684165de7d", 0xb3, 0x9}, {&(0x7f0000000440)="c77c10e1e7f484b0c24ab0a8c93f7b825b39c2a2d4ed3f6c6e92b7db5df3db302fd1cc42cb0793404e0672f31ad0684886dc34ccaeb6800a36f98ab5a207b2f584b64ee6cf7181ac05248af2c74b3a5b64529a9dbe7790544a7b074d15bdc0bd9ade63d61680e50d710ec4002fa3c3c9f10e67c4cc7a99425c0848fad8beb9ef0acb8fa45d508ee8f9d77e24121d3817331501188a9b51dc2dc01291115280743588679a12c0d221f41b1d10215813f6973add32e2f596869bc62128eaa9d9164e58fd60d32e56ee972b7230", 0xcc, 0x9979}, {&(0x7f0000001600)="633077863dc0737fa4205d639033ac818c07ef0558d4e67e115d29989e88fbf0b46302b9644d1d5658f56837e3f74e3d3a4c2ef34449307f278ceb0776ca4ea69aa90b014c7b2941b0a22ca48aea75c0dbe4d8946756f7f8fdb2c24df8b99d69b4056331b1e1c89519f9a29b424888a7eb2e9879b58d183d37df05073a19bb8ae28f537f37bdf6939e02f77a763c369af1e08f6c740116", 0x97, 0x4}], 0x4000, &(0x7f0000001780)=ANY=[@ANYBLOB="6d706f6c3d7072656665722c6f626a5f726f6c653d5c267d002c646f6e745f686173682c0093c773768a7b39452a953e0b00027d419e6f441692dd7593e86fa9d3d40a02db246b21c7d5a9669fab60cd3626f4f13dda0c6a6a68dd8ceeb60a0e2ea3"]) r3 = dup(r0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000001880)=0x80000001) 16:26:45 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:26:45 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file1\x00'}) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x80000000, 0x4, &(0x7f0000000380)=[{&(0x7f0000000240)="52b5077371e0f61693738f95ff4bdbd8e212681a28534135c64fef02a92b090bb1adda4f70cc753f67fffaae92e76b7a4314c89dcff83da795f32a6115533cd7c7acd80f41ddc121148f3367ede9c6ab2403bd812358b9fb7a829ed792216f574fc2d4925ea13b39ac097f884e9d6e01d5aa8cb60545d17ed95350cdef6d5b3cdb9066466d90a9a16924a25cba9ffc8d08f15aab49814eeca70098d170b4c52add6bc7451cb6c0222458898929efa681f60e4d42499c65fd0eab95bfc7e328d36918d9fd50500e6fdf4eb7ed", 0xcc}, {&(0x7f0000000600)="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", 0x1000, 0x1ff}, {&(0x7f0000000140)="125f5483dc4f517c74b7fc31bf43e9d5ff1f4a7f96e47d07d7404a8d2d096986785e48f8ba07819ad351235a4b1d75b28dfa865da3c8ee25b406b242da546d983c775049b1f93bf0d0b6c13cce81827123353e3065", 0x55}, {&(0x7f00000000c0), 0x0, 0x6}], 0x918002, &(0x7f0000000400)={[{@quota}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fowner_lt={'fowner<', 0xee01}}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@appraise_type}, {@fowner_gt={'fowner>', r4}}, {@appraise}]}) sendfile(r1, r2, 0x0, 0xfffffdef) 16:26:45 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) 16:26:45 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:26:45 executing program 2: r0 = getuid() keyctl$chown(0x4, 0x0, r0, 0xffffffffffffffff) r1 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x48) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='n/le1\x00\x00\x00']) r4 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "f82a5ba671a3f4c740888b6561168345af4ffce898405c352a052c55114faebe0f64244ace8e5c4aedd9efd7b54e780efef2209c1afa3281b68a274f4c838062"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r4, 0x1) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000180)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000240)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f00000001c0)=0xe8) r7 = getgid() setgroups(0x1, &(0x7f0000000000)=[r7]) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x4}, [{0x2, 0x0, r0}, {0x2, 0xa, r3}, {0x2, 0x2, r0}, {0x2, 0x4, r5}, {0x2, 0x3, r0}, {0x2, 0x4, r0}, {0x2, 0x2, r0}, {0x2, 0x0, r0}, {0x2, 0x3, r6}, {0x2, 0x7, r0}], {0x4, 0x1}, [{0x8, 0x2, 0xee00}, {0x8, 0xdfa55372bc8efcf9, r7}, {0x8, 0x88a82823f9dd9218}], {0x10, 0x4}, {0x20, 0x1}}, 0x8c, 0x1) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r9, &(0x7f0000000200)='E', 0x140000) sendfile(r2, r8, 0x0, 0xfffffdef) 16:26:45 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r2, 0x0, 0xfffffdef) open_by_handle_at(r2, &(0x7f0000000140)=@nfs={0x90, 0x24, {0x6, 0x80, 0x10e, 0x80, "57a598033355e972cebb9d016867cf14c76ce2fed2351871d14467f8e384cefdc0a3680648d664de4fa5653cfb573102ee7f1b89c3736430b420317c551b2825dc4c262c098194719c58f2b86817713819e40737569aed3e49ff429fd28a7855b32bf1aa6d9d490f5e5c2a41a636b169b5e997202b523c50ff7548b84cd4f04b"}}, 0x20000) unlinkat(r0, &(0x7f0000000000)='./file1\x00', 0x0) [ 2320.405809] syz-executor.3[14388]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2320.408549] loop3: detected capacity change from 0 to 264192 [ 2320.453915] tmpfs: Unknown parameter 'w$mfqU_ ˴ѮrodT KHܨFA& #h/eDiXʝu\Ա [ 2320.453915] '0KQ-r/g˗jN؊dW;'$vp'?dބ;HQ:Q~ۯ9:v:s.EK_ L`K8@B3a:ZTWX~U$O.0jsqoMVbz [ 2320.453915] ' [ 2320.476052] syz-executor.3[14397]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2320.483655] loop3: detected capacity change from 0 to 264192 [ 2320.560347] syz-executor.4[14398]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 16:26:45 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) [ 2320.581041] syz-executor.4[14398]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2320.607958] loop4: detected capacity change from 0 to 264192 16:26:45 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:26:45 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) stat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getgid() setgroups(0x1, &(0x7f0000000000)=[r5]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {r4, r5}}, './file0\x00'}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r7, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r2, 0x0, 0xfffffdef) openat(r6, &(0x7f00000001c0)='./file1\x00', 0x418800, 0x40) 16:26:45 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) chown(&(0x7f00000000c0)='./file1\x00', 0xee00, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xd4301, 0x155) r1 = memfd_create(&(0x7f0000000080)='&\x00', 0x7) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0xc00, 0x89) openat(r2, &(0x7f0000000180)='./file1/file0\x00', 0x402000, 0x20) fallocate(r1, 0x8, 0x4, 0x0) lremovexattr(&(0x7f0000001800)='./file1/file0\x00', &(0x7f0000001840)=@random={'system.', '.]/-]\'\x00'}) write(r0, &(0x7f0000000200)='E', 0x140000) chdir(&(0x7f0000000540)='./file1\x00') syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000240)='./file1/file0\x00', 0x50, 0x5, &(0x7f00000016c0)=[{&(0x7f0000000280)="73fd50d6ea0522bcbd8cca636d66ca0b6abf46d9805cb744a2e36a2f9e8dd652245664a97694996a70f0dacc820dbe6f3c39fefe918498bec3a5b0afb5f150e20a698e5134a7fb34cdd6d88450b6f3e95a33541b29e4eb9b96d0ca497cdfd0e607bc94ace905158b45e8c14ded46f88fcafe4c6bd070a03acf2f4d744d9498cb7dac68351d14caa556fa", 0x8a, 0x2}, {&(0x7f0000000600)="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", 0x1000, 0x1c3e9e3f}, {&(0x7f0000000380)="27037fbadbbfa285f6f90bff614bdee167d3f451826e5e2823d2814773c5254a5ea9d9bd7acbbc4da83e9693857b0ca107f6143330a93635ff95312ae7c3399fc5d1750739f0574f2e438b6a0e462e3f5898b65d9cf5787d62fecddddf7207ac03c1a6b8db9be8f6408671bc4bf76301f85bb0d05de4ed669caf95685012066519625a22b841a0dbc9c1836776514c5155edb2a2ec2799e08586cddb2132756377db45af694ae14c91bbfe8c50ea684165de7d", 0xb3, 0x9}, {&(0x7f0000000440)="c77c10e1e7f484b0c24ab0a8c93f7b825b39c2a2d4ed3f6c6e92b7db5df3db302fd1cc42cb0793404e0672f31ad0684886dc34ccaeb6800a36f98ab5a207b2f584b64ee6cf7181ac05248af2c74b3a5b64529a9dbe7790544a7b074d15bdc0bd9ade63d61680e50d710ec4002fa3c3c9f10e67c4cc7a99425c0848fad8beb9ef0acb8fa45d508ee8f9d77e24121d3817331501188a9b51dc2dc01291115280743588679a12c0d221f41b1d10215813f6973add32e2f596869bc62128eaa9d9164e58fd60d32e56ee972b7230", 0xcc, 0x9979}, {&(0x7f0000001600)="633077863dc0737fa4205d639033ac818c07ef0558d4e67e115d29989e88fbf0b46302b9644d1d5658f56837e3f74e3d3a4c2ef34449307f278ceb0776ca4ea69aa90b014c7b2941b0a22ca48aea75c0dbe4d8946756f7f8fdb2c24df8b99d69b4056331b1e1c89519f9a29b424888a7eb2e9879b58d183d37df05073a19bb8ae28f537f37bdf6939e02f77a763c369af1e08f6c740116", 0x97, 0x4}], 0x4000, &(0x7f0000001780)=ANY=[@ANYBLOB="6d706f6c3d7072656665722c6f626a5f726f6c653d5c267d002c646f6e745f686173682c0093c773768a7b39452a953e0b00027d419e6f441692dd7593e86fa9d3d40a02db246b21c7d5a9669fab60cd3626f4f13dda0c6a6a68dd8ceeb60a0e2ea3"]) dup(r0) 16:26:45 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x601000000000000, 0x0) 16:26:45 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:26:45 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:26:45 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x1, 0x0, 0x0, 0x249420, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) listxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=""/82, 0x52) [ 2321.190779] syz-executor.4[14422]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2321.217421] syz-executor.4[14422]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2321.235997] loop4: detected capacity change from 0 to 264192 16:27:01 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x20800, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) fchmodat(r1, &(0x7f0000000000)='./file1/file0\x00', 0x2) write(r2, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:27:01 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') mkdirat(r0, &(0x7f00000006c0)='./file1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x511c42, 0x40) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x1, 0x6, &(0x7f0000000480)=[{&(0x7f0000000140)="283d09a7a1292e394aa21950da2aa1c2fc8ef348f925649a44a16c7fdd78624ef8d37aac432301de7140b7653ecb5dab65deb4d5eaa985babf2935e6afe123551b4d8884d91d490b031f68564d1bc8ea77957407430a6abab9cf", 0x5a, 0x4d1}, {&(0x7f0000000240)="0fd41b6453cd57e72ba28a64f84df22c53217ff445b18197ce88c87f7916ac140de06be99dc9765a3b7a911928e3a344d14078f157fc9a85b24a5961523a5faa6a64b96b0146b559e21ce00de514a474160be7932135", 0x56}, {&(0x7f00000000c0)="4951d1945bc2d667fd937bd6871785ca9a61d60f91cfb990b04cf6f47ef57aeb0dec54b50a18df1ee3858015e1fa", 0x2e, 0x5}, {&(0x7f00000001c0)="7f11d3b294b31209190ec8c35477d85f33455cd349a75e27b99001f305", 0x1d, 0x1}, {&(0x7f00000002c0)="6bb06332d347f674e18dcf589b651bb136b3334fbea2cff8ef255495b453007fb31c732c04dddce086a937cd82e6936698921ed00629aab8b2378f41057cb597dbeb03d8aa0f296f0e366808884de87b6d5d0d2b748d5177aed85518b89876fcb483d3814f4f41d3814754597378c2ff", 0x70, 0x2}, {&(0x7f0000000380)="965a3e6679a7ecddf3e56ac11ba0e20397fd148481046af1dc7340f28d4dda2eb0bd3aa4541d668dde9f09af3228966314d361cd133dfa7c3af25172ff655ed0acf66c3318eaa13489dce7bf5dae5fe1fd3edcc39c11953a16913223c3e03d991b7caa5df1925ab3ae33c40b07f565aab38f1e2d46d38382c828bd1c1c82774f17468c3070f6630656292534830efa55765488d6c8074a9b76a6dea2aaf8c8a11be758515f961cb798b04d1670848a24e24f9788481221bd132cd39bcb50e2856873b160079f75", 0xc7, 0x7}], 0x2800000, &(0x7f0000000600)={[{@min_batch_time}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@block_validity}, {@block_validity}, {@jqfmt_vfsold}], [{@obj_role={'obj_role', 0x3d, 'tmpfs\x00'}}, {@measure}]}) openat(r3, &(0x7f0000000540)='./file1\x00', 0x10000, 0xc8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) sendfile(r1, r2, 0x0, 0xfffffdef) 16:27:01 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:27:01 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) chown(&(0x7f00000000c0)='./file1\x00', 0xee00, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xd4301, 0x155) r1 = memfd_create(&(0x7f0000000080)='&\x00', 0x7) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0xc00, 0x89) openat(r2, &(0x7f0000000180)='./file1/file0\x00', 0x402000, 0x20) fallocate(r1, 0x8, 0x4, 0x0) lremovexattr(&(0x7f0000001800)='./file1/file0\x00', &(0x7f0000001840)=@random={'system.', '.]/-]\'\x00'}) write(r0, &(0x7f0000000200)='E', 0x140000) chdir(&(0x7f0000000540)='./file1\x00') syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000240)='./file1/file0\x00', 0x50, 0x5, &(0x7f00000016c0)=[{&(0x7f0000000280)="73fd50d6ea0522bcbd8cca636d66ca0b6abf46d9805cb744a2e36a2f9e8dd652245664a97694996a70f0dacc820dbe6f3c39fefe918498bec3a5b0afb5f150e20a698e5134a7fb34cdd6d88450b6f3e95a33541b29e4eb9b96d0ca497cdfd0e607bc94ace905158b45e8c14ded46f88fcafe4c6bd070a03acf2f4d744d9498cb7dac68351d14caa556fa", 0x8a, 0x2}, {&(0x7f0000000600)="b69bbe3219db550a507a0bec8c8e4a63eb8da7d5ff771bfa17b85aa489808b52f817af0fd019329109b1de2f49342b21bffac743ee51213e56d5f874ff7a6e08730ad98e69460447e768b7ab059910f76a6892ce1887356e558e4913962aca08f09405166b1dd61588ce2ecd40deb6f37638ff5f42e627429e93fa9a888e2e8bf474f2133faaede3b361ecf1270a4dccf4da4818ea587fdbeaa9ac3353cf6ff0c10cee2c2597d4dea2bc88e1dae6543b6ce42a8838a2e7962da95e8b9106e404ac1db904551352e27ae7c5ba6b50c172f1ad869537be0f47e1d9e1090a2bf2baddcab58010a1b76543819f95d8f8f144292c181bb14c93a167c26cdd647eed8608a7ccf60154eaeef1f0a2cb885f29dcc2cac8240d7b8c524e236f9a1855969ee6f53337b2f3befb3e44882ef7103ecbbb4b07a92fe7f81e6f5175a4f5477198ab4fed8edda5bde977b298003e266efa5c18d3c566ff619b12adee6bef2ee9f89b8bdc5d5c9ed9c88df6682a49047c0b81e041ae11b189d6715a3595b51b153c3a7df84989aa6ab998e9d4ec036fd4dff04a631c20983d5bcdf3cfa59b5b56e9941dfe615fe8fa306d3ca852217f31dc0999c3a042cd3f14a775e0c1ff83f581140eb77458fd2828abc6cf86201b79e1558207be2711d0deacdd542c8576ba80b9ca2de34d7c61f3b211776fdf5d50491e864149197b12a83f0f03ac5447342a4328be9cb46f0f385217775d2e468957155adc74f13621c1c7764158bf72ba5d30def4ad10a8125d1c979f4f6bff5d523393df394d3d39a7bd8b32cf2687da3d18261c784a6ab7276be49f093cc1c51e01e06d025983fcb88e2ecb4275a55425961a4aeca0bc09b1151d997bf93a91d5864361dbd47798f080e79af2aad557752230ef11c8444392884f8a7ec9e03cd53701c0e69aabe9c18f915ed466717847eac9d9cc6325e024c3859ed53eab52c05227ec17e9945650bfb7503f7cec8721710eb02ebd19e3c8e2d54221a0b5776cba136efa5b7f40c7bca56057154ea66d554796466914f5844099ce7c36d243ae5a01e3183ccc574b9c5f45cb3e4e4d11550db366e0ed59b465c8f1dd92a883a00f6db0f63e9b063de2b0a20863124b3574ce5e328743189ba88d30ada880e4ab0ab7742b6b20f0f336fea0aa7b5eba3a1ce813f0da04a37c285c210ac718cc046a3042cdc4dd0b1eead7c103882a47cec5cdd76f564372eda830f953a29f8217f05f3e58682d0e57d585b7b2d190d978cbba7a13cf9372d63509159202e9a012c12ad91ff8c062b3e4fef47fc63b79e72525909e8c5894607327919cfad56cd460bd8f40ccc4c0f2d1b1f18e0428a3ee4c2f8548b5c25ce34627e19943f9f70801b3bdc2df46ef5423176af73cb6f1b2e9b35cf7a5c539d8b0919263c6e92e97b7b864b7dfa670c377103e69d78cbcd8cc5963420037fdc48845b1664a6f2b57ab18adf53320010029468af061882a97afc7e209f367c4b203b137c224ddf3a1b87c8d86435822c579fdb9b52362009e76389ac2a8cd13a304ae6d7f07cba7d8c15d322d6bedade38c2c097552fc430f2c28ccf73dd4165d356135ef4a12825d28a242c8a577043963ea88b9c65dfcb3f6e40c4f017a8a2bee74d423b12ee30d0baaf3c751083a306167d83c19dd27b939dda22489afe8cd97830831408c5a7ac89327e9218810238e3f6a07424ffb03eeaba930fcd575d60f6a2deac995fe2931ad0a59bf4db2ddcbe11a8c6e9b6e1939f1c4850622d978a4ae9634d8798b28b4aa99f7a28e86c9690e65f9d53e3018609085c7dcbfca334916e67d142a4d0f00b8704cd75687bc7cd9842e52d2919d665b466a0e17e9e4d66c672aa6d9f4e5aa1dc13d88332e815863084c11cb4b48e84ec3f69b39dc625e4779ef8867115b9f5a50d78f0018af024979acce55ddfde674c4121bc4a212ab7e0a9c1ed69d527ddd1e0b924411f90ed76a98019548f72b87d4c90cbe13adc693973039ab09076a6b10786ff16ec12a8e1f4f816c6900f61f9aceccf585638c8272a055e5e291e97cab660294ced3a55886915c885a20489f027d2d9375b95388920da6c467ec622d03115d0a2d4a5bc71cfe7ba20dc9e3acc1d9ed3223e7e6e0731c760fad2f441310bd4668d5bd76992d5d705261b14d4448265037eefaf1fbab60ce411391d5f0d0518b9db19be53aa5eaa5b8189a3e8501250f343acde45d72c8274adb9250231d25b1fe6b0dfb4163a4e0978bdd9807156703c20cde12eac7cf353f6202014d05a29c0bfd54739cb1517c453fdeb4039c500e8cc5a1f4b4b0c41bfaac88159369f8331dc5cc58356e6c24486d4c1960e6127257f614ab459a8f76f4360173b80d18222f838daa8049bb933a497f3f052db9458294726f970e271b29442a5e284c05bb79d8118f95f8c49d98f50ebab673e93b19f20434da47d0a4dee583c28b68a8f531cdd9a3db41596aa3775dd06f7c048ce8351bbf2feace2d5eaf1973d77413e22762854fbf1d8cfa9dc9e70de637996c2f366d407eca6ee9cacc2944752e6aae605a7c395b02edafca44023c7f20cd270173c00612256e7fa3e24a4849dec073c11105affee9e1639564148415a924488b7610bb92753b1d6cc03f8832ffb7f58a8b75ed77e39c0d6658c3938615e262673e466a591ac67cca543f96254f73a79548417a79e20396ac9713e45cfe780f1d019b38bf5f1545182e186adb9e6f46a1d84e78b391ab5ac13d1f4f37afa851fe91e2d4246fd222a595e9d990dcbcb95e3197bce943dd7cf9262b9e223b67ca5e8c838f9931169b3aeb72ecd9c2052d4c1200dc9f734966ecd5100a9654756609de946d3a0c7a0474aae2c9e1e7ebf6faa960aadf7f6c3a965ea5380ea54108678bef08c15f7271dc2fb363b94d392e3b02dbc5c71027f644ea15c946f25bfe241aad04cc69a8b117b6a72f3f917ed7544cce882310a0118d6cc6f60923cbf397a9f8e6221b60f111c5a82794d2f08c1e49eda9e8efe68d7e1d0e84d1584feee4857d7198d8b2dd21f72db364d8a180130223811043bf7f946492c5974a5fa8e2632d9eec41094d723fe8370181b0777a2afddc9c6340acd1f6c61f7f42a1325280ea383f83c7ebbdc43f6d55d94cb44e52057f8675ec1762834aec76e1eb497eff264b6cad5fd729813bbe081a6e848f2be4b9fe05565f088704d2d2eb355d2360bd46762fe93d9ded49c917ae77a4ea968914b6f5a0b44df4eae7f79a2d6e8a6c19f7b9069b957fc1bcce841360bbe0791b850186fd0b66ebe96ad6a28852213f37b50d97b405dbc7ada032efe78dcbfebd894626d44c29758716ac431d660d700cfe72f13efec1a6e09d6a1d05f3561cf8b704ae15fdbaf8d38f5f2e3f1fc28b896c7457d9b15aa86183b23b07b04961bfd97385887c222333add432ffa2f3d40835a67fc36361dfacdba358bd20b9e8122b88cea59fb186c3fde025ca3ced8be59052d881ac6d117ef91e37382cbec86d621cdb912e438058c582383bb3f295bd5e994cf1b66ba21a6f3cea888192c079a02d70440c6f3c6597bd81298b862a63a419134b6e8e20f2e0714231d63571d971d72189aa7bbd3d8079c0007536cc6bad848918464a36cd7ac4b4548b9f2129023b978394bbaa5fde09ecdebf476408b4b7182138f6d9d7c22cdccfd565211bd72856fea0dbecd243f5a755f06c606bf896c02a48f60c3e68fd983917106d1bec7edf2cd45c67deee42ac256d7f4525ba177620f22d6d5b8cdd995d7a229e50517c9b4d1e9c7071a8750e392ccaf6658c421c379f33ca52733e530953efc25c2c46479050cf27d5b6fe6f4c54cab1cf3546e8bfb6655aae58cfd0b2e885db35ce7f3866ffc97b954f516d261cb13b39063aceb9b2257134bd9e23b84fb51616cda158cc861bfe67b2b99b926be4bf5f66e137bdb64c577367196ef8a4b68407000759c01c65554071231274835720aa18f49f0d476fba2a935ac5744fc83b4bf12370a07aca9422445caffdd38bc66c96b09b6fac16f76968f878716dea2b1d07ba0d782abffbacaaae6139f2352367910612949c8e24b6eaf26c4c4086f57422ee3775783ce1f335032b06c4842965d4f21975ac9519356301a36706e69acb2640148187dd16d7322f66ec7eb959535de830a129e64911a4975d9b052a8880acb216686114bae0ffb65bb917c3fbc0cf1e844552f7b0c440d40463a271c369d3e45ce679ae39ea0e860ef075740f47a92559e9c1a72bff488b591d6f7d7014ac8bc24bdcd5591e09ef9dc6ac24be4bbd4c64bc2d65c7da0b0b77bc4b53f7eae73486d76f3d1055548de4aae62f9b1459d889062d2ee44e5ea95b3f324cc483c6f386cd50c8c780adcb967867e48599e43e14260b1ce5035f2ee4308f9304669a06f4a8dee97b8f27ea2104f8974ecf371a067b064ab2db1decdf386f640e943fb390bd0f59cca52faaf2e2820df1a3f8ab067dbfae0a5cb8e957b6a6e6ae2ba16c76ae3157f5f73f50e062ae6bef4f823e614c7860b4d9040efe3b51a0d5317cb4e7d17c16b88c074ced4e08659681166cdc5e5f6d5222de97f073c985dee73eaf4a59a2b9d69e07ecfa71e2e8977d804a044e13e70ac5c7a7e3881213c560c4447378853119d37557c585e866e3fd56c9c3617ea628cc5c5cf8f1b56e81ea9204ddb58b543b7ed97a57cc86fd222c31d0f43d3cc9ec6824253fcd2fc2646a94923e88d0a9c4349fcccf78f06e85cabd95ad38f3c1fc841fd084e52d7dfb523b3d0a9b41098398bdfac150154ef26a48d2c3abf4365de3a996e2c5ba7c9e4ed790db23e05b8a24fe3060638f900e2789dfc0d72cca845ffff41f42aabd59e3c6684b804754d14eb867e72b416d5344dc3cdb23c428c15ef0b7c24d4dd989f6098fb78b0c730d5e876548f171740867378e488360a1cca27f74982dd5fddab86f4de2559b41618826099eb4f7f2ebb3da5824f7eebbef3aa0aa5300587db3bdbd94cc8c2b2abf3cf52d9462426c672348f5e69c5ecf43be6ad2f3cab070e68faf6d32257638862783b81610b4b12e5108164a2fad3b197c52dddefa3e4a66f6118db76deb75b3faef3315b5413e090e8fed7cff30fba80cbff8ea3ef66182325680e1890d4de00673bc97300aecc9b89fa0f9370109e48ea335b60da30d39da9fcfa933e9058cb2708d40c9f55690f82660960851c4a9e9cd5a6f93af5413d51b0fad119ff34b312b956c86262f573e21db8f579d2d57307d9d9876be46d3ed4ad0e5ba0c40b8e94811bbbae59ba9c010100abdd6be4e2a4b679eb7558009481ac74b58dc2c46fc4d72561a3ac7a1d36475cba104a59d19727ec0459ba51e8c205006554fe4b32f8a800d016c47cc35fc1fe144ece003c34bf369e602189de4d730c762b2175c4a0a5721fb3046f1fdfc8ccc9292c95b65bf732bdf9693996d00536fede983da20684c4fc1e2d5c7e64015dbcb55f63b7ba2d3bc28c9069ece530266023149ce1d64847ed2a4da5ed9fb1ae2602f36193c626cad4c9e8bd65bbd7c55858c3c88bd09fb023c0ac63a6aab930ce5fcd56db0d7b05a708b5ac0248a65e966b115f949b69cd36001351fd06bc848a0d29c786a02af7b9a042282927b2c76d16120c5152b3fedaec5b1b11bbf0e7cd9f16a23617f2ad7763684e98051ec33eb1961e24d5aaccb2e4864a79327db9f7822608c45f06db401d893aa673cb0f613f6d5f4568159a902b2eeeafbc9fb73ca7e1042a3e64ccd5adbf53dd6c4b3aaeeb7f93f8b", 0x1000, 0x1c3e9e3f}, {&(0x7f0000000380)="27037fbadbbfa285f6f90bff614bdee167d3f451826e5e2823d2814773c5254a5ea9d9bd7acbbc4da83e9693857b0ca107f6143330a93635ff95312ae7c3399fc5d1750739f0574f2e438b6a0e462e3f5898b65d9cf5787d62fecddddf7207ac03c1a6b8db9be8f6408671bc4bf76301f85bb0d05de4ed669caf95685012066519625a22b841a0dbc9c1836776514c5155edb2a2ec2799e08586cddb2132756377db45af694ae14c91bbfe8c50ea684165de7d", 0xb3, 0x9}, {&(0x7f0000000440)="c77c10e1e7f484b0c24ab0a8c93f7b825b39c2a2d4ed3f6c6e92b7db5df3db302fd1cc42cb0793404e0672f31ad0684886dc34ccaeb6800a36f98ab5a207b2f584b64ee6cf7181ac05248af2c74b3a5b64529a9dbe7790544a7b074d15bdc0bd9ade63d61680e50d710ec4002fa3c3c9f10e67c4cc7a99425c0848fad8beb9ef0acb8fa45d508ee8f9d77e24121d3817331501188a9b51dc2dc01291115280743588679a12c0d221f41b1d10215813f6973add32e2f596869bc62128eaa9d9164e58fd60d32e56ee972b7230", 0xcc, 0x9979}, {&(0x7f0000001600)="633077863dc0737fa4205d639033ac818c07ef0558d4e67e115d29989e88fbf0b46302b9644d1d5658f56837e3f74e3d3a4c2ef34449307f278ceb0776ca4ea69aa90b014c7b2941b0a22ca48aea75c0dbe4d8946756f7f8fdb2c24df8b99d69b4056331b1e1c89519f9a29b424888a7eb2e9879b58d183d37df05073a19bb8ae28f537f37bdf6939e02f77a763c369af1e08f6c740116", 0x97, 0x4}], 0x4000, &(0x7f0000001780)=ANY=[@ANYBLOB="6d706f6c3d7072656665722c6f626a5f726f6c653d5c267d002c646f6e745f686173682c0093c773768a7b39452a953e0b00027d419e6f441692dd7593e86fa9d3d40a02db246b21c7d5a9669fab60cd3626f4f13dda0c6a6a68dd8ceeb60a0e2ea3"]) 16:27:01 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, 0x0, 0x0) 16:27:01 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x700000000000000, 0x0) 16:27:01 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:27:01 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r1 = open_tree(r0, &(0x7f0000000000)='./file1\x00', 0x19001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$tcp_mem(r1, &(0x7f0000000080)={0x3, 0x20, 0xfffffffffffffff9, 0x20, 0x20113d47}, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) sendfile(r2, r3, 0x0, 0xfffffdef) [ 2336.564055] syz-executor.4[14446]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2336.573021] syz-executor.4[14446]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2336.578653] loop4: detected capacity change from 0 to 264192 16:27:01 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) chown(&(0x7f00000000c0)='./file1\x00', 0xee00, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xd4301, 0x155) r1 = memfd_create(&(0x7f0000000080)='&\x00', 0x7) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0xc00, 0x89) openat(r2, &(0x7f0000000180)='./file1/file0\x00', 0x402000, 0x20) fallocate(r1, 0x8, 0x4, 0x0) lremovexattr(&(0x7f0000001800)='./file1/file0\x00', &(0x7f0000001840)=@random={'system.', '.]/-]\'\x00'}) write(r0, &(0x7f0000000200)='E', 0x140000) chdir(&(0x7f0000000540)='./file1\x00') [ 2336.669657] syz-executor.2[14453]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2336.678297] loop2: detected capacity change from 0 to 4 [ 2336.686259] ext3: Unknown parameter 'obj_role' [ 2336.779188] syz-executor.2[14464]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2336.794766] loop2: detected capacity change from 0 to 4 [ 2336.796271] ext3: Unknown parameter 'obj_role' [ 2336.854978] syz-executor.4[14465]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 16:27:01 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) 16:27:01 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0xfffffdef) 16:27:01 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r3, 0x4, 0x5, 0x4, 0xffffffff}) sendfile(r2, r1, 0x0, 0x20088) 16:27:01 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) getresgid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x110, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1735, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000240)=0x0) r5 = syz_io_uring_setup(0x1178f, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000700)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1f) statx(r0, &(0x7f0000000300)='./file1\x00', 0x1000, 0x400, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000600)=0xe8) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=none,dfltgid=', @ANYRESHEX=r2, @ANYBLOB=',hash,euid=', @ANYRESDEC=r8, @ANYBLOB=',fuKc=MODULE_CHECK,uid<', @ANYRESDEC=r9, @ANYBLOB="8fc5"]) stat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r10, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) truncate(&(0x7f0000000000)='./file1\x00', 0x200) 16:27:01 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) chown(&(0x7f00000000c0)='./file1\x00', 0xee00, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xd4301, 0x155) r1 = memfd_create(&(0x7f0000000080)='&\x00', 0x7) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0xc00, 0x89) openat(r2, &(0x7f0000000180)='./file1/file0\x00', 0x402000, 0x20) fallocate(r1, 0x8, 0x4, 0x0) lremovexattr(&(0x7f0000001800)='./file1/file0\x00', &(0x7f0000001840)=@random={'system.', '.]/-]\'\x00'}) write(r0, &(0x7f0000000200)='E', 0x140000) 16:27:01 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) sendfile(r0, r1, 0x0, 0xfffffdef) [ 2337.197014] syz-executor.4[14478]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2337.401130] tmpfs: Unknown parameter '00000000000000000000003 01777777777777777777771 00000000000004004236507' VM DIAGNOSIS: 16:32:11 Registers: info registers vcpu 0 RAX=0000000000713af3 RBX=0000000000000000 RCX=ffffffff845a4fbe RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff81299875 RBP=dffffc0000000000 RSP=ffffffff85407e10 R8 =0000000000000001 R9 =ffffed100d9c6a08 R10=ffff88806ce35043 R11=0000000000000001 R12=ffffffff85d51ad0 R13=1ffffffff0a80fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff845a5f5e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000561842e3ff70 CR3=000000000e5b6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041848de940000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000b17201 RBX=0000000000000001 RCX=ffffffff845a4fbe RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff81299875 RBP=dffffc0000000000 RSP=ffff888008de7e70 R8 =0000000000000001 R9 =ffffed100d9e6a08 R10=ffff88806cf35043 R11=0000000000000001 R12=ffffffff85d51ad0 R13=1ffff110011bcfd3 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff845a5f5e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb046422010 CR3=000000000bf40000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65 XMM02=ffffffffffff0f0e0d0c0b0a09080706 XMM03=00000000000000210000656369767265 XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a XMM06=20202020202020202020202020202020 XMM07=00000000000000000000000000000000 XMM08=00000000000000500000000000000060 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000200000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000