0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="1a0000000000000000c3c75a530008000300ba60", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r6, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x20048814}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) [ 2330.071143] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2330.083031] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. 07:59:46 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x2, [0x7a7, 0xbe8, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) [ 2330.112628] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2330.120325] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2330.123015] FAULT_INJECTION: forcing a failure. [ 2330.123015] name failslab, interval 1, probability 0, space 0, times 0 [ 2330.125117] CPU: 1 PID: 17608 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2330.126327] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2330.127826] Call Trace: [ 2330.128326] dump_stack+0x107/0x167 [ 2330.128966] should_fail.cold+0x5/0xa [ 2330.129634] ? bvec_alloc+0x148/0x2f0 [ 2330.130292] should_failslab+0x5/0x20 [ 2330.130990] kmem_cache_alloc+0x5b/0x310 [ 2330.131800] bvec_alloc+0x148/0x2f0 [ 2330.132434] bio_alloc_bioset+0x40a/0x600 [ 2330.133199] ? bvec_alloc+0x2f0/0x2f0 [ 2330.133855] ? iov_iter_npages+0x1fd/0xa70 [ 2330.134671] iomap_dio_bio_actor+0x518/0xef0 [ 2330.135524] iomap_dio_actor+0x36f/0x560 [ 2330.136237] iomap_apply+0x289/0x810 [ 2330.136888] ? iomap_dio_rw+0x90/0x90 [ 2330.137584] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2330.138694] ? mark_held_locks+0x9e/0xe0 [ 2330.139402] ? filemap_check_errors+0xa5/0x150 [ 2330.140234] __iomap_dio_rw+0x6cd/0x1110 [ 2330.140982] ? iomap_dio_rw+0x90/0x90 [ 2330.141748] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2330.142522] ? ext4_orphan_add+0x253/0x9e0 [ 2330.143309] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 2330.144197] ? ext4_empty_dir+0xae0/0xae0 [ 2330.144983] ? jbd2__journal_start+0xf3/0x7e0 [ 2330.145759] iomap_dio_rw+0x31/0x90 [ 2330.146368] ext4_file_write_iter+0xb26/0x18d0 [ 2330.147205] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2330.148069] ? kasan_save_stack+0x32/0x40 [ 2330.148836] ? kasan_save_stack+0x1b/0x40 [ 2330.149516] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2330.150410] ? iter_file_splice_write+0x16d/0xc30 [ 2330.151291] ? direct_splice_actor+0x10f/0x170 [ 2330.152178] ? splice_direct_to_actor+0x387/0x980 [ 2330.152964] ? do_splice_direct+0x1c4/0x290 [ 2330.153724] ? do_sendfile+0x553/0x1090 [ 2330.154431] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2330.155341] do_iter_readv_writev+0x476/0x750 [ 2330.156085] ? new_sync_write+0x660/0x660 [ 2330.156829] ? selinux_file_permission+0x92/0x520 [ 2330.157703] do_iter_write+0x191/0x670 [ 2330.158386] ? trace_hardirqs_on+0x5b/0x180 [ 2330.159197] vfs_iter_write+0x70/0xa0 [ 2330.159838] iter_file_splice_write+0x762/0xc30 [ 2330.160687] ? generic_splice_sendpage+0x140/0x140 [ 2330.161657] ? avc_policy_seqno+0x9/0x70 [ 2330.162487] ? selinux_file_permission+0x92/0x520 [ 2330.163288] ? lockdep_init_map_type+0x2c7/0x780 [ 2330.164152] ? generic_splice_sendpage+0x140/0x140 [ 2330.165048] direct_splice_actor+0x10f/0x170 [ 2330.165945] splice_direct_to_actor+0x387/0x980 [ 2330.166681] ? pipe_to_sendpage+0x380/0x380 [ 2330.167507] ? do_splice_to+0x160/0x160 [ 2330.168255] ? security_file_permission+0x24e/0x570 [ 2330.169192] do_splice_direct+0x1c4/0x290 [ 2330.169917] ? splice_direct_to_actor+0x980/0x980 [ 2330.170747] ? selinux_file_permission+0x92/0x520 [ 2330.171613] ? security_file_permission+0x24e/0x570 [ 2330.172527] do_sendfile+0x553/0x1090 [ 2330.173200] ? do_pwritev+0x270/0x270 [ 2330.173841] ? wait_for_completion_io+0x270/0x270 [ 2330.174666] ? rcu_read_lock_any_held+0x75/0xa0 [ 2330.175484] ? vfs_write+0x354/0xa70 [ 2330.176177] __x64_sys_sendfile64+0x1d1/0x210 [ 2330.176961] ? __ia32_sys_sendfile+0x220/0x220 [ 2330.177744] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2330.178600] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2330.179502] do_syscall_64+0x33/0x40 [ 2330.180216] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2330.181068] RIP: 0033:0x7f7d1dff4b19 [ 2330.181734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2330.185022] RSP: 002b:00007f7d1b56a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2330.186365] RAX: ffffffffffffffda RBX: 00007f7d1e107f60 RCX: 00007f7d1dff4b19 [ 2330.187671] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2330.188856] RBP: 00007f7d1b56a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2330.190043] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2330.191231] R13: 00007fff18b5369f R14: 00007f7d1b56a300 R15: 0000000000022000 07:59:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c4"]) 08:00:02 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0xf0ffffff, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:00:02 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000010000100060002000000008e0000000700000000000000000011000080487fec864b245e0f3f8ae149f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000480)=ANY=[@ANYBLOB="8ae31963c221bcc30aed3cd8a42e8f65f6f4189f6380b6d39e56d10764", @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) [ 2345.147210] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:00:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x2, [0x7a7, 0xbe8, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) 08:00:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414"]) 08:00:02 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = gettid() process_vm_readv(r1, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3f, 0x80, 0x5, 0x81, 0x0, 0xe9, 0x80000, 0x5, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xdf1, 0x2, @perf_config_ext={0x3, 0x1}, 0x1a0, 0x8000, 0x7fff, 0x6, 0x19f, 0xe7, 0x2, 0x0, 0x0, 0x0, 0x1}, r1, 0x1, 0xffffffffffffffff, 0xc) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) fcntl$getown(r2, 0x9) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/65, 0x41) timer_create(0x1, &(0x7f0000000180)={0x0, 0x4, 0x1, @thr={&(0x7f00000002c0)="2e4d27b1ed26baf68c5463d578e9818286fdda38f2f0b90cabac447cd648c600508f4ae35e0e506ee40393bef0f1315e390a95729c09564e2010a43de6e8ebadb5ab87fafbd1b66ca5f01d4975d7961bbee7e8e5ceddb5e27ecd9e2019", &(0x7f0000000340)="9b167464441610cb6c54362e3a52b1b0d9636f9fe03c8ca14560f1978efbe9791e641928fb74b133106c05a246b5ff52302bc7feb1dfbb88fa9cedf24dee2deba26f17441e66b713e91a6b225e56d768866ef65f21c10840f596736b9bb997757f378c9d745452a45a9c49178e42d28be55b3805a7c2f84051c4df7d0687d9a3cddc2ef607733616f2468b4ffbf38290d9852473dcdf43c0eecc9cb140d5594b64b7fbe624fed3dccbf3482f1f129b0edda299b2b0db547d10e918cfecdad6a282d7"}}, &(0x7f0000000240)=0x0) timer_gettime(r3, &(0x7f0000000440)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000540)={{r4, r5+60000000}, {r6, r7+10000000}}, 0x0) [ 2345.157857] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:00:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) (fail_nth: 48) 08:00:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000001e) 08:00:02 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x301000, 0x186) sendfile(r2, r3, 0x0, 0x100000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x24000, 0x0) sendfile(r2, r4, 0x0, 0x80000001) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xff, 0x1, 0x9a, 0x97, 0x0, 0xffffffff, 0x85280, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f0000000000), 0xa}, 0x6050, 0xfffffffffffffff8, 0x100, 0x7, 0x1800000000000000, 0x500, 0x6, 0x0, 0xfff, 0x0, 0x6}, 0xffffffffffffffff, 0x8, r4, 0x9) openat(r1, 0x0, 0x501080, 0x88) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000300)='./file1\x00', 0x4d, 0x6, &(0x7f00000025c0)=[{&(0x7f0000000340)="a92bed684e1970e717f6b34447dd1039676fb393653ae29106940745be3efa0d8c08dc6d1942693c3077f5499ead1b9deed0e5986f280c677b1f1b445ccc2b7dca1212af6a9fe080c3c2516406aa7ff622bd4a", 0x53, 0x2}, {&(0x7f00000003c0)="8ddcb0f06fc7c0296ee58e635ad4323245169ace4f06b0c3a674e2c06d07811f867c6411d9e74f5870a72bd7d5debde5e90d06c0104505f64dcfaf3ed44f5ee71bbdb8801ef087d784309e59fe7f", 0x4e, 0xded}, {&(0x7f0000000440)="55096510051db24b3bed3f16f9c64c8a35b66fb923bb2f56719196a8374fe0a49ffe9282f2fce9d6a6055e09298cf74d75b4135ccd222ca8cf6267d0", 0x3c, 0x9}, {&(0x7f0000000500)="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", 0x1000, 0xffffffffffffc32d}, {&(0x7f0000001500)="190b5c0bfaa500bfab41745ad9547d3ee93011c3ea8f310eed3341d21b8143a146ca4c7d095f1044c56841eaaa17603a7a1f107fffa5620e83c22ecd8bf67d92165d4cb9094765e6ec733e1900651401d50bb04c9d0143944506e713d85ec35db016f6304ba069c94fd5839d9a4a58dbef2927dff5fe2dde2fdf67571c9d038bed142ea4e27414e3579c3c565b4c76e60c9b7bbafe05ee8080771f", 0x9b, 0x5}, {&(0x7f00000015c0)="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", 0x1000, 0x8}], 0x2000, &(0x7f0000002680)={[{@shortname_lower}, {@shortname_lower}, {@numtail}, {@nonumtail}, {@shortname_win95}, {@nonumtail}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@uni_xlate}], [{@dont_hash}]}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) 08:00:02 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0xffffe000, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2345.190158] FAULT_INJECTION: forcing a failure. [ 2345.190158] name failslab, interval 1, probability 0, space 0, times 0 [ 2345.191242] CPU: 1 PID: 17739 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2345.191873] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2345.192625] Call Trace: [ 2345.192902] dump_stack+0x107/0x167 [ 2345.193247] should_fail.cold+0x5/0xa [ 2345.193615] ? kmem_cache_alloc+0x2a6/0x310 [ 2345.194010] ? create_object.isra.0+0x3a/0xa20 [ 2345.194433] should_failslab+0x5/0x20 [ 2345.194782] kmem_cache_alloc+0x5b/0x310 [ 2345.195149] ? mempool_alloc+0x155/0x360 [ 2345.195533] create_object.isra.0+0x3a/0xa20 [ 2345.195937] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2345.196403] kmem_cache_alloc+0x159/0x310 [ 2345.196794] bvec_alloc+0x148/0x2f0 [ 2345.197129] bio_alloc_bioset+0x40a/0x600 [ 2345.197506] ? bvec_alloc+0x2f0/0x2f0 [ 2345.197854] ? iov_iter_npages+0x1fd/0xa70 [ 2345.198247] iomap_dio_bio_actor+0x518/0xef0 [ 2345.198663] iomap_dio_actor+0x36f/0x560 [ 2345.199035] iomap_apply+0x289/0x810 [ 2345.199379] ? iomap_dio_rw+0x90/0x90 [ 2345.199737] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2345.200261] ? mark_held_locks+0x9e/0xe0 [ 2345.200642] ? filemap_check_errors+0xa5/0x150 [ 2345.201060] __iomap_dio_rw+0x6cd/0x1110 [ 2345.201430] ? iomap_dio_rw+0x90/0x90 [ 2345.201786] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2345.202199] ? ext4_orphan_add+0x253/0x9e0 [ 2345.202583] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 2345.203024] ? ext4_empty_dir+0xae0/0xae0 [ 2345.203399] ? jbd2__journal_start+0xf3/0x7e0 [ 2345.203822] iomap_dio_rw+0x31/0x90 [ 2345.204155] ext4_file_write_iter+0xb26/0x18d0 [ 2345.204580] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2345.204987] ? kasan_save_stack+0x32/0x40 [ 2345.205366] ? kasan_save_stack+0x1b/0x40 [ 2345.205748] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2345.206205] ? iter_file_splice_write+0x16d/0xc30 [ 2345.206642] ? direct_splice_actor+0x10f/0x170 [ 2345.207051] ? splice_direct_to_actor+0x387/0x980 [ 2345.207483] ? do_splice_direct+0x1c4/0x290 [ 2345.207878] ? do_sendfile+0x553/0x1090 [ 2345.208238] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2345.208665] do_iter_readv_writev+0x476/0x750 [ 2345.209071] ? new_sync_write+0x660/0x660 [ 2345.209447] ? selinux_file_permission+0x92/0x520 [ 2345.209890] do_iter_write+0x191/0x670 [ 2345.210249] ? trace_hardirqs_on+0x5b/0x180 [ 2345.210644] vfs_iter_write+0x70/0xa0 [ 2345.210988] iter_file_splice_write+0x762/0xc30 [ 2345.211418] ? generic_splice_sendpage+0x140/0x140 [ 2345.211872] ? avc_policy_seqno+0x9/0x70 [ 2345.212240] ? selinux_file_permission+0x92/0x520 [ 2345.212680] ? lockdep_init_map_type+0x2c7/0x780 [ 2345.213114] ? generic_splice_sendpage+0x140/0x140 [ 2345.213554] direct_splice_actor+0x10f/0x170 [ 2345.213954] splice_direct_to_actor+0x387/0x980 [ 2345.214378] ? pipe_to_sendpage+0x380/0x380 [ 2345.214771] ? do_splice_to+0x160/0x160 [ 2345.215126] ? security_file_permission+0x24e/0x570 [ 2345.215588] do_splice_direct+0x1c4/0x290 [ 2345.215961] ? splice_direct_to_actor+0x980/0x980 [ 2345.216397] ? selinux_file_permission+0x92/0x520 [ 2345.216839] ? security_file_permission+0x24e/0x570 [ 2345.217299] do_sendfile+0x553/0x1090 [ 2345.217655] ? do_pwritev+0x270/0x270 [ 2345.218000] ? wait_for_completion_io+0x270/0x270 [ 2345.218436] ? rcu_read_lock_any_held+0x75/0xa0 [ 2345.218846] ? vfs_write+0x354/0xa70 [ 2345.219187] __x64_sys_sendfile64+0x1d1/0x210 [ 2345.219592] ? __ia32_sys_sendfile+0x220/0x220 [ 2345.219999] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2345.220462] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2345.220930] do_syscall_64+0x33/0x40 [ 2345.221263] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2345.221715] RIP: 0033:0x7f7d1dff4b19 [ 2345.222050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2345.223691] RSP: 002b:00007f7d1b56a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2345.224389] RAX: ffffffffffffffda RBX: 00007f7d1e107f60 RCX: 00007f7d1dff4b19 [ 2345.225035] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2345.225681] RBP: 00007f7d1b56a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2345.226308] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2345.226938] R13: 00007fff18b5369f R14: 00007f7d1b56a300 R15: 0000000000022000 [ 2345.236736] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 08:00:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414"]) [ 2345.292547] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2345.308689] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2345.318035] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:00:02 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0xfffff000, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:00:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414"]) [ 2345.434409] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2345.450154] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2345.492034] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 08:00:16 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000840), 0x0, &(0x7f00000008c0)={0x0, "65a6cf5b9c07642a3340db90bee4874c94ec4fdd53be77d8d05520d91682233c045247ee072dddb4606017c18511ee7cc2005a83f5d5bbc07333a25fce3d1db4"}, 0x48, 0xfffffffffffffffb) add_key(&(0x7f0000000140)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$link(0x8, r0, r1) keyctl$get_keyring_id(0x0, r0, 0x0) keyctl$revoke(0x3, r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)='\x00', r0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0xedcc, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000200)={0x0, "0070404651fd796ab47483a4c1be26133a48d389342f53cbb88cc2f96518c9ca6fb689bb56a2824f0f6fc853011e3c529931bbfdcfad732e9f6c146e67b6220c"}, 0x48, r3) keyctl$chown(0x4, r4, 0x0, 0x0) add_key(&(0x7f0000000480)='cifs.spnego\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="c9687d9a879a7d2c0ad44c68fba3bbdb2cdaf6938012e735b083814e9917fc9d8dbc3b768902d3b2345bcc4a4c26507dbb75e029af9a9cc07c8b0e5b3c71952168761e9f6aa45e41e925002f12ec9effd964e64a6c942d1ba8c9c911c0f594650f91d936ec84127de14cb54879a1ff7c3fb65c6f2dae3ea55cc9892b85ea487dccddf6b50a05c7c453ac644a431b60d3e8d9c23600237cb52f43ff28e8a7", 0x9e, r4) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfff, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000940)="95c97562e701543539a7994ab2b0eb35f107e6526b2294858760ea87637491d31aa776028b1fa8f7e8e8fdd7e115d3c28cd2a918baa2738c5e5c8b42d60f04e8d1f3a08fc71efd3666a7adc4fbcbf62b17bb4669af29a48f9f8d9deb5da15f64f9e27b2a23031cb7105ed5be5d55586045eb3fa2a6075e053794f6ea47f2ed639846367b7e859d98dc0765b072b297b08d344bdc010de01d01da48e0588f2bc4476c53d3890c5c390d91c658a72082ddcb4c76159a6a102ae381ebf86ae2eb7c09127c8ff5851d8952ced0ee8d6b92fe6d5a705f396e9869962dc9b3f0506019cfee7fdea188e2137ced0e2f6c1d210ac894a2b1a40705aadbcdbf325d1171b699d2c1ef0add278a0769c927ee31f36ed5c2c1e0de9545d8811329a817ce0cfb1ff2c350fab2f985255ab84bfb9c8b87ccfc5c548795d2ef4662d10aa19309f39bee5e68562c51ddff996458117da8fc2b964b1dd54b61d4ca63567fc1f5c2767928f17d9b35eb7501e1df2984076cdcd3591b0943bc6f5a7d22549c64baea965401a7a39b9e88cc2aa462e72fb3b6c95022e187a34eebed5132076059461d574504050608206fff59345a110e34c21d5b225ce1206f0c2b1c09e8b42ffa0fa652b92f9a551d16451cabfc37bcd3c137c59e953e437495d6cfdebe867517e10619b30d8c0179f6401715ac219fb75439f16ff78b76b2cd1d195c0cf25dd4cd11c09e171e6e4cc5456b3d450e1220b43e07820269688e3413336674771ef129053cef6ad67ea8617048d1a0f5830b58e4ae4b5af9d583eeea650b2a2aa3631eaa4d9a8ee82306a4b4d640b38800daafdca5f18cb55234c54831526600b96f7c3ec6a0f8321f29809a7c63ae0930ac2ab37e607b5da030ba73d6ec69429e15da86844a5ca729ebb357427af936b2377d7669fd1962450e2ae628b6e638f6339c87bcf1b2a9a6a0855195fef7022b507234128c6eb52fadaf0f8df71fb8b36e99bcffd64d7fe53c271c89f2c7460a885b5492925cd6a2b3234dd913964429a9375a7dfb1913c4e10c71de358e31390dc86f3a648f0e99e196f81a60f605b0ca7c9ca645428097d2ecdbaedfb4b413dfb1985e36b3b2887e77a8c75636aff0fe9cbd508311f7ee861886e1045401e3b0f09660ac4fa4441611f79e11849145e42428d32d29fc82b7976ad7733b9748c46de63ef04b33f028b080829572109a729148af67e096927abeccb2fb7a5531adde51008780d7c8640202aea60bc6d73ca84aa541b0750f99b5e0cd8e3765de299da683e09fe43cfbdbf9b914859bcabb2b1864c765708e97ec297f8d0ef8b59f2fc71d070f87f407754fb5eb7eb8f7edc7eb5d040a09eb1b22b1f16c21a4bf1f4b6d151be0903c5597a43ede8f2b01f41faf553936f8742a804ef23bfac5f7df72887c5f83bc62afce5ea4e595e87756650d73406b982f09e1ef2c7572053a73e7d7be022763f0a4fd08e49794e4af228604528ed108d09fc49354c38ef283b235615ce6c2556c845de764a08bca19c4b6094a6d38501d3b57290c4b332348991d1697cab89faf50d5b0c7e466986b16d52d84560eba7fb56d1cbdc7a385304eb198cab1d14825c68ef233267298475bb21a416b5dff7f29d54ad34f9b8fd130215695003b86f8fd841aebf7b9dac8fcd4eb4112c9c2eae1afb23a6c9c86767998d10af07db8a453df1d7ce68dc86831def56716392eb174a1f2b363f5ae6522a0464cd861aa39a58ef89d5aaebfba99a6cfb871c3097cefacda1f381541637e6a88ad6f9b7c079e10a904d973f1f893672e792e08295de701635d9be7c139e98b7899e1f59a45df196ee74c2d2574d32fe7ae0b820da017c087fbabdd9e6c0b761897af6473bbf3ec9da6ea08b79bba0cb35d75fa863678f63b1df3d1c4d8e134f06eda7cd232b43372890351e3eec435c35bda4b50719b2b83907b997a781dae346437099739f75e3473f3769484cc0c021cdca9bfcf3d4c70f68728564937f213c7900fa2159120745c58e0e073f658f483bffcbe3e8f685c8e268e019e36e213db8d45b9ea9b623247ac7d37f908c24738ea870f3363209218f63cbe754683de7de8ee0193b3774f98be29cdeb0d6d4688fd4e7044ef855b87d4bf8de857402aaf5755000458e965eea5d3dffd8e97cf5012df2a13f3c8903613d12991285b853588b5fc30d337b64fdb54dfae01d5e87ca3ebe0b667900ada08f0ed45bf4145038e9cbe6237bcfe668ad7df938bbacc52cda7d89e3c41dfd8a1b0ff970d428813e0325c3505d79a21b2db481a3deea731d972abdc13a35fe7fc098b57d59cf4c6823d3bf46fa4101a245f499cff2101c3363fd936fd8ab3f801e5fa46ba2e68e8de3215442c25b1108152411aff413c8100e02ddd6dba2dc08f7c297a900cf0bf3c5eac0f13402f41f5bffa177463676aea47c56f58b81ff9eb32ae85aaa18df90933acd6c15553b98b8f831a2861c44adae76e2a68fe4b9e344efbfe0c630347c383466ec909705340af8889bd42813c781940e1b40a23d28b2c4a59955fa1c0cdcb847df3114576c4dc395a6f1ec29b6eb76771d2c5ea1a448ab9024f4722c1de4e258644602e6589c7aa87ec8ff9b7c69719ae0e12dc367bcb3a5dfd14673bee49ae77afe546b84c93a993ff3cbcb71b0990443668343609731532a5b688892674b78bf5818aac15217d5f86bd4aff488fdd53b5f6a0bbf8c3cc541318b9b027aafbcc239a319e00b981b4526e8cdee265688e3a6742a4e1462a224ef0af16fdd312e110df443011736aedb05467ca0a8dd0483a96d0abda6f3717c6a8c89f738180bcce8d2b13707fb67b92acbd69a2c902ea23314cdbe1e1d8bb0c3b2954597cfdff4add5aa37f14c1f15601e7c24382c1d6d7259897e2424dbe6cd11e0f823203dc43e652d04fc225521bdd988b48ddfee79e85293cb283517fdd4e9bab89704a1ae8225ea9441276c77096cf1f0f4f93140b9fe7032516b002c7173e500dc69c71977400810a5bc8c9f5cd647a1a185da2403f1b59897524d1ee8471456c173a637cedb8108ae82216078e322c75072a1f1b005c939c02673da0ccc0d89b07f2150fb35d2a93d756580fdf6a86580048370e0273d34e00518ef7da816c103f9a6d65d489f5802a606711f6218989a9af268470c6403a9dca408aa41aea07458240ec4bb1f50b230c3739c86bffde4cb87e4781852df86ac571a9fb959c9bb80d2e0fd441cd2d23fcd8fc48bc293586596ab9789dea1fa88f52fd47c02421f091d51606668d57dc5ac222d43b085648a25b9463e03e03fd48cff3a8d7a1bef5b3bf3cf23fb5cb359d7ae1a2987692f79ab31833c092f73f10822b73dd93a356bd5c1e7cf328b2ada06e454954b76a4da8507cbb468cae54b45e28968e31459f9650b386b5e035c3d093f0b11fe0fcd4880c296707fd9a44eb725d294f117a9b8d6e804a66e55a478954cc9a838670b4b50027ebead8f6cd35546c761b58d00678f71d55bbbf66f79351cbb4919c76a184d1d69a0b9269955c061e998048fd4134a5a80f1cdc62b7fc50fdd4a4637ae59937378d06aab9d7781f4ff27893a9da19dc19791f86e6791f17df35d97802044648965278231357464bc8ac5fbafd48676a49fea8af5d89963fa66511cab2f238cc6ce7b240fd8ff4216aea73ae8ad70570e9bf7650bdba79db7cb112796bc1dfd6f088cd2196a3f1a9b50af6f1f28ff7e59073d740a7b931678312362115652c9581b714d56a006c0d3f6358d6ea6d2aec37cf8c964fd3a7d03cc122d60f438634d6ddc267638743ade18b5ca95047ee712e87104b0f100b5c082c495e600eaf990e674d8bfc0a49516b0aeb904c0c264d75286df433bf972a22d0f136712da9b93639ae44358ac982d53cf9feb3b10400be8eaa957b8bab649550c6f550276150a604a2b9dec9f49d1cbdad3f6a6cfaa8eb94b79a82103087ffb979d194f21228df8c4c6e87380816f260a2eab89c71ac1d1f47f94d74bf5841ea35e963ad6eecda103ee24c27c920e4c1501910343225171dddbd6409c62ee9d6ea52fb43564cf26fed6fba832b22d6124eae3279f0efab3256fa44927ceef272332b784cfab05d2e5df6e9360b2eae44375811a73a439ce7446bb2c5c28ee17a6baf1f8cc9be4f170d8f9498a39a781363e1cbc202c32615938e9d000124507a01efa1ebfa07a5ef1a088b1f9336d0e5bfecb41e6ace16018f00399c788f9abfc255def55da308bbb41b49e81dc0c0b00236d5077d5d3fec19e408051db933f51df6d23cbd2e67c68b45da66fd098ee4624090de95e19a0ceafd00671dc037a0431ef41f6d2194d56cad67b7649cfe1a1249d70cea307d9a4cb2661b89d3cb84fc188b3c6e484628b1b18eaa7bddf2c233332a975216fcf6eda09a4877c6f58825cafea96c69b21ec89694dc281521626a932d15206fc512f5d4e9d99b0a58b08a50b279c1864124556a528bdd449a512c3173dfb644af06ddba808076b294bf0ee94a4973a62b4e2842faa6e62d795429f68724fdb27ec667cb490d731f4c8b8dcea2ab99f34cf43629328ea9b72e466cf47e98d18b7b7c30c1c1bc8617490606d551e1b3ec862ad6fa00a5a9b8f2f396acc208e19472945104eff0b85981e387117a5b3c533b02547c6c4bb3ff45909e6e3ec1aeecb578129a55e5c30636d843c24e4078a448e898e6084ab989cb2230902a1b6ce24902caa06cffe1876def50837681c520692cdf813c2f9d5f10c582b0ca903c2dd6f1be2d3c3a0f102eb8b7845a8be8f91b9fb0cb6a8fe69484a3c88f37f85257fe69b84aa6c56428cf9a33fe853f3dfffb12807d0cf1f08e6bfa9a42ed2425dea6891da3df12e31f2fd03a90dee2cc9155ede929e14aa15a74e4d81f1d7d6e8bc3080b8d4bc0d4d00363a72539dd71ef216b35224f752f4a329a3abf47929a4425a2ef7bbcae7c9b2a6271e44179492fb9d87319f7cdea345b805e187d8b254fd4cb9588bfc3338b325ea2b5398cc731ac7f24e69c928b316de4c452d47d1f6268ce90f17c6d70037a467f405a38c954dccf809dbae91c93ebf6c4f7e1b90f8ea5d8e8d18380d953488e770f8588be759dfe1e13888abfa2377026258bf4de050d8210e8875ae8d1542dbb55ed87bea4f4613698943a439ef490f94862f06c8206069cb033884f1d34c8c1bdafa419e72d6b1720010b616242e1e30b0b6f6fba9a48c4e69896c5bb126813267f5c6c6c06583aab4e5af0d6e16303652831f8c887428e8372591196e399aed7c98ae621a98c9fa06a74d6f6326ef6d43a594c3701173f1efbea7f88fabcebec380919dc687b0d42069af317ed5793e5c4f7bdf8369793f4996e7f7ff46a69a962f132509dfd0d902fa5f0ace05c5429da363f45f7134b6ef30fb2d8bcfab366fd6e706b579ff7c38025259e4ae63bfdd82bc444d10c91425941006599f2cb16d994a595b97cd2e9762d39cc46de3a3a18671c300aef020d0440e44086bf81a081c747190761ff7d333b5a2e61f39cf9179c74741c06fc8c7d5740797638534889da94b56b9eeda4fbec111b406558ecd81c8662e9f70b831fe392cf5193655a8cd190d9e67aca011636f5d6809518ddb6bb89435ec58577e65e6b1e8e99e75ef1102a1467380ef91258ee953aac29e5cf1be2e58a62d64665ce9ca590666d7c137759474982944c10eb78eb8295ffd8115ee8bf66861eec54eaba22e828e771c7908813e51fc0753e3ac8f463cd898726d17cf659a98a58510475f40f8781", 0x1000, r1) keyctl$read(0xb, r5, &(0x7f0000000500)=""/227, 0xe3) 08:00:16 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='securityfs\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f00000001c0)='>') write(r0, &(0x7f0000000440)="0ec534a2694b540ad64cf8fad0967e7f2adf70a1d3eb95677f8b6bc3325b268853c0c5cab4c266a3fe1f92a47dab2163029901087e28a7fd23caaf49d792798fca06472c497de469af396cdbdbe579aba6314e4af3d1b8cebcd8c2a173dc729b3da77c122947cb98d530ddc3694eae58cac0f6b1762e85c9874fda71285a34656839ef", 0x83) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000280)="ebf20749b97e728f15b9c7e4e21ffd8314b5ea8073ea6d7c0decd2d0b1f10741ece49cabd5cb70c520dffc1478875e7537ae8a5c61a761df5fa411d4098f871d844e0a723419d14e9e587460ea9b76519783264c3371f890defb68070cd86fb45ea6e997f5b999948d4a1a2d8bdd42fabbbb253e4769e4d77ef276638dbe32392686b26868359c9c110eb21496b38aaf466f238bc419b842e25fe35a8128c915adb183ff73afca40856c105933adf669ece5b9e237ba0a8461be2e90") ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) rename(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000040)={@rand_addr=0x64010102, @empty}, 0x8) ioctl$SG_IO(r1, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0xfe, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x40, 0x1, 0x4}, 0x18) fallocate(r1, 0x22, 0xffff, 0x80000000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r3, &(0x7f0000000080)='attr\x00') 08:00:16 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) copy_file_range(r1, &(0x7f0000000040)=0x40, 0xffffffffffffffff, &(0x7f0000000240)=0xfffffffffffffff7, 0xfff, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) syz_io_uring_setup(0x7a88, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r3, 0x0, &(0x7f00000003c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x7, 0x0, &(0x7f0000000340)="a48e489b5d4ebe15d23c854cef1a8bee0f50699b245a22c142b872d2a78820f91d89e371a2fcd5070b12cf1cfd583f58b12bb4720d56fe97e96877d62a6997348d0e51b816807b47fbb7f1d4bab989ad5a4769536221a589b0747782717301d65bb9117ffa6fced6f772dd72976ce7e42eb410be3720f51c7c34", 0x4, 0x0, 0x0, {0x3}}, 0x7) syz_io_uring_submit(r3, r2, &(0x7f00000018c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x2004, @fd_index=0x3, 0x6, &(0x7f00000003c0)=[{&(0x7f0000000280)="1b97e2bc0f9de85ba59457117e8b31bd792bc4bd2d027ecc54c077ebd35ccd3f4456cd55b74b8dc42e8c864f9a92cf705d73673d38e8cfeec98ee7aa3abd9ba24329a9e6ff1e5ec24f44097516b74b66b4fa5135ca6838ff1307dd9b645a808272333c45916fa34ace78b87f98fdec191685841acc8c4aef3c39e0a8b11c8ed4d060cd40860b50f877cce5cd5d11406c158ae0e7af5f934e39e9dc8d9e627ad30a03f911523e088cb84b859bef5a8dde90dda5cc37e86ba15ded6c66c6", 0xbd}, {&(0x7f0000000140)="5dc228c133a08076094cdf69a66f0229dd7987adfe4eab1c3b0d6020a8e6038ea637b8e3a1d204dd09987c74bde8e9b2", 0x30}, {&(0x7f0000000500)="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", 0xfd}, {&(0x7f0000000380)="1b8d21b37bd87f35a6a8c1de39d9ab", 0xf}, {&(0x7f0000000600)="add4e35103b915df7b5c0c4080293acd13755f2718fc2f034759f3a083235399cd7b128326678b7c1c313ec86a1e97432f9a1922821bbd8dd638de9d9e986c4f0dc80d72bb9505835a2b3c65b0e0b13724db6da4da9da9c3fac68e23e105557723938e8fc3da57f4a7ea88820b5b5e459654c34838f6809c1dff44383eb8a76cb4b0fb6a266ac109e735bedf2f7c2a517bbf208868b255ee31a90d09e9fd519e09e6352f0dc95c05099bb8c76354f99d889c836de4ab13e0fe9472b4ec0033b349fab224c2b270776549339c220086a0b3ebf724350d48bce39fcdfcc14490523d298c93151b721c", 0xe8}, {&(0x7f0000000700)="9ac73b4bc5700956c1ea5dd9a76b7d02d09029615a95ad6cc75e1a2401359f6f167f7731af544e32d1be6a7f7dcaabbace68415dda4d897fac0681a39e0570376d283022a245eab71fe4470f7180aad776814dc06a470ca3b29ff6d9a677880eec9aeccdbcc3a87c5628c3c94f2d118f7e36f94fe2ae285ee386e4d7384e5f8218ca1a6920b4293dc03363701a5768b58a98c2a67910a46b99aa3dc855509fbd33231615e9909b65db81dbf46242c12ce6a0", 0xb2}, {&(0x7f00000007c0)="7057492fd4852c5f60bda9564ec33889870452fe08763f881460e256f8a76c800c105d8f1924fbd3e0e005d5a40d271f80269acc4b39ca35d8d012738e8cac57f6ae6cff3f66a35086c2dee44e41eeb439282ddfd964d9a720b820d1c9fc8be836d510677070dbeba7ec2dbd72d4cf123e42b79e9fd792551f4c3e55d092e12d6b3fa297685fbe4a7a66a0bdd9af2f8eef15bacdc0102b453c16588b088e0cddbf1cf8865b2938b9694d41ef869cdae11dc2e522e8469e9b85b162bae661d47b91a6fa800f3da345ac39510fa8", 0xcd}, {&(0x7f00000008c0)="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", 0x1000}], 0x8, 0x4, 0x0, {0x2}}, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r4}}, 0x1) 08:00:16 executing program 1: [ 2360.041293] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2360.050660] FAULT_INJECTION: forcing a failure. [ 2360.050660] name failslab, interval 1, probability 0, space 0, times 0 syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000002d) 08:00:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) (fail_nth: 49) 08:00:16 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x2, [0x7a7, 0xbe8, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) 08:00:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb93"]) 08:00:16 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0xffffff7f, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:00:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb93"]) [ 2360.050684] CPU: 0 PID: 17777 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2360.050697] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2360.050703] Call Trace: [ 2360.050729] dump_stack+0x107/0x167 [ 2360.050750] should_fail.cold+0x5/0xa [ 2360.050772] ? bvec_alloc+0x148/0x2f0 [ 2360.050795] should_failslab+0x5/0x20 [ 2360.050814] kmem_cache_alloc+0x5b/0x310 [ 2360.050847] bvec_alloc+0x148/0x2f0 [ 2360.050870] bio_alloc_bioset+0x40a/0x600 [ 2360.050892] ? bvec_alloc+0x2f0/0x2f0 [ 2360.050915] ? iov_iter_npages+0x1fd/0xa70 [ 2360.050942] iomap_dio_bio_actor+0x518/0xef0 [ 2360.050994] iomap_dio_actor+0x36f/0x560 [ 2360.051034] iomap_apply+0x289/0x810 [ 2360.051062] ? iomap_dio_rw+0x90/0x90 [ 2360.051095] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2360.051143] ? mark_held_locks+0x9e/0xe0 [ 2360.051194] ? filemap_check_errors+0xa5/0x150 [ 2360.051228] __iomap_dio_rw+0x6cd/0x1110 [ 2360.051245] ? iomap_dio_rw+0x90/0x90 [ 2360.051285] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2360.051305] ? ext4_orphan_add+0x253/0x9e0 [ 2360.051324] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 2360.051346] ? ext4_empty_dir+0xae0/0xae0 [ 2360.051361] ? jbd2__journal_start+0xf3/0x7e0 [ 2360.051391] iomap_dio_rw+0x31/0x90 [ 2360.051413] ext4_file_write_iter+0xb26/0x18d0 [ 2360.051457] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2360.051475] ? kasan_save_stack+0x32/0x40 [ 2360.051492] ? kasan_save_stack+0x1b/0x40 [ 2360.051511] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2360.051529] ? iter_file_splice_write+0x16d/0xc30 [ 2360.051544] ? direct_splice_actor+0x10f/0x170 [ 2360.051560] ? splice_direct_to_actor+0x387/0x980 [ 2360.051575] ? do_splice_direct+0x1c4/0x290 [ 2360.051592] ? do_sendfile+0x553/0x1090 [ 2360.051609] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2360.051638] do_iter_readv_writev+0x476/0x750 [ 2360.051662] ? new_sync_write+0x660/0x660 [ 2360.051678] ? selinux_file_permission+0x92/0x520 [ 2360.051735] do_iter_write+0x191/0x670 [ 2360.051758] ? trace_hardirqs_on+0x5b/0x180 [ 2360.051787] vfs_iter_write+0x70/0xa0 [ 2360.051809] iter_file_splice_write+0x762/0xc30 [ 2360.051847] ? generic_splice_sendpage+0x140/0x140 [ 2360.051875] ? avc_policy_seqno+0x9/0x70 [ 2360.051892] ? selinux_file_permission+0x92/0x520 [ 2360.051919] ? lockdep_init_map_type+0x2c7/0x780 [ 2360.051943] ? generic_splice_sendpage+0x140/0x140 [ 2360.051964] direct_splice_actor+0x10f/0x170 [ 2360.051987] splice_direct_to_actor+0x387/0x980 [ 2360.052017] ? pipe_to_sendpage+0x380/0x380 [ 2360.052050] ? do_splice_to+0x160/0x160 [ 2360.052076] ? security_file_permission+0x24e/0x570 [ 2360.052109] do_splice_direct+0x1c4/0x290 [ 2360.052128] ? splice_direct_to_actor+0x980/0x980 [ 2360.052144] ? selinux_file_permission+0x92/0x520 [ 2360.052171] ? security_file_permission+0x24e/0x570 [ 2360.052204] do_sendfile+0x553/0x1090 [ 2360.052237] ? do_pwritev+0x270/0x270 [ 2360.052261] ? wait_for_completion_io+0x270/0x270 [ 2360.052283] ? rcu_read_lock_any_held+0x75/0xa0 [ 2360.052300] ? vfs_write+0x354/0xa70 [ 2360.052328] __x64_sys_sendfile64+0x1d1/0x210 [ 2360.052350] ? __ia32_sys_sendfile+0x220/0x220 [ 2360.052374] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2360.052392] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2360.052418] do_syscall_64+0x33/0x40 [ 2360.052435] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2360.052449] RIP: 0033:0x7f7d1dff4b19 [ 2360.052468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2360.052478] RSP: 002b:00007f7d1b56a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2360.052499] RAX: ffffffffffffffda RBX: 00007f7d1e107f60 RCX: 00007f7d1dff4b19 [ 2360.052510] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2360.052521] RBP: 00007f7d1b56a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2360.052533] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2360.052544] R13: 00007fff18b5369f R14: 00007f7d1b56a300 R15: 0000000000022000 [ 2360.057746] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2360.126476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.126537] print_req_error: 71 callbacks suppressed [ 2360.126557] blk_update_request: I/O error, dev sr0, sector 7 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2360.126719] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.126819] blk_update_request: I/O error, dev sr0, sector 263 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2360.129620] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.129683] blk_update_request: I/O error, dev sr0, sector 519 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2360.129834] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.129894] blk_update_request: I/O error, dev sr0, sector 775 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2360.131761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.131825] blk_update_request: I/O error, dev sr0, sector 1031 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2360.131984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.132071] blk_update_request: I/O error, dev sr0, sector 1287 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2360.132534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.132597] blk_update_request: I/O error, dev sr0, sector 1543 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2360.135006] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.231576] blk_update_request: I/O error, dev sr0, sector 1799 op 0x1:(WRITE) flags 0x0 phys_seg 32 prio class 0 [ 2360.239530] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 08:00:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb93"]) 08:00:17 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0xffffff9e, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:00:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x2, [0x7a7, 0xbe8, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) [ 2360.362112] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.363498] blk_update_request: I/O error, dev sr0, sector 2055 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2360.371979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.373498] blk_update_request: I/O error, dev sr0, sector 2311 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 08:00:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x4800, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000), 0x2) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a001, 0x0) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x7, @none, 0x1f, 0x2}, 0xe) [ 2360.401662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.418709] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2360.418947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.430685] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:00:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) (fail_nth: 50) [ 2360.466716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.480931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.482525] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 08:00:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936d"]) 08:00:17 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file1\x00', 0x120) pwrite64(r1, &(0x7f0000000480)="af", 0x1, 0x1000000) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0x78) fallocate(r0, 0x8, 0x0, 0x8000) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x24000, 0x0) sendfile(r2, r4, 0x0, 0x80000001) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x401, @rand_addr=' \x01\x00', 0xfff}}, 0x0, 0x0, 0x41, 0x0, "9034a65b1915727e9c1b78a9eaefb5dd3d05d4277dbfc01a8ebd6d6e5cc2bba5a6977b0582e4489bcabace4f15529a722bacc3cc5a349250b83a265b6bb2b4bb56793ce712f3a572398525d346607779"}, 0xd8) [ 2360.502945] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.522858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 08:00:17 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0xfffffff0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2360.573762] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.587121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.601902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.611647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.618535] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.619786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.632571] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2360.639129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.649557] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.652838] FAULT_INJECTION: forcing a failure. [ 2360.652838] name failslab, interval 1, probability 0, space 0, times 0 [ 2360.654880] CPU: 1 PID: 17917 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2360.656184] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2360.657594] Call Trace: [ 2360.658077] dump_stack+0x107/0x167 [ 2360.658787] should_fail.cold+0x5/0xa [ 2360.658852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.659438] ? create_object.isra.0+0x3a/0xa20 [ 2360.659465] should_failslab+0x5/0x20 [ 2360.659487] kmem_cache_alloc+0x5b/0x310 [ 2360.659518] create_object.isra.0+0x3a/0xa20 [ 2360.659540] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2360.659570] kmem_cache_alloc+0x159/0x310 [ 2360.659602] jbd2__journal_start+0x190/0x7e0 [ 2360.659637] __ext4_journal_start_sb+0x214/0x390 [ 2360.659669] ext4_file_write_iter+0x1138/0x18d0 [ 2360.659729] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2360.666901] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.666991] ? kasan_save_stack+0x32/0x40 [ 2360.669208] ? kasan_save_stack+0x1b/0x40 [ 2360.669899] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2360.670772] ? iter_file_splice_write+0x16d/0xc30 [ 2360.670895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.671660] ? direct_splice_actor+0x10f/0x170 [ 2360.671678] ? splice_direct_to_actor+0x387/0x980 [ 2360.671710] ? do_splice_direct+0x1c4/0x290 [ 2360.671731] ? do_sendfile+0x553/0x1090 [ 2360.671752] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2360.671786] do_iter_readv_writev+0x476/0x750 [ 2360.671814] ? new_sync_write+0x660/0x660 [ 2360.677919] ? selinux_file_permission+0x92/0x520 [ 2360.678756] do_iter_write+0x191/0x670 [ 2360.679463] ? trace_hardirqs_on+0x5b/0x180 [ 2360.680211] vfs_iter_write+0x70/0xa0 [ 2360.680848] iter_file_splice_write+0x762/0xc30 [ 2360.681624] ? generic_splice_sendpage+0x140/0x140 [ 2360.682447] ? avc_policy_seqno+0x9/0x70 [ 2360.682519] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.683159] ? selinux_file_permission+0x92/0x520 [ 2360.683194] ? lockdep_init_map_type+0x2c7/0x780 [ 2360.683222] ? generic_splice_sendpage+0x140/0x140 [ 2360.683246] direct_splice_actor+0x10f/0x170 [ 2360.683273] splice_direct_to_actor+0x387/0x980 [ 2360.688149] ? pipe_to_sendpage+0x380/0x380 [ 2360.688863] ? do_splice_to+0x160/0x160 [ 2360.689514] ? security_file_permission+0x24e/0x570 [ 2360.690320] do_splice_direct+0x1c4/0x290 [ 2360.691000] ? splice_direct_to_actor+0x980/0x980 [ 2360.691768] ? selinux_file_permission+0x92/0x520 [ 2360.692618] ? security_file_permission+0x24e/0x570 [ 2360.693625] do_sendfile+0x553/0x1090 [ 2360.694334] ? do_pwritev+0x270/0x270 [ 2360.694985] __x64_sys_sendfile64+0x1d1/0x210 [ 2360.695730] ? __ia32_sys_sendfile+0x220/0x220 [ 2360.696484] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2360.697346] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2360.698201] do_syscall_64+0x33/0x40 [ 2360.698460] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.698818] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2360.700036] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.700393] RIP: 0033:0x7f7d1dff4b19 [ 2360.700414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2360.700426] RSP: 002b:00007f7d1b56a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2360.706075] RAX: ffffffffffffffda RBX: 00007f7d1e107f60 RCX: 00007f7d1dff4b19 [ 2360.707260] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2360.708464] RBP: 00007f7d1b56a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2360.709647] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2360.710830] R13: 00007fff18b5369f R14: 00007f7d1b56a300 R15: 0000000000022000 [ 2360.718996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.722993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.733066] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.735039] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2360.743654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.754916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.765706] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.767562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.768970] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.784548] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.793982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.804589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.818500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.826696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.835576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.842697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.844003] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.852683] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.861540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.866760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.882514] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.899859] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.903273] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.930128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.931492] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.934463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.939325] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.941566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.942875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.944381] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.945572] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.947385] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.948693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.953443] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.958442] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.962267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.964630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.968150] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.971392] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.972219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.972991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.977915] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.978733] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.979751] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.980547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.981391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.982139] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.992323] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.993063] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.994001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.995056] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2360.995912] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.004616] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.005928] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.007788] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.009012] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.010143] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.013518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.017093] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.019365] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.021936] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.023097] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.025535] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.027894] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.029102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.032865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.034277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.035654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.037122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.038348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.039731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.041017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.042043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.043466] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.045115] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.046454] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.047610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.049061] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.050473] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.051735] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.053004] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.054408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.055617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.056968] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.058518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.059867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.061603] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.062781] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.063842] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.065030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.066374] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.067546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.068730] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.070006] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.071043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.072112] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.073414] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.074608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.075857] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.077050] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.078352] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.079614] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.080692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.082011] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.083272] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.084439] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.085701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.086820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.088194] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.089356] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.090395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.091451] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.092565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.093909] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.094964] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.096161] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.097580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.098652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.099638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.100660] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.101668] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.102804] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.105541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.106581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.107627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.108635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.109623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.110668] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.111639] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.112741] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.114130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.115230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.116430] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.117976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.119139] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.120450] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.121471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.122762] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.124049] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.125116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.126356] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.127578] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.128889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.135446] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.136765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.139447] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.142786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.145407] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.146663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.149523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.150767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.155386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.156696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.159509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.160842] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.164594] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.166157] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.170386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.171940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.173071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.174383] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.179437] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.182415] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.183568] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.186394] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.188651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.189799] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.193436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.194702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.199430] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.200937] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.204385] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.207742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.210557] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.211792] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.216396] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.217822] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.220433] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.223395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.226399] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.228386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.229912] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.234396] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.237441] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.238624] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.242475] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.243932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.248417] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.249891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.254516] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.256246] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.259393] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.260754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.264476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.265776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.270444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.271956] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.276663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.277913] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.282449] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.283991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.287627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.291409] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.292717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.296483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.298181] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.303439] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.305175] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.306629] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.312698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.316442] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.319429] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.320929] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.326442] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.328279] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.332706] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.334023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.339488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.341956] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.345509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.349451] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.350881] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.356431] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.357995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.359361] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.367431] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.368938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.371346] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.372635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.380443] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.381778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.384120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.385375] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.393444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.394768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.397272] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.398510] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.406379] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.407687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.410368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.414182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.432553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.434046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.436476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.439478] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.444520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.447932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.453020] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.454382] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.456941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.459052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.460944] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.462502] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.465170] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.466725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.468019] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.469348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.472445] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.473720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.475998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.477909] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.479480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.480709] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.482892] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.484088] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.485755] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.487318] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.488946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.491430] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.492936] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.494661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.496136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.497651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.500332] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.501711] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.503137] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.504512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.506511] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.507984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.509831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.511425] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.512677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.516615] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.518176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.519692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.520997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.522097] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.523240] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.524368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.525599] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.526728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.527857] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.528981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.530082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.531245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.532364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.533459] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.534669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.535821] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.536940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.538149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.539752] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.540917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.542065] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.543223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.544534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.545696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.546846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.548004] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.549164] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.550369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.551510] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.552662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.558435] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.559647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.560812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.561949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.563099] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.564304] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.565428] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.566544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.570463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.571651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.573247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.574401] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.575513] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.576673] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.578030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.579240] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.581395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.582026] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.582623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.583161] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.583721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.584327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.584864] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.585518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.586345] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.586888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.587474] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.588038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.588651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.589214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.589789] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.590334] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.594436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.594984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.597309] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.597849] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.598474] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.599001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.601302] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.601827] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.602459] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2361.603005] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 08:00:35 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000180)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') read(r2, &(0x7f00000002c0)=""/225, 0xe1) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x1274, 0x0) r5 = dup2(r1, r1) r6 = syz_io_uring_complete(0x0) r7 = io_uring_setup(0x1b36, &(0x7f0000000000)={0x0, 0xc7e7, 0x2, 0x0, 0x337, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="0184c55636c8d3000000b3c374ff9de4a70000", @ANYRES32=r7, @ANYBLOB="01000000000000002e2f66696c653000"]) write$binfmt_elf64(r5, &(0x7f00000007c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x2, 0x6, 0x0, 0xea5, 0x2, 0x3e, 0x1800, 0x0, 0x40, 0x31e, 0x6, 0x201, 0x38, 0x1, 0x1f32, 0x1, 0x100}, [{0x0, 0x3, 0x5, 0xff, 0xa0, 0xdd7, 0x1000000003, 0xffff}], "5563cd9a58df47eb7fe1862c4d6716e03dda73ad79bdf1e9a003bcf3986c50d4e8aa28c957fb3d2f3a377ec19cccee4be2003b4f8551fca880d37a4b11600af6227109e9493fb7702e12a94b4c79f4", ['\x00', '\x00', '\x00']}, 0x3c7) syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') clone3(&(0x7f0000000200)={0x451a6100, &(0x7f00000000c0), 0x0, &(0x7f0000000100), {0x16}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1}, 0x58) [ 2378.254114] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2378.271959] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:00:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936d"]) 08:00:35 executing program 0: perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x74c9ccf2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x100, 0x40) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r3) keyctl$read(0xb, r3, &(0x7f0000000340)=""/106, 0x6a) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2) r4 = request_key(&(0x7f0000000300)='blacklist\x00', &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000400)='%\x00', 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r4) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000140)) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) unshare(0x48020200) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000440)='\x00') 08:00:35 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x60103, 0x0) dup2(r0, r1) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000540)) fcntl$getownex(r1, 0x10, &(0x7f0000000500)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) sendfile(r3, r2, 0x0, 0x4000007ffffffc) eventfd(0x23f) io_submit(0x0, 0x1, &(0x7f0000000340)=[0x0]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x21e000, 0x88) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140)=""/106, 0x6a, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20010, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x100000001) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000080)=0x1000000000000007) 08:00:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000002e) 08:00:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) (fail_nth: 51) 08:00:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0xffffffff, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:00:35 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x2, [0x7a7, 0xbe8, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) [ 2378.368421] FAULT_INJECTION: forcing a failure. [ 2378.368421] name failslab, interval 1, probability 0, space 0, times 0 [ 2378.369890] CPU: 1 PID: 17946 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2378.370703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2378.371661] Call Trace: [ 2378.371981] dump_stack+0x107/0x167 [ 2378.372418] should_fail.cold+0x5/0xa [ 2378.372879] ? jbd2__journal_start+0x190/0x7e0 [ 2378.373420] should_failslab+0x5/0x20 [ 2378.373879] kmem_cache_alloc+0x5b/0x310 [ 2378.374356] jbd2__journal_start+0x190/0x7e0 [ 2378.374889] __ext4_journal_start_sb+0x214/0x390 [ 2378.375461] ext4_file_write_iter+0x1138/0x18d0 [ 2378.376033] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2378.376586] ? kasan_save_stack+0x32/0x40 [ 2378.377059] ? kasan_save_stack+0x1b/0x40 [ 2378.377568] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2378.378142] ? iter_file_splice_write+0x16d/0xc30 [ 2378.378709] ? direct_splice_actor+0x10f/0x170 [ 2378.379231] ? splice_direct_to_actor+0x387/0x980 [ 2378.379799] ? do_splice_direct+0x1c4/0x290 [ 2378.380309] ? do_sendfile+0x553/0x1090 [ 2378.380797] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2378.381333] do_iter_readv_writev+0x476/0x750 [ 2378.381866] ? new_sync_write+0x660/0x660 [ 2378.382341] ? selinux_file_permission+0x92/0x520 [ 2378.382925] do_iter_write+0x191/0x670 [ 2378.383375] ? trace_hardirqs_on+0x5b/0x180 [ 2378.383889] vfs_iter_write+0x70/0xa0 [ 2378.384339] iter_file_splice_write+0x762/0xc30 [ 2378.384914] ? generic_splice_sendpage+0x140/0x140 [ 2378.385500] ? avc_policy_seqno+0x9/0x70 [ 2378.385971] ? selinux_file_permission+0x92/0x520 [ 2378.386550] ? lockdep_init_map_type+0x2c7/0x780 [ 2378.387091] ? generic_splice_sendpage+0x140/0x140 [ 2378.387665] direct_splice_actor+0x10f/0x170 [ 2378.388197] splice_direct_to_actor+0x387/0x980 [ 2378.388751] ? pipe_to_sendpage+0x380/0x380 [ 2378.389247] ? do_splice_to+0x160/0x160 [ 2378.389722] ? security_file_permission+0x24e/0x570 [ 2378.390302] do_splice_direct+0x1c4/0x290 [ 2378.390794] ? splice_direct_to_actor+0x980/0x980 [ 2378.391346] ? selinux_file_permission+0x92/0x520 [ 2378.391936] ? security_file_permission+0x24e/0x570 [ 2378.392541] do_sendfile+0x553/0x1090 [ 2378.392991] ? do_pwritev+0x270/0x270 [ 2378.393441] ? wait_for_completion_io+0x270/0x270 [ 2378.394006] ? rcu_read_lock_any_held+0x75/0xa0 [ 2378.394552] ? vfs_write+0x354/0xa70 [ 2378.394984] __x64_sys_sendfile64+0x1d1/0x210 [ 2378.395508] ? __ia32_sys_sendfile+0x220/0x220 [ 2378.396040] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2378.396654] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2378.397241] do_syscall_64+0x33/0x40 [ 2378.397672] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2378.398252] RIP: 0033:0x7f7d1dff4b19 [ 2378.398691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2378.400816] RSP: 002b:00007f7d1b56a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2378.401691] RAX: ffffffffffffffda RBX: 00007f7d1e107f60 RCX: 00007f7d1dff4b19 [ 2378.402507] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2378.403310] RBP: 00007f7d1b56a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2378.404124] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2378.404963] R13: 00007fff18b5369f R14: 00007f7d1b56a300 R15: 0000000000022000 08:00:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0xf, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:00:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936d"]) [ 2378.433955] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 08:00:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x14, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:00:35 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001ac0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@initdev}}, 0x0) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) getegid() socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001c00210c000000000000000000000000050000000000000014000900fc020000000000000700000000000000080002002a5c3a00"], 0x38}}, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001a40)={r1, @multicast1, @multicast1}, 0xc) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x488000, 0x4e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000200)=ANY=[], 0x8) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="7f", 0x1}], 0x1}}], 0x2, 0x8080) preadv2(r2, &(0x7f0000000800)=[{&(0x7f0000000480)=""/164, 0xa4}, {&(0x7f0000000540)=""/255, 0xff}, {&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000100)=""/86, 0x56}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000000780)=""/6, 0x6}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/21, 0x15}, {&(0x7f0000001940)=""/236, 0xec}], 0x9, 0x1000, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000300)=""/180, 0xb4, 0x3ff) sendmsg$inet6(r3, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x1}, 0x0, {0x0, r4}}, 0xa5b) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) unshare(0x48020200) 08:00:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) (fail_nth: 52) 08:00:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x5f, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2378.851969] FAULT_INJECTION: forcing a failure. [ 2378.851969] name failslab, interval 1, probability 0, space 0, times 0 [ 2378.853889] CPU: 1 PID: 18072 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2378.854990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2378.856312] Call Trace: [ 2378.856740] dump_stack+0x107/0x167 [ 2378.857322] should_fail.cold+0x5/0xa [ 2378.857931] ? create_object.isra.0+0x3a/0xa20 [ 2378.858660] should_failslab+0x5/0x20 [ 2378.859266] kmem_cache_alloc+0x5b/0x310 [ 2378.859932] create_object.isra.0+0x3a/0xa20 [ 2378.860638] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2378.861451] kmem_cache_alloc+0x159/0x310 [ 2378.862120] jbd2__journal_start+0x190/0x7e0 [ 2378.862829] __ext4_journal_start_sb+0x214/0x390 [ 2378.863600] ext4_file_write_iter+0x1138/0x18d0 [ 2378.864367] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2378.865088] ? kasan_save_stack+0x32/0x40 [ 2378.865745] ? kasan_save_stack+0x1b/0x40 [ 2378.866405] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2378.867214] ? iter_file_splice_write+0x16d/0xc30 [ 2378.867986] ? direct_splice_actor+0x10f/0x170 [ 2378.868735] ? splice_direct_to_actor+0x387/0x980 [ 2378.869498] ? do_splice_direct+0x1c4/0x290 [ 2378.870180] ? do_sendfile+0x553/0x1090 [ 2378.870805] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2378.871558] do_iter_readv_writev+0x476/0x750 [ 2378.872270] ? new_sync_write+0x660/0x660 [ 2378.872928] ? selinux_file_permission+0x92/0x520 [ 2378.873707] do_iter_write+0x191/0x670 [ 2378.874330] ? trace_hardirqs_on+0x5b/0x180 [ 2378.875017] vfs_iter_write+0x70/0xa0 [ 2378.875632] iter_file_splice_write+0x762/0xc30 [ 2378.876386] ? generic_splice_sendpage+0x140/0x140 [ 2378.877181] ? avc_policy_seqno+0x9/0x70 [ 2378.877821] ? selinux_file_permission+0x92/0x520 [ 2378.878654] ? lockdep_init_map_type+0x2c7/0x780 [ 2378.879423] ? generic_splice_sendpage+0x140/0x140 [ 2378.880210] direct_splice_actor+0x10f/0x170 [ 2378.880901] splice_direct_to_actor+0x387/0x980 [ 2378.881635] ? pipe_to_sendpage+0x380/0x380 [ 2378.882331] ? do_splice_to+0x160/0x160 [ 2378.882955] ? security_file_permission+0x24e/0x570 [ 2378.883758] do_splice_direct+0x1c4/0x290 [ 2378.884416] ? splice_direct_to_actor+0x980/0x980 [ 2378.885161] ? selinux_file_permission+0x92/0x520 [ 2378.885921] ? security_file_permission+0x24e/0x570 [ 2378.886724] do_sendfile+0x553/0x1090 [ 2378.887335] ? do_pwritev+0x270/0x270 [ 2378.887952] ? wait_for_completion_io+0x270/0x270 [ 2378.888705] ? rcu_read_lock_any_held+0x75/0xa0 [ 2378.889429] ? vfs_write+0x354/0xa70 [ 2378.890017] __x64_sys_sendfile64+0x1d1/0x210 [ 2378.890728] ? __ia32_sys_sendfile+0x220/0x220 [ 2378.891441] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2378.892259] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2378.893062] do_syscall_64+0x33/0x40 [ 2378.893649] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2378.894440] RIP: 0033:0x7f7d1dff4b19 [ 2378.895027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2378.897851] RSP: 002b:00007f7d1b56a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2378.899029] RAX: ffffffffffffffda RBX: 00007f7d1e107f60 RCX: 00007f7d1dff4b19 [ 2378.900123] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2378.901229] RBP: 00007f7d1b56a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2378.902329] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2378.903430] R13: 00007fff18b5369f R14: 00007f7d1b56a300 R15: 0000000000022000 08:00:51 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0xfd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000300), 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x2, @private1, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000200)=0x1c, 0x81800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r4, 0x894a, &(0x7f0000006900)={'wlan0\x00', @ifru_data=0x0}) sendfile(r0, r4, &(0x7f0000000140)=0xb5, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x12, &(0x7f0000000240), &(0x7f00000002c0)=0x4) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) 08:00:51 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0xc0, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:00:51 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x3, 0x0, 0x32, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x46, 0x2, @perf_bp={&(0x7f0000000180), 0xf}, 0x6002, 0x243, 0x8, 0xcf24c163f5349e66, 0x2, 0x4, 0x4, 0x0, 0x6, 0x0, 0x2}, 0x0, 0x10, 0xffffffffffffffff, 0x1) getdents(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x894a, &(0x7f0000006900)={'wlan0\x00', @ifru_data=0x0}) fcntl$setlease(r0, 0x400, 0x2) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:00:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000002f) 08:00:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) (fail_nth: 1) [ 2395.030861] FAULT_INJECTION: forcing a failure. [ 2395.030861] name failslab, interval 1, probability 0, space 0, times 0 [ 2395.032934] CPU: 0 PID: 18189 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2395.034178] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2395.035665] Call Trace: [ 2395.036157] dump_stack+0x107/0x167 [ 2395.036819] should_fail.cold+0x5/0xa [ 2395.037516] ? __do_sys_memfd_create+0xfb/0x450 [ 2395.038366] should_failslab+0x5/0x20 [ 2395.039057] __kmalloc+0x72/0x390 [ 2395.039697] __do_sys_memfd_create+0xfb/0x450 [ 2395.040518] ? ksys_write+0x1a9/0x260 [ 2395.041209] ? memfd_file_seals_ptr+0x170/0x170 [ 2395.042057] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 08:00:51 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="67856f93ef03aaaaaaaaaabb91002b008100330008050104099731f296efc77c2db7ea22fcdb65f7e81d54a63549f315e4b2dd0af59dea0d41a8bf855c71d77d33975eb40000f14359d79585f8ac114aaae3530532089a16c847e3087d3f0fdb31d53450494d1e6f443b4871f3dfa4ee4e7bccced59fcd2ab006ec43a57c6789e9ba0dd6b91e6032241d6e547655a80b6ef54d1e1d100764a7652da7cdc5ffed2a89c08932b91b918634e2eaf954fcfb3ad63e7dbf8b94e47c3f2501052534dab5a0f1344a3bade9ff3bd67214ffbea25380f762b680bf186ff20f7c6f766b60b265d03adc9a37b8b034a36ff77f67457722853d69f8d1a2e5287c5085d321a25a7ca4887272ab147baa18023ebdd453300e8e42870d3cb1b0af0f82c8e56d614f104804f10afd0e2f59432fc8c9fb273adab4900b17eb1e52372254cebc0f4ae0fbc2db92c8b2471bd4690cdfff48f2e5547429c589d3b889637dd6e2a38037215367d91ae5aa3ab4ace46c6a285a9dfefa6908a588c943c93ff440ce89e93a1e6d9f9d9b9040063a971b9d23f7f6c750853bb8e8bb20ec8a8a6d986edb75af8c11367319cb11f5de4cef3b3e7486f218ffd042a9784f8bc040d581ea21e203bb8383ad96838be54645df869f5afd6cef0bd5281a9e058d"], 0x0) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) [ 2395.043013] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2395.044021] do_syscall_64+0x33/0x40 [ 2395.044703] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2395.045631] RIP: 0033:0x7f8b5799cb19 08:00:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) (fail_nth: 53) [ 2395.046304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2395.049618] RSP: 002b:00007f8b54f11f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2395.050981] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 00007f8b5799cb19 [ 2395.052297] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f8b579f60fb [ 2395.053575] RBP: 0000000000000004 R08: 0000000000002100 R09: ffffffffffffffff [ 2395.054853] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000 [ 2395.056134] R13: 0000000020000100 R14: 0000000000fffff0 R15: 0000000020000380 08:00:51 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x2, 0x0, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) lseek(r3, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x1100, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f000000b5c0)={@ipv4={""/10, ""/2, @private}, 0x0}, &(0x7f000000b600)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r6, 0x1, 0x0, 0x0, {0x17}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f000000bc00)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x0, @mcast1, 0x518c0}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000280)="da190c5309ca38e56cde30ae497cc1226dc8b6097ffab0f24f73e81e907de7eee09cb35772cf811f602428f885a6f91f68258734f16e73681e673d56ff94b808df186a0bc47274638ceb94ffaddfe53658dd422d745ef57608fb1aff7d98c6456f76ab2f59fe82f1cc7c17d40413fb2f09", 0x71}], 0x1, &(0x7f0000000440)=[@hoplimit={{0x14, 0x29, 0x34, 0x5}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x40}}, {{&(0x7f0000000480)={0xa, 0x4e23, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ff}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000500)="c78a0571d22b4fb6e4abeff3b2d6452b94278f66a6cb9cc7dd50233b29a9a328f6483bafad3d46dee40087110df591b63ef87f152272b2582c093ddcb02b36246542b55698e7eeeea175c583b99a6a036cc569f34a0de7f553ba3849d7a34be3a0a4232fbe98a32569f3392a42653e3d5124eaed63c3a6e9ea52e4935e912d58ecc3de25f7feaa86f62603341dc562cae904a2706144f8f253ed23998244fff9d8a5fb344331171bf9ab336ca52c2c66c60e11271aa34186c8019cc1641c5b029a977951f0bd", 0xc6}, {&(0x7f0000000600)="d9cc0b4b073818168632167a33a5e58a8ef457aa6249d785753358994027bd5142768f786b4c9ae051965069481ce917a091f5bf9af04b0188d5a820491a6cfde173863d72a4899465e5221eec013d8c06575141bf244b710e0ae1db0ce27bf6a3597d66e9ded3d08f499acd5279642bc0ecf6d862f45f8950f4181e490058d85bad6f07e363609fa7273b0743a4e06948100fe196fa7b4bf47a54ef8f70a1a11b509e628036c2d02ac12ccf41638e39fd6413444eb94707890a56cc9472ef66ac74515c149bad539cb52e99e01c3b03de15e4d1d11dd5996a2303948a3d7d994c0c8bbe0978f1684b0d199b", 0xec}, {&(0x7f0000000700)="afb2b413850f37f0d83b729d13aea3ef65ae37f59ea64a", 0x17}, {&(0x7f0000000740)="0e814c0abd9644b21f3c81f63792179977ff939108aaf985befe4ee90ddb7db297077b90b3da10bfcb686fac514bd1843fd165913732c536c0e99fa1fec2e401fe53c2fe7d2804904e77750b5c9f01cb3de4d1d97b90b9a8b29350d543b602b97fec29bcb425b2d03bbbdf4bfdd5598da07dba5c3f62f473d5070763d515bc5b26a1377acd9f8dcbc2c4a090aa2beb", 0x8f}], 0x4, &(0x7f0000000840)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x2e, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x3ff}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @hopopts={{0x168, 0x29, 0x36, {0x32, 0x29, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x10, 0x2, [0x957d, 0x9]}}, @ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0x334}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @generic={0x6, 0x94, "91d22bb80e1fb9598bbabc9f6481091da7a4a8dd4abb3f4c318e93815dc1aa5b5f3a56b27fcc8ceb53cc80bf0818967dae6b5895cb50cb052768df9ff9cd71ee1c210d1d90b6413b0c9d3376492021b88bddac4e4603742a7bc33d8ea9e02a8ac53290d0607876b76366c1439afc090b8cc36f08379fba94d89be5c644687aeb5bcf78c80a93e41b0bceb5990f62f84e2e4176fa"}, @padn={0x1, 0x1, [0x0]}, @pad1, @generic={0x8, 0x7f, "a514dfd231735923a57307140ce8559411960de67648f8f723171a03e28c4329668f2d146b1b36ba306f5051d9dfc3f04de4fe6e61b04fbc59c91318d21ac46e234010be9776e03da1e1b14996de0affefb772c49cd435a15a0ad316c506989764e930ec59f4a65c6a026fcdbc36c0821615eb8570fa63e12b8983dfe24668"}]}}}], 0x1c8}}, {{&(0x7f0000006a40)={0xa, 0x4e20, 0x740, @loopback, 0x6}, 0x1c, &(0x7f0000006ec0)=[{&(0x7f0000006a80)="28075afbd93677da54cf10e60202b7fe0e93d8ca1cc6225f2d5d5da2fde006f74a284bdab24ce3745673a1a2c2da1932e4236a5bc69684d5b65be25df3a2aaf4e3a9545ce927cd1ce41242ef3d88d7e737d4d5d8ac5a45c103b2b4443c30ce75cc56a2ae7ca2e279a1a6", 0x6a}, {&(0x7f0000006b00)="02df62ca865f45dd6f60958a802e35045f0f0150d6d8f417777802ce7bb8d4aa1eef9c2ae9f5a3619f7622548eb0cdf2a3256c7390d0990fc037ebb2fc3d6e83e87504db3814f22b8af5a1eed27cbdf669f7772e060a4fed85ce10ce6817fc2e9e6c94ff8eecaa0035c8356ce790e27fe12d4dee3f2322e5679738485748f4277324b7fa82b083edb4c1291f0eea66e3bca2f939f29db046f6f912e711d3d83bbf05cadd5ca508b70f637ae1a2c15b29bf65ddd787502c71c38805d97965d85ae4b5042cd97080796fc3ac4c1b6e47b652e2fa26bdca82a0c1273f3eef61a236370923ab032869b437254e3a05bfcb5f", 0xf0}, {&(0x7f0000006c00)="b4f5172d90f7685b8fe4a123425d7600812069c2c7710db7229fe08d638fad02dd1d5aa8b32b56fec71f120161bc6d2fbbaa6192b1b6dbfa0beb235d7c", 0x3d}, {&(0x7f0000006c40)="dc771a8337e3fc37ccafedeb23a423f2f95ee39d1acfc950822faaa9c619b3c6cfe1607dd2ca83c313dcef9ecb13f9adb86913a88364cfee3187f3f5a97de56f09290ab0e78edea860f6acc3734f42a6c4a5a28ae42902944154e40c6330aac4718f5b4c68b4f92aa40a69b9dfabc635dd54fd6b66e0065c0a363f154e3611ca8b5249c2a39c0245a29cc0ee624bc7c6d90a8faefed3c6894b4737435b192f5f171ec3df5750a80615b1ac", 0xab}, {&(0x7f0000006d00)="739507053c8a954a13b2833380a425f5a2312a06fe02a02c117a1e4aecc1cd1735fbd08cc034f4b25695b8ec869e044954c029cdfb1b0faae6632bc442a3677dc192254779203e38010d59a97c06a40bb151d910074bba7fd3c00c4ddb61e6536fa07fb24fc7dd7ca400", 0x6a}, {&(0x7f0000006d80)="291bf11aef489b0c5f3ffc486af65af79baba67c7e4c2f273dec33600e444112f3fdda154a84905e2a1ffb669d6aea5b9e13981a1058fecd6b4f5eb1333711c39f6698bbb537943fb14b1b15b4917fc268f4d93486fc868286d65e56e8fd21c86023d622f53be8a3ebf135f0d5c422326eb4baca115978fd4af76bd26f2c327e40cf9099b505fc2c7515960b0ee0943b5fb67fd129e2c8a1b1931979c715ff188fe75463ac87a4b683818f5dfbc3570bbb632ac07f8dd00fb61204a6f31cdfa6158033f50d8321b832f77cb8300f1ec4e182b94d81999a4d748ad257327f990cf8f64a78e74ff0ca19e1667740fcbb4cb33ead2e", 0xf4}, {&(0x7f0000006e80)='y', 0x1}], 0x7, &(0x7f0000006f40)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x67, 0x0, '\x00', [@ra={0x5, 0x2, 0x1}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x6c, 0x4, 0x2, 0x4, 0x0, [@rand_addr=' \x01\x00', @mcast2]}}}, @hopopts_2292={{0xa8, 0x29, 0x36, {0x3a, 0x11, '\x00', [@generic={0x37, 0x28, "2d564374b06b0ad1f5e62310e1fbf572898e47d7267b44f7877382054f4b967ee224fce643898bb5"}, @ra={0x5, 0x2, 0xfff}, @enc_lim={0x4, 0x1, 0xff}, @generic={0x60, 0x5a, "2169c5ecbf93741d84db5f4e90274fc024225cb817dceb9a29d43a6428e5d8d6143365d8f5f18f11365d5ba787119f182a4d63c4a19f8f614443b93d140a658d431dd27fb9f73bae8a410085101d6388eb6831036c59f175f54b"}]}}}], 0x100}}, {{&(0x7f0000007040)={0xa, 0x4e20, 0x8, @mcast1, 0x1}, 0x1c, &(0x7f0000008480)=[{&(0x7f0000007080)="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", 0x1000}, {&(0x7f0000008080)="5c8ab81a3418dd86e24ad9f6f9b97ac047033380919211b458f82ee1b93c849dc2f6d895d7ae508dfab85396d9745bb80c5830de09c529d3775845d790d22a61bab20017e6300f3d82403b0c9cd2c8a9b4383d0ce4acd34610c6dff515661e5e311a1017a0b997f94eed02043c77425ffd583ee927e980b259673cb65c521db667b17e186c706fed87b4a6597dea994a1659aca22cb5d2527b784b3a1e3b71e349642e30cecdb7287acb401d741d5a344b004cb1cf747a84139267655422236e66ea17e979352ac32eefd9c82d2b3efda93c1b2eba3d6997f6afcdeb87ee4bb8f960d55bd7669d3c873a4c", 0xeb}, {&(0x7f0000008180)="abc783ae22193cd162b3c6092f26efb509d39e7804bf417cecc246e1f03d1b75a7a8a80082492fb4d5550dd422daf45a05338dc2d9351e8d226038bdae57df7d8ef81baba5d32b1db95d84bf667bb38de0a7c487578ef658fba4eda0e7411725887053f3c1244d4856ef73eb6141f44b27436072b844ff9bc8eea469d08992e04a245829e8a78d67a86a5936641887155650679adc38a7f2eeb69e36f410fa3a57560efae09e0d34fd0236e07c87907ebfda0b6fddc0012bddc642abde", 0xbd}, {&(0x7f0000008240)="27b58f1ef500a1257ea4f8c65b74b71152589786e5ca3db7406f21b07a8db30e6ace7591b69720027702e8a76fa9fc1d6b2136082c53e0d05744b6c7e1ed863721b1b25bd6d43e8a3523ab200995a01d5e3d16237d2baadb7c23454f32115c844e6cad517c5bd24ead0054042fb1b305f7444f0a80ce74e1a3f6edb859d272103e870fe04ff443c86cb1752adb3c28b9c6d495dbfd3e5f8d4524763b97316aabb67726f84f1d8fe2", 0xa8}, {&(0x7f0000008300)="6ea5d535ec10e5fa0c0df63d2ace383a4ce25afa6e0c6f4793f349d7104f20e7d24b89c6167d0c1a30bfc055ddf5a223adcc3d8de2cd62a89778e6fdd0", 0x3d}, {&(0x7f0000008340)="e40e84e3259c12090f12c6cf1c717f", 0xf}, {&(0x7f0000008380)="195a59287313497bc26dd572ee8d22a1f30e070758cf9f3696ba381fcd92facb98ecfa704fb0d6700cb4bd6a9ad65e66d6dfd1c4d27ff4a9220790f0ffb78f00ec939668827be2aa5808b323d3bd01010028f71a6a16e08ba4a1f5b2afeeeb3d7db2fb52a93d63d44c9f256090b6adb4863380f2b457c43bf690fc11dcf02ecc5cdcf202a0806a393a0cde7999a5bba4e1c0bec938e7e43b265ae105f3ecc1f65ffad3804983b8f53a10c2410c2ea56187e6747e54f02ab8919a7ba432e42dacc04bdc94b8e57c563caa127fdb0d5d26d6b4ffa1993220c911d7f97188de952a2a06540f99b7bf04eadd0f3b", 0xec}], 0x7, &(0x7f0000008500)=[@dstopts_2292={{0x80, 0x29, 0x4, {0xef10ccacfe6c2fe, 0xc, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x0, 0x12, 0x0, 0x4, [0x5, 0x36b8, 0xfffffffffffffffc, 0x7, 0xe082, 0x40, 0xffff, 0x400, 0xc7]}}, @pad1, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @rthdr={{0x78, 0x29, 0x39, {0x3b, 0xc, 0x1, 0x80, 0x0, [@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x33}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}]}}}], 0xf8}}, {{&(0x7f0000008600)={0xa, 0x4e21, 0x68a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000008780)=[{&(0x7f0000008640)="39a8acbe190a64222f6087a82a18e2707b94bdb8", 0x14}, {&(0x7f0000008680)="04b014f557977d5810976d00e3a0158de6865b61b6be0b35e02ba66d868ae0477cf93613de5fc64220e4c3654bca1e4d086c94662f99e7f387b17981140cd944abe6b2bad152e3cc29a474b5fe63782334b2b5faba922b81e5b08a3a1eb5522afdb221abcc5b12ba5190fd12c0708add5e47314dfead4f70f1e41cd916648bae56abe9a2e6724a5165469141789ca1f3", 0x90}, {&(0x7f0000008740)="d133a0357ba5f26f63740ce7c40983ede04f5286ad4930e2df2762d3c984d699cc4d71ea94c7", 0x26}], 0x3}}, {{&(0x7f00000087c0)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c, &(0x7f0000008980)=[{&(0x7f0000008800)="efff5505c0a130e1d06f7a6ae0a7061b395970cd5def3063ece808b689844c6b5fe2ca8f1b5204c7cc2d37df306287d122324c865c2062596f6340f39c52730993d0024efb424d82c5751e9c", 0x4c}, {&(0x7f0000000a40)="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", 0x11b}], 0x2, &(0x7f00000089c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @dstopts={{0x28, 0x29, 0x37, {0x88, 0x2, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x6, 0x800}}, @pad1, @enc_lim={0x4, 0x1, 0x5}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x62, 0x4, 0x1, 0x5, 0x0, [@remote, @mcast1]}}}], 0x90}}, {{0x0, 0x0, &(0x7f0000008c00)=[{&(0x7f0000008a80)="35d06360d2c92dc02c4d2e57fff28f4c8dff40972437fc84ad4009049c0c408bc30ed58dd6e7d67c4361ccab00adf193f5be2e325a588b379d581e6eb88b764ed2d4f10ba734a283", 0x48}, {&(0x7f0000008b00)="c43209e3e9ef1266b1baf0fe5fd105f8a478df8f24620ae17d7ff46f97c9114a25dd030e9abc466e18b40fac9b61bb86c813e527df3d79fafd22e56b398766b073279bf0f6ce4ca69eb47764a26eac2e239403d089c35759ca0c342c47a207dca0f48ec8662c85a18fc49c920f1c54527951ed55a8b43712004c8654132804ce7f7f814e1cd60a943ee2cb4c279434d7b3166735b4f92149370264ed7bd4a20b24c1dec4d806d38bb3d6fa5ac31f76af2a44283d762c186c2ccccdf61ddd51d4e2d9f3abf7aabda286921f5089e08fa79dbb40e62b9f0109d4672786f7c6fac2ce7abaa8749bacf9148bc11fc65ea678549d", 0xf2}], 0x2, &(0x7f0000008c40)=ANY=[@ANYBLOB="880100000000000029000000360000009f2d000000000000010600000000000005020005079208de8d15d19d5bc8c0141f5ea742e63be4abe82755ca4ad995c97b1d3ae5ee68285ea6c02846b9efb1260ad2cc51cb37622da8ef2c09701f72540e705ed0310a9c3a6df89f936b379a02da00026b20d71455688919c320dc76bae3fc6c9e4279327e5fab62eb8d255b8ada5900ddd0f562e905886934a45f107d13c58cadb3502a6da65df3f880b916d5d5bc795a586d8fb3068cd18f693a2afa270feade14033788b3c5fe18aa5410281743d02bfd2388dedcdbda82296da926d2f7eec45570f4e2c62dbc21a6caf72427e70418bc215af8201b4c2628721975e5152982a1f1f165139c0298db8acce51a64507ce6fec746e849e96c92cce76f6feb7a9813ea93cf8666a588d331b62f8cd3a002c512554a9bd2c5b02b9e3306f5117182d0fe0001000738000000010c940300ff00000000000000fbffffffffffffff0600000000000000800f0000000000003b9d731f0000000005000000000000000000000000580000000000000029000000390000002c08020200000000fe80000000000000000000000000002c00000000000000000000000000000000ff020000000000000000000000000001fe8000000000000000000000000000aa68000000000000002900000039000000890a002000000000fc000000000000000000000000000001fc000000000000000000000000000001fc01000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb24000000000000002900000032000000fc000000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="000000001400020000000000290e0000c04b3e20de1487aa88365d8e"], 0x288}}, {{&(0x7f0000008f00)={0xa, 0x4e23, 0x9, @mcast1, 0x2}, 0x1c, &(0x7f000000a400)=[{&(0x7f0000008f40)="46701f077ca99d2f9b2b400e04ed4a1f4970c8007cfbb410dbc3c747c01900f8fe86901d4adc1ca498bd2cc25f3ec4922c12710db76473735e2d0360c8b95d553195a807294b091b455ea0406ad413ceb2ee25fc43efc530b424fadeee42296540261657f5f7279321c2d4257ecfe8a23e65742ba780cae8fd12f2d9f0bae0dac922ff63c5fb52c726844f9d22fc7662b2d6a1b92b26438a22fba3b9d3ccfa6f83e78e0b5bb610edfe6fb6f66b114c177d76994f38f565c22f5e1ef4037fe78d193a65c1c1b12ccd002fc23b6b43acda31052fe3d9d0bffebc420a2932bc731a88fe294a12663438af67e09850e3d0f227", 0xf1}, {&(0x7f0000009040)="86e6f696c260bd20e6b02bdaab9e0d93c38822519fed739d4ce334ec80f94991e12029e8bc6cbba9482ee7722f344fdc04b48368d6d9db719bd041173bcfb28e40d3bbf87f733f5630096597891ad7c77dac463aa11a4fa92ac0dd843d35ad642984442a379284c9b3844af8e4dc70c6ee3454d8ccb7bcd569ba2843c991a3fd55bc3d0fdd0a2e67f1653f578db9fd88153b4f504ea29ac50ba7ea6cae6924c4761b45ed99ec347a3c55026c73245872b8fc34ef3163c5ccc9a1a7a706dea08c57bb9922fb1d4e4c408635ed", 0xcc}, {&(0x7f0000009140)="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", 0x1000}, {&(0x7f000000a140)="cace63b98154cf286d17aed9f73f9060f47d267a805317426ab8415f6ebca73f11fa8342c5a94b94e69c0150c03e9be7fa551ec1dd2f89d8c8460d788f4281b904024b6439d77efacc8984559f2ebe3b5b09bfff4d3479349977b6ed51621124851e087df622bc99d8f87083b19f17b22eaabadae7f76537d173c6c1723e9647b2e220cd6a113d257632f55b7e0d3f8163d5e440d95b0d372a22aa20b1b3452d7b109ed4ae84be1cc9d844a6e80420d3d7ce55b12b37289795d63355d63bfea203302baa1d84cc6a95d54e2683a64e09170ed820d7962c", 0xd7}, {&(0x7f000000a240)="b804beb0a33b36ffbbca", 0xa}, {&(0x7f000000a280)="317a32763e2419f91c60263a46e3a48aa5c5a0acdf1804b28f65edaa6aee744ad74aa0903db5565f66b8636a17197035a72d0d9afe926f29588bcae79fcf4d7c66eb4ae94f25445e95d86229d43aeb3794d7600501a695803c61025bb8199b6586aeafc795f7baec359eb01d367f3cf9109cdbd3091337f7f0625a846101a6ba74a4974c9b93708dcfa00df98edec584ecb39675e7960bccb07ed0acaaa983372b9466a576f9a582e53fc91ff56b24b2c1158443add7642cf828afe755ee42706aefdb32c8af7b40fffc32b0c8d4f35c9f61c3eb27cfa3", 0xd7}, {&(0x7f000000a380)="673637f419ac392456217b20eb4378db38e8c7011dce5dd3b7c052f663265526ecbb960aac615ce19a4d6c0694f1e8995474bfec045030e4fbe8778382e3a7d91164be99fcc597e0d093af", 0x4b}], 0x7}}, {{&(0x7f000000a480)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f000000b580)=[{&(0x7f000000a4c0)="71f128cce1a49fe27e79e6cf339bc97a1d2187602f1a64745a029fd95dd87e21743c3e2a90e4db380e4f5ab018032391b70301699e8b4f6466274ab5cb49a497ec6e89d505b518e9252ce6f7bb573ab09eca2450be372a5a6a88b4e7352632f2c7069d918ad9335cff71a2df34b97a5e87e88b2d59cde91e7e4b99dae2db95a08802e8ae358968760ae1a6c9842ac0a0c51d05afa6ea918d3498d2479dc7e755e75d06421e2e59507dac", 0xaa}, {&(0x7f000000a580)="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", 0x1000}], 0x2, &(0x7f000000b640)=[@tclass={{0x14, 0x29, 0x43, 0x8}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r4}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x8, 0x8, 0x0, 0xfc, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @mcast2, @loopback]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}], 0xb0}}, {{&(0x7f000000b700)={0xa, 0x4e22, 0x13, @ipv4={'\x00', '\xff\xff', @local}, 0xffffff00}, 0x1c, &(0x7f000000bac0)=[{&(0x7f000000b740)="aef4405d3e4e1b52f6ffb779f10558e6276d496568a9484af9ea98c164d68aa082a7f92db692d6d2372851a2a3e906fa4e821bdd4a940ee5ad165a353179c216fa32768b74aae10f02ddae05a4ccc971c57dab323a743486532d1622851c9676492a33ed03d0bc6142e7fdcb37e8fdd405b735fccb15e303ec20ec7fd0e26e73324f644cbc679b23396d82b8d04e85ac641d78cc162414ddc2c7863784604d561d9fa69b13dbf0e89716777d388da4179bbd84b9649961c3f94312", 0xbb}, {&(0x7f000000b800)="4237ed50a77c704f58fafab22117e25b5011fa6ac27a0ad6132127d3ea3e6e2b79e8d01a0451264ee311bb3243eb1410343b96caa585757f61925924b13ff1da64e9c415463d0600314fd5533a9866cbeb377bbc65028939f49b7449574f2500e6f36cd4b28b60cf9df03e8b398cc8b45d61c7cf1141e5f45a29e80e3eb4a29fd77499f8414a6b2e1e5372ffee47b0df0e51df469c5dbd09b1747024b1db7510e28cc4a53274cdf344571371ce31bd2fa845543fdb38c49f5243a0cb0ba166af4358a01d8d6b783066bb96c0bf1b30f3b41f8bd81d41300cba18558eff0ca060687b5747ffdaf5014b58e6a27448ac6fd2b77af6774aac5c203dc509c5340b", 0xff}, {&(0x7f000000b900)="47a770c3bc01602b3eba130db5feb0daa1f16bd795430289e9b234e8167188152460ffdc8405a7510b7d7e50f36e263d45ac52ae0a7a40bcbdb6afe5fd8ba107d9", 0x41}, {&(0x7f000000b980)="b81922e141114e533dfc491af5ebab098440250e6d7885c3918c836f45782328bd00a43302b48ed4ce008ba3c7e45b87544c22a0aed9f1107ea45575b633b165cbe8920b75af0f2cfa487fcb3e52c2e62130797cf9d192d86f849bbc451fa3daabd85ba874279ea2e0cef709fa0d0b9b1d163e3e41ac32320747cf2bed4d6c92cb9b72896cf26eaf8a6da991dbbbfbd800861613d1f0f5f095f309ae51016391eb111cbdf50494a3d96ad12df8037a3a4e2a879f86fcc5f96443e61be1ade4", 0xbf}, {&(0x7f000000ba40)="bd6224c2d4fc1d08b841f87da33bd99f044c4b2a39e3f02472e32a063e273f30663bf66c6a05369b1ded329c2d160199e3691992b503b141c443ddec48658afb63d8d23534e872a1a33dc45e7f37581adc1b24544f15537f33376b9c671c58dc3b1fc18e90681ee19e", 0x69}], 0x5, &(0x7f000000bb40)=[@pktinfo={{0xfd53, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x2d}, r8}}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x8, 0xb, '\x00', [@padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x767}, @ra={0x5, 0x2, 0xfff7}, @calipso={0x7, 0x48, {0x2, 0x10, 0x20, 0x9, [0xfffffffffffffff7, 0xb, 0x80000001, 0x6, 0x3, 0x5, 0x9, 0x800]}}, @pad1]}}}], 0x98}}], 0xa, 0x20000000) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r3) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000c80)={0x4c, r9, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2c}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000) 08:00:51 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0xec0, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2395.096463] FAULT_INJECTION: forcing a failure. [ 2395.096463] name failslab, interval 1, probability 0, space 0, times 0 [ 2395.097514] CPU: 1 PID: 18193 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2395.098074] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2395.098750] Call Trace: [ 2395.098976] dump_stack+0x107/0x167 [ 2395.099279] should_fail.cold+0x5/0xa [ 2395.099593] ? jbd2__journal_start+0x190/0x7e0 [ 2395.099975] should_failslab+0x5/0x20 [ 2395.100296] kmem_cache_alloc+0x5b/0x310 [ 2395.100637] jbd2__journal_start+0x190/0x7e0 [ 2395.101006] __ext4_journal_start_sb+0x214/0x390 [ 2395.101396] ext4_file_write_iter+0x1138/0x18d0 [ 2395.101782] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2395.102154] ? kasan_save_stack+0x32/0x40 [ 2395.102495] ? kasan_save_stack+0x1b/0x40 [ 2395.102838] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2395.103251] ? iter_file_splice_write+0x16d/0xc30 [ 2395.103647] ? direct_splice_actor+0x10f/0x170 [ 2395.104014] ? splice_direct_to_actor+0x387/0x980 [ 2395.104417] ? do_splice_direct+0x1c4/0x290 [ 2395.104764] ? do_sendfile+0x553/0x1090 [ 2395.105091] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2395.105480] do_iter_readv_writev+0x476/0x750 [ 2395.105851] ? new_sync_write+0x660/0x660 [ 2395.106189] ? selinux_file_permission+0x92/0x520 [ 2395.106592] do_iter_write+0x191/0x670 [ 2395.106911] ? trace_hardirqs_on+0x5b/0x180 [ 2395.107268] vfs_iter_write+0x70/0xa0 [ 2395.107580] iter_file_splice_write+0x762/0xc30 [ 2395.107965] ? generic_splice_sendpage+0x140/0x140 [ 2395.108378] ? avc_policy_seqno+0x9/0x70 [ 2395.108708] ? selinux_file_permission+0x92/0x520 [ 2395.109109] ? lockdep_init_map_type+0x2c7/0x780 [ 2395.109496] ? generic_splice_sendpage+0x140/0x140 [ 2395.109901] direct_splice_actor+0x10f/0x170 [ 2395.110259] splice_direct_to_actor+0x387/0x980 [ 2395.110647] ? pipe_to_sendpage+0x380/0x380 [ 2395.110994] ? do_splice_to+0x160/0x160 [ 2395.111320] ? security_file_permission+0x24e/0x570 [ 2395.111733] do_splice_direct+0x1c4/0x290 [ 2395.112075] ? splice_direct_to_actor+0x980/0x980 [ 2395.112469] ? selinux_file_permission+0x92/0x520 [ 2395.112869] ? security_file_permission+0x24e/0x570 [ 2395.113285] do_sendfile+0x553/0x1090 [ 2395.113607] ? do_pwritev+0x270/0x270 [ 2395.113923] ? wait_for_completion_io+0x270/0x270 [ 2395.114314] ? rcu_read_lock_any_held+0x75/0xa0 [ 2395.114692] ? vfs_write+0x354/0xa70 [ 2395.114995] __x64_sys_sendfile64+0x1d1/0x210 [ 2395.115363] ? __ia32_sys_sendfile+0x220/0x220 [ 2395.115737] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2395.116168] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2395.116589] do_syscall_64+0x33/0x40 [ 2395.116893] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2395.117305] RIP: 0033:0x7f7d1dff4b19 [ 2395.117607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2395.119057] RSP: 002b:00007f7d1b56a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2395.119677] RAX: ffffffffffffffda RBX: 00007f7d1e107f60 RCX: 00007f7d1dff4b19 [ 2395.120268] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2395.120846] RBP: 00007f7d1b56a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2395.121427] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2395.122001] R13: 00007fff18b5369f R14: 00007f7d1b56a300 R15: 0000000000022000 08:00:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) (fail_nth: 2) [ 2395.163041] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 08:00:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x33fe0, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2395.232159] FAULT_INJECTION: forcing a failure. [ 2395.232159] name failslab, interval 1, probability 0, space 0, times 0 [ 2395.234019] CPU: 0 PID: 18310 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2395.235132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2395.236473] Call Trace: [ 2395.236907] dump_stack+0x107/0x167 [ 2395.237502] should_fail.cold+0x5/0xa [ 2395.238123] ? create_object.isra.0+0x3a/0xa20 [ 2395.238862] should_failslab+0x5/0x20 [ 2395.239481] kmem_cache_alloc+0x5b/0x310 [ 2395.240153] create_object.isra.0+0x3a/0xa20 [ 2395.240864] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2395.241685] __kmalloc+0x16e/0x390 [ 2395.242276] __do_sys_memfd_create+0xfb/0x450 [ 2395.243000] ? ksys_write+0x1a9/0x260 [ 2395.243617] ? memfd_file_seals_ptr+0x170/0x170 08:00:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x2000001c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2395.244390] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2395.245336] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2395.246170] do_syscall_64+0x33/0x40 [ 2395.246771] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2395.247591] RIP: 0033:0x7f8b5799cb19 [ 2395.248208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2395.251129] RSP: 002b:00007f8b54f11f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2395.252352] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 00007f8b5799cb19 [ 2395.253484] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f8b579f60fb [ 2395.254617] RBP: 0000000000000004 R08: 0000000000002100 R09: ffffffffffffffff [ 2395.255747] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000 [ 2395.256886] R13: 0000000020000100 R14: 0000000000fffff0 R15: 0000000020000380 08:00:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x7ffff000, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:00:52 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000200)=0x800033e0, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000100)=0x4, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x3}, 0x1c) sendfile(r1, r0, 0x0, 0x73c54e3e) 08:00:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0xfffffdef, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:00:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) (fail_nth: 54) [ 2395.425433] FAULT_INJECTION: forcing a failure. [ 2395.425433] name failslab, interval 1, probability 0, space 0, times 0 [ 2395.426429] CPU: 1 PID: 18428 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2395.426994] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2395.427664] Call Trace: [ 2395.427893] dump_stack+0x107/0x167 [ 2395.428203] should_fail.cold+0x5/0xa [ 2395.428516] ? create_object.isra.0+0x3a/0xa20 [ 2395.428887] should_failslab+0x5/0x20 [ 2395.429195] kmem_cache_alloc+0x5b/0x310 [ 2395.429529] ? igrab+0xc0/0xc0 [ 2395.429785] create_object.isra.0+0x3a/0xa20 [ 2395.430144] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2395.430559] __kmalloc+0x16e/0x390 [ 2395.430862] iter_file_splice_write+0x16d/0xc30 [ 2395.431240] ? atime_needs_update+0x600/0x600 [ 2395.431617] ? generic_splice_sendpage+0x140/0x140 [ 2395.432012] ? pipe_to_user+0x170/0x170 [ 2395.432344] ? _cond_resched+0x12/0x80 [ 2395.432668] ? avc_policy_seqno+0x9/0x70 [ 2395.432997] ? selinux_file_permission+0x92/0x520 [ 2395.433401] ? lockdep_init_map_type+0x2c7/0x780 [ 2395.433783] ? generic_splice_sendpage+0x140/0x140 [ 2395.434185] direct_splice_actor+0x10f/0x170 [ 2395.434544] splice_direct_to_actor+0x387/0x980 [ 2395.434929] ? pipe_to_sendpage+0x380/0x380 [ 2395.435280] ? do_splice_to+0x160/0x160 [ 2395.435604] ? security_file_permission+0x24e/0x570 [ 2395.436017] do_splice_direct+0x1c4/0x290 [ 2395.436364] ? splice_direct_to_actor+0x980/0x980 [ 2395.436754] ? selinux_file_permission+0x92/0x520 [ 2395.437153] ? security_file_permission+0x24e/0x570 [ 2395.437568] do_sendfile+0x553/0x1090 [ 2395.437890] ? do_pwritev+0x270/0x270 [ 2395.438203] ? wait_for_completion_io+0x270/0x270 [ 2395.438601] ? rcu_read_lock_any_held+0x75/0xa0 [ 2395.438978] ? vfs_write+0x354/0xa70 [ 2395.439290] __x64_sys_sendfile64+0x1d1/0x210 [ 2395.439653] ? __ia32_sys_sendfile+0x220/0x220 [ 2395.440032] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2395.440463] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2395.440883] do_syscall_64+0x33/0x40 [ 2395.441191] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2395.441607] RIP: 0033:0x7f7d1dff4b19 [ 2395.441914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2395.443392] RSP: 002b:00007f7d1b56a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2395.444016] RAX: ffffffffffffffda RBX: 00007f7d1e107f60 RCX: 00007f7d1dff4b19 [ 2395.444599] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2395.445173] RBP: 00007f7d1b56a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2395.445745] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2395.446315] R13: 00007fff18b5369f R14: 00007f7d1b56a300 R15: 0000000000022000 08:00:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) (fail_nth: 3) 08:00:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20000, 0xd, &(0x7f0000000340)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="0000000072724161120000000b000000000000000000000000000000000055aa", 0x20, 0x2}, {&(0x7f0000010300)="601c6d6b646f736689254300080120000400004000f80000200040000300000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x10800}, {&(0x7f0000010600)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x11000}, {&(0x7f0000010700)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x11800}, {&(0x7f0000010800)="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", 0x120, 0x12000}, {&(0x7f0000010a00)="2e20202020202020202020100063e870325132510000e87032510300000000002e2e202020202020202020100063e870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200063e870325132510000e870325104001a040000", 0x80, 0x12800}, {&(0x7f0000010b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x13000}, {&(0x7f0000011000)='syzkallers\x00'/32, 0x20, 0x13800}, {&(0x7f0000011100)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x167fd}], 0x0, &(0x7f0000011200)) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2000, 0x40) 08:00:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x302, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2395.548041] FAULT_INJECTION: forcing a failure. [ 2395.548041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2395.550154] CPU: 0 PID: 18435 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2395.551289] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2395.552616] Call Trace: [ 2395.553051] dump_stack+0x107/0x167 [ 2395.553644] should_fail.cold+0x5/0xa [ 2395.554270] _copy_from_user+0x2e/0x1b0 08:00:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000030) [ 2395.554916] __do_sys_memfd_create+0x16d/0x450 08:00:52 executing program 5: ftruncate(0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000980)=ANY=[@ANYBLOB="280000000301010200000000000000a0f2a8b34a2a48ae7ff63291c599c3c1000c0000000800048004001180080008400000002104001880b5cefecf7d50ba047faa33672684bc553c5b8287ee1db5a20c1a21be6bcaf8ff135b0b3371fe9c786b434727a83b2d8b7fd3ca8cdbec40b14c3fa032d695b10dc44f9dfd174fa8e613629d923bd819907d2bdfd4c92d"], 0x28}}, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r1, 0xee01, 0xee00) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', 0x0, 0xa}) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', r3) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) request_key(&(0x7f00000008c0)='logon\x00', &(0x7f0000000900)={'syz', 0x2}, &(0x7f0000000940)='$*$\\^+\x00', 0x0) request_key(&(0x7f00000003c0)='id_legacy\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='HL\x00', r2) add_key$keyring(&(0x7f0000000140), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000400)={'HL\x00'}, &(0x7f0000000600)=0x1e) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x6, 0x151180) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f00000005c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) preadv(r4, &(0x7f0000001c40)=[{&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000740)=""/20, 0x14}, {&(0x7f0000000780)=""/27, 0x1b}, {&(0x7f00000007c0)=""/150, 0x96}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/219, 0xdb}], 0x6, 0x10000005, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2395.555740] ? memfd_file_seals_ptr+0x170/0x170 [ 2395.556529] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2395.557378] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2395.558218] do_syscall_64+0x33/0x40 [ 2395.558819] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2395.559643] RIP: 0033:0x7f8b5799cb19 [ 2395.560253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2395.563183] RSP: 002b:00007f8b54f11f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2395.564414] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 00007f8b5799cb19 [ 2395.565555] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f8b579f60fb [ 2395.566700] RBP: 0000000000000004 R08: 0000000000002100 R09: ffffffffffffffff [ 2395.567848] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000 [ 2395.568991] R13: 0000000020000100 R14: 0000000000fffff0 R15: 0000000020000380 [ 2395.589536] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 08:00:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x305, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2395.607177] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2395.608862] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:00:52 executing program 2: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/147, 0x93}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f00000002c0)=""/46, 0x2e}], 0x8, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='fd/3\x00') r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x90, r2, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x8927, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="0c00e200", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) rt_sigaction(0x17, 0x0, &(0x7f000000b240)={0x0, 0x0, 0x0}, 0x8, &(0x7f000000b280)) fallocate(r7, 0x0, 0x0, 0x1000002) [ 2395.651309] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 08:00:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x308, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:00:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) 08:00:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x325, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2395.711348] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2395.716597] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:00:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x35f, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2395.749516] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2395.751371] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:01:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) (fail_nth: 55) 08:01:06 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="67856f93ef03aaaaaaaaaabb91002b008100330008050104099731f296efc77c2db7ea22fcdb65f7e81d54a63549f315e4b2dd0af59dea0d41a8bf855c71d77d33975eb40000f14359d79585f8ac114aaae3530532089a16c847e3087d3f0fdb31d53450494d1e6f443b4871f3dfa4ee4e7bccced59fcd2ab006ec43a57c6789e9ba0dd6b91e6032241d6e547655a80b6ef54d1e1d100764a7652da7cdc5ffed2a89c08932b91b918634e2eaf954fcfb3ad63e7dbf8b94e47c3f2501052534dab5a0f1344a3bade9ff3bd67214ffbea25380f762b680bf186ff20f7c6f766b60b265d03adc9a37b8b034a36ff77f67457722853d69f8d1a2e5287c5085d321a25a7ca4887272ab147baa18023ebdd453300e8e42870d3cb1b0af0f82c8e56d614f104804f10afd0e2f59432fc8c9fb273adab4900b17eb1e52372254cebc0f4ae0fbc2db92c8b2471bd4690cdfff48f2e5547429c589d3b889637dd6e2a38037215367d91ae5aa3ab4ace46c6a285a9dfefa6908a588c943c93ff440ce89e93a1e6d9f9d9b9040063a971b9d23f7f6c750853bb8e8bb20ec8a8a6d986edb75af8c11367319cb11f5de4cef3b3e7486f218ffd042a9784f8bc040d581ea21e203bb8383ad96838be54645df869f5afd6cef0bd5281a9e058d"], 0x0) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) 08:01:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(r0, &(0x7f0000000180)='.\x00', 0x801, 0x100) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xb80, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0xca}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) close(r2) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000200), &(0x7f0000000240), 0x2, 0x2) close(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x128) copy_file_range(r3, 0x0, r1, 0x0, 0x200f5ef, 0x0) 08:01:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000031) 08:01:06 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x369, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:01:06 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000001) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x1, 0x6, 0x8, 0x4, 0x0, 0x8ec000000, 0x1028, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_config_ext={0x1, 0x93}, 0x2208, 0x9, 0x7f, 0x4, 0x0, 0xfffffff8, 0x4, 0x0, 0x8d, 0x0, 0xffff}, 0x0, 0x9, r0, 0xc) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500), 0x4) syz_emit_ethernet(0x77, &(0x7f00000002c0)={@multicast, @empty, @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@x25={0x805, {0x0, 0x9, 0xf, "3e5f889d3ecd57066033d1749645f05b514659fe91edf9841406ab22b6bdb76956019d1c7f387d8257ae2863e3117d9df80f7a8d55ff1aa508b0948cc7afb5e9bd2d43"}}}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) fsync(r2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x800) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@version_L}]}}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) dup2(0xffffffffffffffff, r3) socket$inet6_udplite(0xa, 0x2, 0x88) 08:01:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) (fail_nth: 4) 08:01:06 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_team\x00', &(0x7f0000001280)=@ethtool_rxnfc={0x2d, 0x12, 0x3f, {0xd, @usr_ip4_spec={@local, @loopback, 0x6, 0x1f, 0x1, 0x20}, {0x0, @empty, 0x2, 0x1ff, [0x3, 0x9c2]}, @esp_ip6_spec={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe7a}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x8, 0xd225, [0x9, 0x100]}, 0x1f, 0xb7}, 0x2, [0x6, 0x7]}}) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000140)=""/195, &(0x7f0000000000)=0xc3) syz_emit_ethernet(0x1012, &(0x7f0000000240)={@local, @remote, @void, {@llc_tr={0x11, {@llc={0x2, 0x1, "94bb", "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"}}}}}, 0x0) [ 2409.565329] FAULT_INJECTION: forcing a failure. [ 2409.565329] name failslab, interval 1, probability 0, space 0, times 0 [ 2409.567592] CPU: 1 PID: 18580 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2409.568792] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2409.570160] Call Trace: [ 2409.570615] dump_stack+0x107/0x167 [ 2409.571234] should_fail.cold+0x5/0xa [ 2409.571886] ? shmem_alloc_inode+0x18/0x40 [ 2409.572602] should_failslab+0x5/0x20 [ 2409.573249] kmem_cache_alloc+0x5b/0x310 [ 2409.573938] ? shmem_destroy_inode+0x70/0x70 [ 2409.574678] shmem_alloc_inode+0x18/0x40 [ 2409.575360] ? shmem_destroy_inode+0x70/0x70 [ 2409.576096] alloc_inode+0x63/0x240 [ 2409.576714] new_inode+0x23/0x250 [ 2409.577299] shmem_get_inode+0x15e/0xbc0 [ 2409.577990] __shmem_file_setup+0xb8/0x320 [ 2409.578699] ? _copy_from_user+0xfb/0x1b0 [ 2409.579402] __do_sys_memfd_create+0x275/0x450 [ 2409.580167] ? memfd_file_seals_ptr+0x170/0x170 [ 2409.580962] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2409.581836] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2409.582707] do_syscall_64+0x33/0x40 [ 2409.583334] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2409.584191] RIP: 0033:0x7f8b5799cb19 [ 2409.584822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2409.587846] RSP: 002b:00007f8b54f11f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2409.589106] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 00007f8b5799cb19 [ 2409.590279] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f8b579f60fb [ 2409.591449] RBP: 0000000000000004 R08: 0000000000002100 R09: ffffffffffffffff [ 2409.592620] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000 [ 2409.593789] R13: 0000000020000100 R14: 0000000000fffff0 R15: 0000000020000380 [ 2409.594539] 9pnet: Insufficient options for proto=fd [ 2409.598518] FAULT_INJECTION: forcing a failure. [ 2409.598518] name failslab, interval 1, probability 0, space 0, times 0 [ 2409.600466] CPU: 1 PID: 18569 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2409.601612] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2409.602987] Call Trace: [ 2409.603430] dump_stack+0x107/0x167 [ 2409.604046] should_fail.cold+0x5/0xa [ 2409.604692] ? jbd2__journal_start+0x190/0x7e0 [ 2409.605467] should_failslab+0x5/0x20 [ 2409.606102] kmem_cache_alloc+0x5b/0x310 [ 2409.606789] jbd2__journal_start+0x190/0x7e0 [ 2409.607530] __ext4_journal_start_sb+0x214/0x390 [ 2409.608332] ext4_dirty_inode+0xbc/0x130 [ 2409.609009] ? ext4_setattr+0x2160/0x2160 [ 2409.609698] __mark_inode_dirty+0x492/0xd40 [ 2409.610420] generic_update_time+0x21c/0x370 [ 2409.611155] file_update_time+0x43a/0x520 [ 2409.611842] ? evict_inodes+0x420/0x420 [ 2409.612523] ? down_write_killable+0x180/0x180 [ 2409.613283] file_modified+0x7d/0xa0 [ 2409.613906] ext4_file_write_iter+0x906/0x18d0 [ 2409.614679] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2409.615436] ? kasan_save_stack+0x32/0x40 [ 2409.616120] ? kasan_save_stack+0x1b/0x40 [ 2409.616819] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2409.617656] ? iter_file_splice_write+0x16d/0xc30 [ 2409.618451] ? direct_splice_actor+0x10f/0x170 [ 2409.619203] ? splice_direct_to_actor+0x387/0x980 [ 2409.619997] ? do_splice_direct+0x1c4/0x290 [ 2409.620716] ? do_sendfile+0x553/0x1090 [ 2409.621373] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2409.622151] do_iter_readv_writev+0x476/0x750 [ 2409.622249] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2409.622895] ? new_sync_write+0x660/0x660 [ 2409.622917] ? selinux_file_permission+0x92/0x520 [ 2409.625171] do_iter_write+0x191/0x670 [ 2409.625823] ? trace_hardirqs_on+0x5b/0x180 [ 2409.626546] vfs_iter_write+0x70/0xa0 [ 2409.627186] iter_file_splice_write+0x762/0xc30 [ 2409.627966] ? generic_splice_sendpage+0x140/0x140 [ 2409.628787] ? avc_policy_seqno+0x9/0x70 [ 2409.629451] ? selinux_file_permission+0x92/0x520 [ 2409.630248] ? lockdep_init_map_type+0x2c7/0x780 [ 2409.631026] ? generic_splice_sendpage+0x140/0x140 [ 2409.631829] direct_splice_actor+0x10f/0x170 [ 2409.632558] splice_direct_to_actor+0x387/0x980 [ 2409.633326] ? pipe_to_sendpage+0x380/0x380 [ 2409.634040] ? do_splice_to+0x160/0x160 [ 2409.634697] ? security_file_permission+0x24e/0x570 [ 2409.635526] do_splice_direct+0x1c4/0x290 [ 2409.636185] ? splice_direct_to_actor+0x980/0x980 [ 2409.636980] ? selinux_file_permission+0x92/0x520 [ 2409.637780] ? security_file_permission+0x24e/0x570 [ 2409.638610] do_sendfile+0x553/0x1090 [ 2409.639255] ? do_pwritev+0x270/0x270 [ 2409.639884] ? wait_for_completion_io+0x270/0x270 [ 2409.640667] ? rcu_read_lock_any_held+0x75/0xa0 [ 2409.641424] ? vfs_write+0x354/0xa70 [ 2409.642048] __x64_sys_sendfile64+0x1d1/0x210 [ 2409.642783] ? __ia32_sys_sendfile+0x220/0x220 [ 2409.643540] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2409.644400] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2409.645253] do_syscall_64+0x33/0x40 [ 2409.645862] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2409.646696] RIP: 0033:0x7f7d1dff4b19 [ 2409.647306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2409.650280] RSP: 002b:00007f7d1b56a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2409.651504] RAX: ffffffffffffffda RBX: 00007f7d1e107f60 RCX: 00007f7d1dff4b19 [ 2409.652664] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2409.653822] RBP: 00007f7d1b56a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2409.654962] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2409.656114] R13: 00007fff18b5369f R14: 00007f7d1b56a300 R15: 0000000000022000 [ 2409.698098] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2409.703568] 9pnet: Insufficient options for proto=fd 08:01:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) (fail_nth: 5) 08:01:06 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x6, @private0, 0x80}}}, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') write$binfmt_script(r4, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r5, 0x894a, &(0x7f0000006900)={'wlan0\x00', @ifru_data=0x0}) fsetxattr$security_evm(r5, &(0x7f00000000c0), &(0x7f00000001c0)=@ng={0x4, 0x5, "5339fb94"}, 0x6, 0x0) [ 2409.900541] FAULT_INJECTION: forcing a failure. [ 2409.900541] name failslab, interval 1, probability 0, space 0, times 0 [ 2409.902736] CPU: 1 PID: 18705 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2409.903998] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2409.905527] Call Trace: [ 2409.906037] dump_stack+0x107/0x167 [ 2409.906749] should_fail.cold+0x5/0xa [ 2409.907406] ? create_object.isra.0+0x3a/0xa20 [ 2409.908233] should_failslab+0x5/0x20 [ 2409.908976] kmem_cache_alloc+0x5b/0x310 [ 2409.909745] create_object.isra.0+0x3a/0xa20 [ 2409.910518] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2409.911482] kmem_cache_alloc+0x159/0x310 [ 2409.912236] ? shmem_destroy_inode+0x70/0x70 [ 2409.913039] shmem_alloc_inode+0x18/0x40 [ 2409.913813] ? shmem_destroy_inode+0x70/0x70 [ 2409.914620] alloc_inode+0x63/0x240 [ 2409.915283] new_inode+0x23/0x250 [ 2409.915944] shmem_get_inode+0x15e/0xbc0 [ 2409.916779] __shmem_file_setup+0xb8/0x320 [ 2409.917534] ? _copy_from_user+0xfb/0x1b0 [ 2409.918214] __do_sys_memfd_create+0x275/0x450 [ 2409.919012] ? memfd_file_seals_ptr+0x170/0x170 [ 2409.919921] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2409.920776] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2409.921612] do_syscall_64+0x33/0x40 [ 2409.922217] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2409.923032] RIP: 0033:0x7f8b5799cb19 [ 2409.923637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2409.926520] RSP: 002b:00007f8b54f11f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2409.927741] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 00007f8b5799cb19 [ 2409.928870] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f8b579f60fb [ 2409.930001] RBP: 0000000000000004 R08: 0000000000002100 R09: ffffffffffffffff [ 2409.931121] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000 [ 2409.932259] R13: 0000000020000100 R14: 0000000000fffff0 R15: 0000000020000380 08:01:21 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:01:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r1, 0x2, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2f}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x80b0) 08:01:21 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x894a, &(0x7f0000006900)={'wlan0\x00', @ifru_data=0x0}) dup3(r1, r0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x7ffffffff000, 0xf0ff1f00000000) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @remote, 0xffff}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x41) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000000c0)=0x1000, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000200)={'syz1', "6069689a8dc28a7a4dc23d5a7edab8990b4ef18681314ba3b82d4ce74258664d19a6f7a1e8f12f159c71b9086b73b5a6312dece79b5dd05111f4faa6cb008be647f33f9d6c9b1374bb80ff9538afa2f18397e439c6b9f1a334bf7e9f9c69fb36425219f8dd5dca172e04dc2f87dd560e99bbb997b885b50929"}, 0x7d) chdir(&(0x7f00000001c0)='./file0\x00') r3 = syz_open_dev$mouse(&(0x7f0000000280), 0x80000000000001fb, 0xb0500) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400000035cace32ccbb44759efc81590aa4b4b57a8a64479389081561b62406dce8a46327cbc475776287175db8e4b97e4d6ca31e3d48175ebdddba0eb26ce019504ecefec9cb8bf167654e6385273665a795b06d7a2e69cb0bb90c227a818bd273f30285c4202ed17081277f50887d95b05866b4dbb37bf248b09a7735506c7c92f48c438e899500d4660ed8111373b80f900ea832f1240ed132d22f0799b9999d8d9434beecd1c0", @ANYRES16=0x0, @ANYBLOB="000829bd7000fddbdf257500000008000300", @ANYRES32=0x0, @ANYBLOB="0800f08004000500"], 0x24}, 0x1, 0x0, 0x0, 0x95}, 0x40000) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) pread64(r4, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec02", 0x2e}], 0x2) 08:01:21 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000032) 08:01:21 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x0, [0x7a7, 0xbe8, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) 08:01:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) (fail_nth: 56) 08:01:21 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) (fail_nth: 6) 08:01:21 executing program 5: setuid(0xee00) setuid(0x0) add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="91", 0x1, 0xfffffffffffffffc) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000200)={0x0, "0070404651fd796ab47483a4c1be26133a48d389342f53cbb88cc2f96518c9ca6fb689bb56a2824f0f6fc853011e3c529931bbfdcfad732e9f6c146e67b6220c"}, 0x48, r0) keyctl$chown(0x4, r1, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r1) [ 2424.916728] FAULT_INJECTION: forcing a failure. [ 2424.916728] name failslab, interval 1, probability 0, space 0, times 0 [ 2424.918850] CPU: 0 PID: 18820 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2424.920139] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2424.921670] Call Trace: [ 2424.922166] dump_stack+0x107/0x167 [ 2424.922843] should_fail.cold+0x5/0xa [ 2424.923554] ? security_inode_alloc+0x34/0x160 [ 2424.924410] should_failslab+0x5/0x20 [ 2424.925131] kmem_cache_alloc+0x5b/0x310 [ 2424.925904] security_inode_alloc+0x34/0x160 [ 2424.926721] inode_init_always+0xa4e/0xd10 [ 2424.927514] ? shmem_destroy_inode+0x70/0x70 [ 2424.928324] alloc_inode+0x84/0x240 [ 2424.929015] new_inode+0x23/0x250 [ 2424.929674] shmem_get_inode+0x15e/0xbc0 [ 2424.930441] __shmem_file_setup+0xb8/0x320 [ 2424.931222] ? _copy_from_user+0xfb/0x1b0 [ 2424.931998] __do_sys_memfd_create+0x275/0x450 [ 2424.932850] ? memfd_file_seals_ptr+0x170/0x170 [ 2424.933714] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2424.934689] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2424.935656] do_syscall_64+0x33/0x40 [ 2424.936340] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2424.937301] RIP: 0033:0x7f8b5799cb19 [ 2424.937988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2424.941340] RSP: 002b:00007f8b54f11f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2424.942730] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 00007f8b5799cb19 [ 2424.944051] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f8b579f60fb [ 2424.945375] RBP: 0000000000000004 R08: 0000000000002100 R09: ffffffffffffffff [ 2424.946679] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000 [ 2424.947980] R13: 0000000020000100 R14: 0000000000fffff0 R15: 0000000020000380 [ 2424.948891] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2424.966402] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2424.977595] FAULT_INJECTION: forcing a failure. [ 2424.977595] name failslab, interval 1, probability 0, space 0, times 0 [ 2424.979417] CPU: 1 PID: 18830 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2424.980512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2424.981805] Call Trace: [ 2424.982229] dump_stack+0x107/0x167 [ 2424.982824] should_fail.cold+0x5/0xa [ 2424.983439] ? iter_file_splice_write+0x16d/0xc30 [ 2424.984216] should_failslab+0x5/0x20 [ 2424.984831] __kmalloc+0x72/0x390 [ 2424.985406] iter_file_splice_write+0x16d/0xc30 [ 2424.986128] ? atime_needs_update+0x600/0x600 [ 2424.986861] ? generic_splice_sendpage+0x140/0x140 [ 2424.987635] ? pipe_to_user+0x170/0x170 [ 2424.988271] ? _cond_resched+0x12/0x80 [ 2424.988897] ? avc_policy_seqno+0x9/0x70 [ 2424.989546] ? selinux_file_permission+0x92/0x520 [ 2424.990317] ? lockdep_init_map_type+0x2c7/0x780 [ 2424.991093] ? generic_splice_sendpage+0x140/0x140 [ 2424.991876] direct_splice_actor+0x10f/0x170 [ 2424.992603] splice_direct_to_actor+0x387/0x980 [ 2424.993352] ? pipe_to_sendpage+0x380/0x380 [ 2424.994055] ? do_splice_to+0x160/0x160 [ 2424.994696] ? security_file_permission+0x24e/0x570 [ 2424.995500] do_splice_direct+0x1c4/0x290 [ 2424.996158] ? splice_direct_to_actor+0x980/0x980 [ 2424.996938] ? selinux_file_permission+0x92/0x520 [ 2424.997716] ? security_file_permission+0x24e/0x570 [ 2424.998521] do_sendfile+0x553/0x1090 [ 2424.999136] ? do_pwritev+0x270/0x270 [ 2424.999757] ? wait_for_completion_io+0x270/0x270 [ 2425.000537] ? rcu_read_lock_any_held+0x75/0xa0 [ 2425.001287] ? vfs_write+0x354/0xa70 [ 2425.001890] __x64_sys_sendfile64+0x1d1/0x210 [ 2425.002621] ? __ia32_sys_sendfile+0x220/0x220 [ 2425.003357] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2425.004189] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2425.005021] do_syscall_64+0x33/0x40 [ 2425.005615] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2425.006421] RIP: 0033:0x7f7d1dff4b19 [ 2425.007012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2425.009867] RSP: 002b:00007f7d1b56a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2425.011285] RAX: ffffffffffffffda RBX: 00007f7d1e107f60 RCX: 00007f7d1dff4b19 [ 2425.012512] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2425.013630] RBP: 00007f7d1b56a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2425.014749] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2425.015870] R13: 00007fff18b5369f R14: 00007f7d1b56a300 R15: 0000000000022000 [ 2425.039236] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2425.126655] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2425.129588] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 08:01:22 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x2, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2425.131622] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2425.135794] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:01:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) (fail_nth: 7) 08:01:22 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x1, 0x0, 0x80000001}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000001780)={{0x2, 0x0, @remote}, {}, 0xac1414bb, {0x2, 0x0, @broadcast}}) 08:01:22 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x3, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:01:22 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]) setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='system_u:object_r:autofs_device_t:s0\x00', 0x25, 0x1) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000001640), 0x1, 0x2) sendfile(r0, r2, 0x0, 0x5) ftruncate(r1, 0x3) creat(&(0x7f00000000c0)='./file1\x00', 0x144) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc142, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x40) write(r4, &(0x7f0000000240)="01", 0x1) openat(r4, &(0x7f0000000180)='./file1\x00', 0x0, 0x12) r5 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x5, 0x0, &(0x7f00000002c0), 0x3c08, &(0x7f00000004c0)={[{@uni_xlateno}, {@numtail}, {@rodir}, {@numtail}, {@nonumtail}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}, {@context={'context', 0x3d, 'staff_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '{\xd1}/(\xf9:+$[\x8b\''}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) sendfile(0xffffffffffffffff, r5, &(0x7f0000001600)=0x80, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa6, 0x1000}, 0x15100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r3, 0x0, 0x20d315) umount2(&(0x7f0000000480)='./file2\x00', 0xe) 08:01:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) (fail_nth: 57) [ 2425.225898] FAULT_INJECTION: forcing a failure. [ 2425.225898] name failslab, interval 1, probability 0, space 0, times 0 [ 2425.227776] CPU: 1 PID: 18853 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2425.228862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2425.230132] Call Trace: [ 2425.230558] dump_stack+0x107/0x167 [ 2425.231126] should_fail.cold+0x5/0xa [ 2425.231913] ? create_object.isra.0+0x3a/0xa20 [ 2425.232649] should_failslab+0x5/0x20 [ 2425.233250] kmem_cache_alloc+0x5b/0x310 [ 2425.233899] create_object.isra.0+0x3a/0xa20 [ 2425.234593] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2425.235377] kmem_cache_alloc+0x159/0x310 [ 2425.236038] security_inode_alloc+0x34/0x160 [ 2425.236738] inode_init_always+0xa4e/0xd10 [ 2425.237399] ? shmem_destroy_inode+0x70/0x70 [ 2425.238081] alloc_inode+0x84/0x240 [ 2425.238653] new_inode+0x23/0x250 [ 2425.239200] shmem_get_inode+0x15e/0xbc0 [ 2425.239843] __shmem_file_setup+0xb8/0x320 [ 2425.240509] ? _copy_from_user+0xfb/0x1b0 [ 2425.241164] __do_sys_memfd_create+0x275/0x450 [ 2425.241881] ? memfd_file_seals_ptr+0x170/0x170 [ 2425.242619] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2425.243435] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2425.244252] do_syscall_64+0x33/0x40 [ 2425.244843] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2425.245641] RIP: 0033:0x7f8b5799cb19 [ 2425.246220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2425.249038] RSP: 002b:00007f8b54f11f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2425.250212] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 00007f8b5799cb19 [ 2425.251304] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f8b579f60fb [ 2425.252393] RBP: 0000000000000004 R08: 0000000000002100 R09: ffffffffffffffff [ 2425.253514] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000 [ 2425.254606] R13: 0000000020000100 R14: 0000000000fffff0 R15: 0000000020000380 08:01:22 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = fsopen(&(0x7f00000012c0)='nfs\x00', 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x4, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0xfffe}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1000}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88b5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) read(r0, &(0x7f0000001580)=""/134, 0x86) [ 2425.358080] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2425.363386] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2425.385309] FAULT_INJECTION: forcing a failure. [ 2425.385309] name failslab, interval 1, probability 0, space 0, times 0 [ 2425.387212] CPU: 1 PID: 18858 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2425.388431] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2425.389737] Call Trace: [ 2425.390164] dump_stack+0x107/0x167 [ 2425.390741] should_fail.cold+0x5/0xa [ 2425.391343] ? jbd2__journal_start+0x190/0x7e0 [ 2425.392060] should_failslab+0x5/0x20 [ 2425.392667] kmem_cache_alloc+0x5b/0x310 [ 2425.393317] jbd2__journal_start+0x190/0x7e0 [ 2425.394019] __ext4_journal_start_sb+0x214/0x390 [ 2425.394731] ext4_file_write_iter+0xdbf/0x18d0 [ 2425.395468] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2425.396147] ? kasan_save_stack+0x32/0x40 [ 2425.396808] ? kasan_save_stack+0x1b/0x40 [ 2425.397459] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2425.398254] ? iter_file_splice_write+0x16d/0xc30 [ 2425.399008] ? direct_splice_actor+0x10f/0x170 [ 2425.399723] ? splice_direct_to_actor+0x387/0x980 [ 2425.400486] ? do_splice_direct+0x1c4/0x290 [ 2425.401157] ? do_sendfile+0x553/0x1090 [ 2425.401784] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2425.402526] do_iter_readv_writev+0x476/0x750 [ 2425.403237] ? new_sync_write+0x660/0x660 [ 2425.403887] ? selinux_file_permission+0x92/0x520 [ 2425.404677] do_iter_write+0x191/0x670 [ 2425.405294] ? trace_hardirqs_on+0x5b/0x180 [ 2425.405981] vfs_iter_write+0x70/0xa0 [ 2425.406584] iter_file_splice_write+0x762/0xc30 [ 2425.407336] ? generic_splice_sendpage+0x140/0x140 [ 2425.408115] ? avc_policy_seqno+0x9/0x70 [ 2425.408757] ? selinux_file_permission+0x92/0x520 [ 2425.409517] ? lockdep_init_map_type+0x2c7/0x780 [ 2425.410269] ? generic_splice_sendpage+0x140/0x140 [ 2425.411030] direct_splice_actor+0x10f/0x170 [ 2425.411722] splice_direct_to_actor+0x387/0x980 [ 2425.412450] ? pipe_to_sendpage+0x380/0x380 [ 2425.413144] ? do_splice_to+0x160/0x160 [ 2425.413764] ? security_file_permission+0x24e/0x570 [ 2425.414563] do_splice_direct+0x1c4/0x290 [ 2425.415211] ? splice_direct_to_actor+0x980/0x980 [ 2425.415962] ? selinux_file_permission+0x92/0x520 [ 2425.416725] ? security_file_permission+0x24e/0x570 [ 2425.417523] do_sendfile+0x553/0x1090 [ 2425.418134] ? do_pwritev+0x270/0x270 [ 2425.418731] ? wait_for_completion_io+0x270/0x270 [ 2425.419487] ? rcu_read_lock_any_held+0x75/0xa0 [ 2425.420208] ? vfs_write+0x354/0xa70 [ 2425.420811] __x64_sys_sendfile64+0x1d1/0x210 [ 2425.421509] ? __ia32_sys_sendfile+0x220/0x220 [ 2425.422230] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2425.423039] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2425.423861] do_syscall_64+0x33/0x40 [ 2425.424440] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2425.425248] RIP: 0033:0x7f7d1dff4b19 [ 2425.425827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2425.428676] RSP: 002b:00007f7d1b56a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2425.429861] RAX: ffffffffffffffda RBX: 00007f7d1e107f60 RCX: 00007f7d1dff4b19 [ 2425.430972] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2425.432081] RBP: 00007f7d1b56a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2425.433204] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2425.434315] R13: 00007fff18b5369f R14: 00007f7d1b56a300 R15: 0000000000022000 [ 2442.807836] FAULT_INJECTION: forcing a failure. 08:01:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) (fail_nth: 58) 08:01:39 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="67856f93ef03aaaaaaaaaabb91002b008100330008050104099731f296efc77c2db7ea22fcdb65f7e81d54a63549f315e4b2dd0af59dea0d41a8bf855c71d77d33975eb40000f14359d79585f8ac114aaae3530532089a16c847e3087d3f0fdb31d53450494d1e6f443b4871f3dfa4ee4e7bccced59fcd2ab006ec43a57c6789e9ba0dd6b91e6032241d6e547655a80b6ef54d1e1d100764a7652da7cdc5ffed2a89c08932b91b918634e2eaf954fcfb3ad63e7dbf8b94e47c3f2501052534dab5a0f1344a3bade9ff3bd67214ffbea25380f762b680bf186ff20f7c6f766b60b265d03adc9a37b8b034a36ff77f67457722853d69f8d1a2e5287c5085d321a25a7ca4887272ab147baa18023ebdd453300e8e42870d3cb1b0af0f82c8e56d614f104804f10afd0e2f59432fc8c9fb273adab4900b17eb1e52372254cebc0f4ae0fbc2db92c8b2471bd4690cdfff48f2e5547429c589d3b889637dd6e2a38037215367d91ae5aa3ab4ace46c6a285a9dfefa6908a588c943c93ff440ce89e93a1e6d9f9d9b9040063a971b9d23f7f6c750853bb8e8bb20ec8a8a6d986edb75af8c11367319cb11f5de4cef3b3e7486f218ffd042a9784f8bc040d581ea21e203bb8383ad96838be54645df869f5afd6cef0bd5281a9e058d"], &(0x7f0000000180)={0x0, 0x0, [0x7a7, 0xbe8, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) 08:01:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) (fail_nth: 8) 08:01:39 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x4, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2442.807836] name failslab, interval 1, probability 0, space 0, times 0 [ 2442.817147] CPU: 1 PID: 18870 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2442.817840] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2442.818669] Call Trace: [ 2442.818952] dump_stack+0x107/0x167 [ 2442.819333] should_fail.cold+0x5/0xa [ 2442.819740] ? __d_alloc+0x2a/0x990 [ 2442.820124] should_failslab+0x5/0x20 [ 2442.820517] kmem_cache_alloc+0x5b/0x310 [ 2442.820954] ? trace_hardirqs_on+0x5b/0x180 [ 2442.821404] __d_alloc+0x2a/0x990 [ 2442.821780] d_alloc_pseudo+0x19/0x70 [ 2442.822178] alloc_file_pseudo+0xce/0x250 [ 2442.822608] ? alloc_file+0x5a0/0x5a0 [ 2442.823007] ? shmem_get_inode+0x55c/0xbc0 [ 2442.823451] __shmem_file_setup+0x144/0x320 08:01:39 executing program 0: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) timerfd_gettime(0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x80000) getpeername$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0xff, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={0x0}, 0x10000, 0x4368, 0x3, 0x0, 0x2, 0x1ff, 0x3de7, 0x0, 0xffffffff, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x6, 0x2}}, './file0\x00'}) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0xc) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r8, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000040)) read(r6, &(0x7f0000000380)=""/12, 0xc) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r9, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, 0x10}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 08:01:39 executing program 5: setresgid(0xee01, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x22000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) write$snapshot(r2, &(0x7f0000000700)="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", 0x1000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000240)=@polexpire={0x41c, 0x1b, 0x400, 0x70bd27, 0x25dfdbfd, {{{@in=@local, @in=@local, 0x4e20, 0x1f, 0x4e21, 0x75, 0xa, 0x0, 0x20, 0x16, 0x0, r3}, {0x3, 0xfffffffffffffffa, 0x9, 0x5fc, 0x100, 0x9, 0x10001, 0x8000}, {0x1, 0x0, 0xfffffffffffffffd, 0x3000000}, 0x3, 0x0, 0x1}, 0xe3}, [@user_kmaddress={0x2c, 0x13, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@loopback, 0x0, 0x2}}, @encap={0x1c, 0x4, {0x3, 0x4e22, 0x4e22, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @XFRMA_SET_MARK_MASK={0x8}, @algo_aead={0x110, 0x12, {{'morus1280-avx2\x00'}, 0x620, 0x0, "2352c4dcb0c09fde0357f9ecd62c2079def6b7809b4ad9bab935e7a15137215183ff36f083a70f3c1db85ca26bd3d28c3c5ff32127acf2c3058d14e9db4929693e477b8475897607c7820c89dcf90e07552e45dff435a2c27d01d17573d3deee92c6f98b9f76d072392e43673b55aee1af3f6ea1251e48da74f7cfeb82e3ff4527a0dcd3dc09183afff512766051b50cf20f91eabf4a587e0e89d1e1b0f6884646422f736624ac4e3bf32321528d4ad85b286f10d28be0e65b440447c26ff52d0a674623"}}, @replay_thresh={0x8, 0xb, 0x4}, @tmpl={0x184, 0x5, [{{@in6=@mcast2, 0x4d2}, 0x2, @in=@broadcast, 0x3500, 0x0, 0x0, 0x3, 0x4, 0x7, 0x1ff}, {{@in=@rand_addr=0x64010101, 0x4d4, 0x3c}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x34ff, 0x3, 0x0, 0x7f, 0x3, 0x7, 0x6}, {{@in=@local, 0x4d6, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3504, 0x2, 0x2, 0x5, 0x5, 0x200, 0x20}, {{@in=@empty, 0x4d2, 0xff}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x3, 0x2, 0x7, 0x3, 0x8, 0xfff}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d2, 0xff}, 0xa, @in=@private=0xa010100, 0x0, 0x4, 0x3, 0x3, 0xfffff79b, 0xffffffff, 0x4c}, {{@in=@remote, 0x4d4, 0xff}, 0xa, @in=@multicast1, 0x0, 0x2, 0x2, 0x7, 0xfffffffe, 0x1, 0x7fffffff}]}, @address_filter={0x28, 0x1a, {@in=@broadcast, @in=@multicast1, 0x2, 0x20, 0x40}}, @lifetime_val={0x24, 0x9, {0xed0, 0x5e, 0x2, 0x7f}}, @lifetime_val={0x24, 0x9, {0x8, 0xfffffffffffff3e7, 0x8001, 0xfffffffffffffffd}}]}, 0x41c}, 0x1, 0x0, 0x0, 0x41}, 0x4000010) r4 = getpgrp(0x0) prlimit64(r4, 0x0, 0x0, 0x0) 08:01:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000033) 08:01:39 executing program 2: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000200)={0x0, "0070404651fd796ab47483a4c1be26133a48d389342f53cbb88cc2f96518c9ca6fb689bb56a2824f0f6fc853011e3c529931bbfdcfad732e9f6c146e67b6220c"}, 0x48, r0) keyctl$chown(0x4, r1, 0x0, 0x0) add_key(&(0x7f0000000000)='trusted\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000200)="f22b8c9fc2a35b66ab8d5ed8d1cf23d7af0a88440f9adcc4d71aaef5067fadc15cced20f85c7532a50236405d159a0641609300176b8eb464f9cee05acb7e144abf6b5d6aae4986ad7d93a42f70481146fbfc6b2fed76530286175dea4c6e8ec2346065b14972f3d6adada", 0x6b, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r3, 0x0, 0x501080, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000004c0)) [ 2442.823888] ? _copy_from_user+0xfb/0x1b0 [ 2442.841190] __do_sys_memfd_create+0x275/0x450 [ 2442.841676] ? memfd_file_seals_ptr+0x170/0x170 [ 2442.842165] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2442.842707] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2442.843242] do_syscall_64+0x33/0x40 [ 2442.843639] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2442.844162] RIP: 0033:0x7f8b5799cb19 [ 2442.844555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2442.850478] RSP: 002b:00007f8b54f11f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2442.851250] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 00007f8b5799cb19 [ 2442.851968] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f8b579f60fb [ 2442.852687] RBP: 0000000000000004 R08: 0000000000002100 R09: ffffffffffffffff [ 2442.853430] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000 [ 2442.854130] R13: 0000000020000100 R14: 0000000000fffff0 R15: 0000000020000380 [ 2442.931577] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2442.934387] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2442.957104] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 08:01:39 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x5, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2443.196133] FAULT_INJECTION: forcing a failure. [ 2443.196133] name failslab, interval 1, probability 0, space 0, times 0 [ 2443.197536] CPU: 1 PID: 18873 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2443.198252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2443.199072] Call Trace: [ 2443.199354] dump_stack+0x107/0x167 [ 2443.199734] should_fail.cold+0x5/0xa [ 2443.200120] ? jbd2__journal_start+0x190/0x7e0 [ 2443.200579] should_failslab+0x5/0x20 [ 2443.200996] kmem_cache_alloc+0x5b/0x310 [ 2443.201428] jbd2__journal_start+0x190/0x7e0 [ 2443.201893] __ext4_journal_start_sb+0x214/0x390 [ 2443.202393] ext4_file_write_iter+0xdbf/0x18d0 [ 2443.202885] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2443.203357] ? kasan_save_stack+0x32/0x40 [ 2443.203795] ? kasan_save_stack+0x1b/0x40 [ 2443.204226] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2443.204763] ? iter_file_splice_write+0x16d/0xc30 [ 2443.205260] ? direct_splice_actor+0x10f/0x170 [ 2443.205725] ? splice_direct_to_actor+0x387/0x980 [ 2443.206213] ? do_splice_direct+0x1c4/0x290 [ 2443.206656] ? do_sendfile+0x553/0x1090 [ 2443.207066] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2443.207559] do_iter_readv_writev+0x476/0x750 [ 2443.208024] ? new_sync_write+0x660/0x660 [ 2443.208451] ? selinux_file_permission+0x92/0x520 [ 2443.208977] do_iter_write+0x191/0x670 [ 2443.209390] ? trace_hardirqs_on+0x5b/0x180 [ 2443.209845] vfs_iter_write+0x70/0xa0 [ 2443.210246] iter_file_splice_write+0x762/0xc30 [ 2443.210738] ? generic_splice_sendpage+0x140/0x140 [ 2443.211248] ? avc_policy_seqno+0x9/0x70 [ 2443.211655] ? selinux_file_permission+0x92/0x520 [ 2443.212130] ? lockdep_init_map_type+0x2c7/0x780 [ 2443.212594] ? generic_splice_sendpage+0x140/0x140 [ 2443.213092] direct_splice_actor+0x10f/0x170 [ 2443.213526] splice_direct_to_actor+0x387/0x980 [ 2443.213979] ? pipe_to_sendpage+0x380/0x380 [ 2443.214403] ? do_splice_to+0x160/0x160 [ 2443.214793] ? security_file_permission+0x24e/0x570 [ 2443.215296] do_splice_direct+0x1c4/0x290 [ 2443.215736] ? splice_direct_to_actor+0x980/0x980 [ 2443.216230] ? selinux_file_permission+0x92/0x520 [ 2443.220769] ? security_file_permission+0x24e/0x570 [ 2443.221278] do_sendfile+0x553/0x1090 [ 2443.221699] ? do_pwritev+0x270/0x270 [ 2443.222097] ? wait_for_completion_io+0x270/0x270 [ 2443.222596] ? rcu_read_lock_any_held+0x75/0xa0 [ 2443.223064] ? vfs_write+0x354/0xa70 [ 2443.223472] __x64_sys_sendfile64+0x1d1/0x210 [ 2443.223926] ? __ia32_sys_sendfile+0x220/0x220 [ 2443.224414] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2443.224967] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2443.225502] do_syscall_64+0x33/0x40 [ 2443.225885] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2443.226413] RIP: 0033:0x7f7d1dff4b19 [ 2443.226793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2443.228528] RSP: 002b:00007f7d1b56a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2443.229308] RAX: ffffffffffffffda RBX: 00007f7d1e107f60 RCX: 00007f7d1dff4b19 [ 2443.230031] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2443.230752] RBP: 00007f7d1b56a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2443.231468] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2443.232176] R13: 00007fff18b5369f R14: 00007f7d1b56a300 R15: 0000000000022000 08:01:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) (fail_nth: 9) 08:01:40 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) r2 = epoll_create1(0x0) r3 = epoll_create(0x6) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r5 = openat(r1, &(0x7f00000001c0)='/proc/self/exe\x00', 0x600, 0x126) sendfile(r4, r5, 0x0, 0x100000001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x24000, 0x0) sendfile(r4, r6, 0x0, 0x80000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r7, 0x894a, &(0x7f0000006900)={'wlan0\x00', @ifru_data=0x0}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)) r8 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000240)=0x6e) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000140)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) r9 = epoll_create(0x86) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r1, &(0x7f0000000380)) [ 2443.296427] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2443.299039] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:01:40 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x6, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2443.342081] FAULT_INJECTION: forcing a failure. [ 2443.342081] name failslab, interval 1, probability 0, space 0, times 0 [ 2443.343316] CPU: 1 PID: 18997 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2443.344023] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2443.344900] Call Trace: [ 2443.345190] dump_stack+0x107/0x167 [ 2443.345577] should_fail.cold+0x5/0xa [ 2443.345972] ? create_object.isra.0+0x3a/0xa20 [ 2443.346457] should_failslab+0x5/0x20 [ 2443.346855] kmem_cache_alloc+0x5b/0x310 [ 2443.347290] create_object.isra.0+0x3a/0xa20 [ 2443.347764] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2443.348300] kmem_cache_alloc+0x159/0x310 [ 2443.348747] ? trace_hardirqs_on+0x5b/0x180 [ 2443.349215] __d_alloc+0x2a/0x990 [ 2443.349598] d_alloc_pseudo+0x19/0x70 [ 2443.350004] alloc_file_pseudo+0xce/0x250 [ 2443.350447] ? alloc_file+0x5a0/0x5a0 [ 2443.350861] ? shmem_get_inode+0x55c/0xbc0 [ 2443.351304] __shmem_file_setup+0x144/0x320 [ 2443.351759] ? _copy_from_user+0xfb/0x1b0 [ 2443.352187] __do_sys_memfd_create+0x275/0x450 [ 2443.352658] ? memfd_file_seals_ptr+0x170/0x170 [ 2443.353163] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2443.353708] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2443.354246] do_syscall_64+0x33/0x40 [ 2443.354631] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2443.355143] RIP: 0033:0x7f8b5799cb19 [ 2443.355536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2443.357415] RSP: 002b:00007f8b54f11f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2443.358358] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 00007f8b5799cb19 [ 2443.360022] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f8b579f60fb [ 2443.361220] RBP: 0000000000000004 R08: 0000000000002100 R09: ffffffffffffffff [ 2443.361949] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000 [ 2443.362684] R13: 0000000020000100 R14: 0000000000fffff0 R15: 0000000020000380 [ 2443.376343] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2443.382893] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:01:40 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x0, [0x7a7, 0xbe8, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) 08:01:58 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) syz_open_dev$vcsu(&(0x7f0000000440), 0x4000000, 0x749342) inotify_init1(0x0) syz_io_uring_setup(0x66ce, &(0x7f0000001500)={0x0, 0x1, 0x6}, &(0x7f0000feb000/0x12000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000001580), 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) 08:01:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x7, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:01:58 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x5e, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffe0, 0xffff}, 0x8006, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001100)={0x0, 0x80, 0x4, 0xba, 0x7b, 0x0, 0x0, 0x9, 0x8108, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x0, 0x1f, 0x0, 0x0, 0x6, 0xb0, 0x1, 0x0, 0x5, 0x0, 0x8}, 0xffffffffffffffff, 0xe, r0, 0x8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x2000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000001440)={0x2, 0x8, 0x3, 0x3, 0x2, [0x200, 0x3f, 0x1, 0x1e]}) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000ff0000/0xd000)=nil, 0x0) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xe) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00002dbd7000fcdbdf25604000b6d6b4dad7000000270000000600b100ff01000e0000005f0c5403cd2ba0faad4a5f60c356a3c4b1c7578d201a361c4f93441ed687126022e481ac6dbf010000808af0ac02cf07585f9f5da4afdbc7586a4fc04b87f84cf8bcbb0b4f8c2a4969329ab35db033e8707533c117d107d5f7f387180e7cad1bee69d773a78e5c2300ed7d7225ed7f7b9e5b63f56f8c8d8820fa8c544c72bcf70f5b74de132823f15ed6df7385fa59cb4fc428389d0f297597509ec3e37a33076b34c25678176fad8153eaae00f9812257b991573bd0fb7a22e0bc6a062fcdefd0d8136177db5a834ffae13d6943d9fd5c9e7058b4b71611de54b20daad255fa383f0273e42662386a78d21ed0740540590404dfd60b9f1f68daf8f0e900"/303], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001340)={&(0x7f00000015c0)=ANY=[@ANYBLOB="b4010000d8185a0d58c6c653a0e8b215df4aa02ecee71a7c37232137f9ed1cacf7338f660c1ca19e4d43b464895370b30b3f4b71a998a4bfdd7cb37411c30fe88f8913ae0e7b584e76f92e21991d55a74fc91512ae6229e2550c7461c33eab0d1f32", @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdbdf25060000000c009900000400006e000000050053000000000005005300090000001c00e700a8750c19f743d384c3e83adf4e7fa27c37bc038038bee9d71c00e700597ff8f13a301caf335127ea9fcfc876ba152431ffd546a3100017800400050004000300040003001c00e70031708965848d60449a6b48794c188cbccac960bb2ba340cd1c00e7003711be756cf550c0afdb766d303fad293e6cb973a64691f920001780040001000400020004000100040003000400040004000100040004000a00180003030303030300000a00180003030303030300000c001780040003000400020020001780040002000400050004000300040001000400030004000100040006000a00e80008021100000000000a00e800ffffffffffff00002c001780040005000400010004000100040005000400020004000300040006000400020004000300040004000a00e8000802110000010000100017800400010004000300040006000a00e80008021100000000001c00e70012796c117b7e9540473e1b04229b6d2b0fb106747dc342fa180017800400020004000300040002000400010004000200"], 0x1b4}}, 0x8084) shmdt(0x0) shmctl$IPC_RMID(r2, 0x0) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) r4 = shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x0) dup(r1) shmdt(r4) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0xafa8, 0x0, 0x2, 0x193}, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(0x0, r5, 0x0, 0x0) 08:01:58 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001000010006b90200000000000000000005000000000000001186ee8cebfdfd6cbc8aec84443eff1c10000080487fec864b245e0f3f9be149f8000000"], 0x30}}, 0x0) accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @none}, 0x8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0xb0, 0x2, 0x1, 0x304, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x804}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x20}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xb}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffffff01}]}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xb8ab}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xc68}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40010}, 0x40) r3 = socket$packet(0x11, 0x3, 0x300) r4 = gettid() process_vm_readv(r4, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) sched_setscheduler(r4, 0x6, &(0x7f00000004c0)=0x9) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001940)='cpu.pressure\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000140)) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYRESOCT, @ANYRES16=r1, @ANYBLOB, @ANYRES32], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) 08:01:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) (fail_nth: 59) 08:01:58 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x2, [0x7a7, 0xbe8]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) 08:01:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) (fail_nth: 10) 08:01:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000034) [ 2461.995035] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2461.998977] FAULT_INJECTION: forcing a failure. [ 2461.998977] name failslab, interval 1, probability 0, space 0, times 0 [ 2462.002034] CPU: 1 PID: 19025 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2462.003910] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2462.006057] Call Trace: [ 2462.006706] dump_stack+0x107/0x167 [ 2462.007581] should_fail.cold+0x5/0xa [ 2462.008548] ? __alloc_file+0x21/0x320 [ 2462.009627] should_failslab+0x5/0x20 [ 2462.010678] kmem_cache_alloc+0x5b/0x310 [ 2462.011773] __alloc_file+0x21/0x320 [ 2462.012760] alloc_empty_file+0x6d/0x170 [ 2462.013786] alloc_file+0x5e/0x5a0 [ 2462.014647] alloc_file_pseudo+0x16a/0x250 [ 2462.015666] ? alloc_file+0x5a0/0x5a0 [ 2462.016586] ? shmem_get_inode+0x55c/0xbc0 [ 2462.017907] __shmem_file_setup+0x144/0x320 [ 2462.019010] ? _copy_from_user+0xfb/0x1b0 [ 2462.020012] __do_sys_memfd_create+0x275/0x450 [ 2462.021127] ? memfd_file_seals_ptr+0x170/0x170 [ 2462.022231] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2462.023652] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2462.025087] do_syscall_64+0x33/0x40 [ 2462.026132] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2462.027563] RIP: 0033:0x7f8b5799cb19 [ 2462.028600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2462.033574] RSP: 002b:00007f8b54f11f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2462.035403] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 00007f8b5799cb19 [ 2462.037356] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f8b579f60fb [ 2462.039256] RBP: 0000000000000004 R08: 0000000000002100 R09: ffffffffffffffff [ 2462.040993] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000 [ 2462.042682] R13: 0000000020000100 R14: 0000000000fffff0 R15: 0000000020000380 [ 2462.057767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=19030 comm=syz-executor.5 [ 2462.069496] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2462.069512] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2462.113950] FAULT_INJECTION: forcing a failure. [ 2462.113950] name failslab, interval 1, probability 0, space 0, times 0 [ 2462.117892] CPU: 1 PID: 19028 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2462.120187] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2462.122983] Call Trace: [ 2462.123286] dump_stack+0x107/0x167 [ 2462.124441] should_fail.cold+0x5/0xa [ 2462.125732] ? jbd2__journal_start+0x190/0x7e0 [ 2462.126398] should_failslab+0x5/0x20 [ 2462.127669] kmem_cache_alloc+0x5b/0x310 [ 2462.128334] jbd2__journal_start+0x190/0x7e0 [ 2462.129816] __ext4_journal_start_sb+0x214/0x390 [ 2462.131391] ext4_file_write_iter+0xdbf/0x18d0 [ 2462.132151] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2462.132847] ? kasan_save_stack+0x32/0x40 [ 2462.133472] ? kasan_save_stack+0x1b/0x40 [ 2462.134072] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2462.134818] ? iter_file_splice_write+0x16d/0xc30 [ 2462.135547] ? direct_splice_actor+0x10f/0x170 [ 2462.136244] ? splice_direct_to_actor+0x387/0x980 [ 2462.136957] ? do_splice_direct+0x1c4/0x290 [ 2462.137545] ? do_sendfile+0x553/0x1090 [ 2462.138020] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2462.138571] do_iter_readv_writev+0x476/0x750 [ 2462.139099] ? new_sync_write+0x660/0x660 [ 2462.139589] ? selinux_file_permission+0x92/0x520 [ 2462.140183] do_iter_write+0x191/0x670 [ 2462.140653] ? trace_hardirqs_on+0x5b/0x180 [ 2462.141255] vfs_iter_write+0x70/0xa0 [ 2462.141701] iter_file_splice_write+0x762/0xc30 [ 2462.142269] ? generic_splice_sendpage+0x140/0x140 [ 2462.142840] ? avc_policy_seqno+0x9/0x70 [ 2462.143309] ? selinux_file_permission+0x92/0x520 [ 2462.143847] ? lockdep_init_map_type+0x2c7/0x780 [ 2462.144401] ? generic_splice_sendpage+0x140/0x140 [ 2462.144978] direct_splice_actor+0x10f/0x170 [ 2462.145490] splice_direct_to_actor+0x387/0x980 [ 2462.146020] ? pipe_to_sendpage+0x380/0x380 [ 2462.147372] ? do_splice_to+0x160/0x160 [ 2462.147877] ? security_file_permission+0x24e/0x570 [ 2462.148485] do_splice_direct+0x1c4/0x290 [ 2462.149008] ? splice_direct_to_actor+0x980/0x980 [ 2462.149542] ? selinux_file_permission+0x92/0x520 [ 2462.150114] ? security_file_permission+0x24e/0x570 [ 2462.150704] do_sendfile+0x553/0x1090 [ 2462.151806] ? do_pwritev+0x270/0x270 [ 2462.152244] ? wait_for_completion_io+0x270/0x270 [ 2462.152800] ? rcu_read_lock_any_held+0x75/0xa0 [ 2462.153335] ? vfs_write+0x354/0xa70 [ 2462.154301] __x64_sys_sendfile64+0x1d1/0x210 [ 2462.154808] ? __ia32_sys_sendfile+0x220/0x220 [ 2462.156172] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2462.156769] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2462.157354] do_syscall_64+0x33/0x40 [ 2462.157755] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2462.158276] RIP: 0033:0x7f7d1dff4b19 [ 2462.158665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2462.160513] RSP: 002b:00007f7d1b56a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2462.161314] RAX: ffffffffffffffda RBX: 00007f7d1e107f60 RCX: 00007f7d1dff4b19 [ 2462.162038] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2462.162760] RBP: 00007f7d1b56a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2462.163493] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2462.164213] R13: 00007fff18b5369f R14: 00007f7d1b56a300 R15: 0000000000022000 [ 2462.211056] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:01:59 executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x529482, 0x31) r1 = open$dir(&(0x7f0000000040)='./file1\x00', 0x200d00, 0x0) lseek(r1, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000080), &(0x7f0000000480)=ANY=[@ANYBLOB="00fb2a0305e90a778c76633ed225f974ca0100fbf19f0d9ee601a0c55cff9112ef2d82c109005c738a2ae8fdd7e496d1b3e0bd8f74010c79bd049e995681c1b808ad2785d1e4a8c1f1b1444b68f4757e520f03c6"], 0x2a, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x894a, &(0x7f0000006900)={'wlan0\x00', @ifru_data=0x0}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000500)={0x81, 0x10000, 0x0, 0x8001, 0x2, [{0x0, 0x2ede5083, 0x1, '\x00', 0x4}, {0xff, 0x2, 0xfffffffffffffffa, '\x00', 0x2}]}) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r4, 0x2, 0x2, 0x6985) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x0, [0xfffff4b7, 0xb6, 0x401]}, &(0x7f00000001c0)=0x44) sendmsg$nl_generic(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000004200210e0000fffffffffffffff70000"], 0x14}}, 0x0) close_range(0xffffffffffffffff, r5, 0x2) timerfd_create(0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x96308958684c935b}, 0x0) open_tree(r1, &(0x7f0000000100)='./file1\x00', 0x100) timerfd_create(0x0, 0x0) unshare(0x48020200) 08:01:59 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:system_dbusd_var_lib_t:s0\x00', 0x2c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x24040, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x4, 0x902, 0xff, 0x6, 0x5}) write$selinux_attr(r0, 0x0, 0x0) r3 = syz_mount_image$nfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x200, 0x5, &(0x7f0000000440)=[{&(0x7f0000000980)="4028f9f150962151353e6566b7101f51dfffa43d7b35df1785982e0ada01b4cdf442afd27a093155490e8e6a806bc8b638d56da177e52e45279bf38b53cf1b188e66c57e164dffbe6dbee2d5e4d27cbd69db8e8dd0ee405803455bd605ff98e9654d8261d5988061eafbd885a1915695d3ef6729f1352b9f4c2e27d75003af448d3216d21ef6b1f60c927ede7a005f1a00b68581b009b8cf32dccdffe0b3a467bc3019c70d376bde066e5b913c093e25acf522f3b852a33b32b3ccbd67c7cdde46ae949b7cee4bca1b00927ed2d0f854efe03ea871ba0dc216fcd7a94f9881e5d8c8049f61a441ce3779", 0xea}, {&(0x7f0000000a80)="f5f1dafefc9afb8b93e69b8aa13d807e4bf9e5f3659876158b0a23ccadb9c07fd99b05fcf054a9dd4cb8e8a2933dadcacccdfb7d854464fbc3ddfda194ab796fba27d0fdbfb1e572904caed3f1f92f9dfb365136c58e7b85d8f9e9660f98186c9673ff65e1fbc092391d72f1233f66a7cf0f87ddcc10b8744eecd502027c2aca862e73dafbd77354d26f2529c98239aa7eb75908cd715acae6fa985dea748dafc888de9e15aefdd08c203af6db03ce4f6e38f6af883efc42d3d9f08a4fd9fd72a4e94b06ddf434c49d6a5f4f523b9d62200d5a649378e31285f3b9e11a7fb95ff9396e47156eb40d26b46e2d", 0xec}, {&(0x7f0000000b80)="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", 0x1000, 0x7}, {&(0x7f0000001b80)="525c15a32045f48deb57773cd3a4f685690b754aaf63ea4b20f4b7e4327bc643105971706b0a543ea65adcbea1a345aa640ce7516f263f13ee61297f72882240f6b61fe05bb0756688a84640dc7d8e43675475482e05e520b2bed2811a7832ecadf13cb7765954ab5e3cfdd587b466f5202a8356f996df65624651a586277cb835124b5fa13ecb26bbfe7b0a6d0a7ff6a0db58ba990698e90a7b083afcf1470834b4c898d59ec640289cbde7f23537a28d318d4fb30c4973e5e8c940bb05f47561906e308a876bdd2305040f7630589df4b9ad1a2c1cb17e0f0b1b948d559c672ce1d25e023ff4053e0e7365381bb4ce4115617127aa3d54", 0xf8, 0x9}, {0x0, 0x0, 0x5}], 0x8000, &(0x7f0000001e00)={[{'system_u:object_r:system_dbusd_var_lib_t:s0\x00'}, {'\x00'}, {'\x00'}, {'/:/[}}*'}], [{@permit_directio}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise}, {@subj_role={'subj_role', 0x3d, 'system_u:object_r:system_dbusd_var_lib_t:s0\x00'}}, {@fowner_gt={'fowner>', 0xee01}}, {@pcr={'pcr', 0x3d, 0x4}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) openat(r3, 0x0, 0x80000, 0x58) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x14, 0x1, 0x2, 0x201}, 0x14}}, 0x0) 08:01:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) (fail_nth: 11) [ 2462.231770] kauditd_printk_skb: 40 callbacks suppressed [ 2462.231785] audit: type=1400 audit(1712736119.150:943): avc: denied { create } for pid=19039 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:system_dbusd_var_lib_t:s0 tclass=udp_socket permissive=1 [ 2462.234907] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2462.251555] audit: type=1400 audit(1712736119.166:944): avc: denied { connect } for pid=19039 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:system_dbusd_var_lib_t:s0 tclass=udp_socket permissive=1 08:01:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x8, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:01:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) (fail_nth: 60) [ 2462.266057] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2462.270343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=19046 comm=syz-executor.2 [ 2462.301102] FAULT_INJECTION: forcing a failure. [ 2462.301102] name failslab, interval 1, probability 0, space 0, times 0 [ 2462.302546] CPU: 1 PID: 19098 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2462.303353] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2462.304325] Call Trace: [ 2462.304650] dump_stack+0x107/0x167 [ 2462.305088] should_fail.cold+0x5/0xa [ 2462.305479] ? create_object.isra.0+0x3a/0xa20 [ 2462.305924] should_failslab+0x5/0x20 [ 2462.306303] kmem_cache_alloc+0x5b/0x310 [ 2462.306708] create_object.isra.0+0x3a/0xa20 [ 2462.307140] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2462.307656] kmem_cache_alloc+0x159/0x310 [ 2462.308071] __alloc_file+0x21/0x320 [ 2462.308455] alloc_empty_file+0x6d/0x170 [ 2462.308860] alloc_file+0x5e/0x5a0 [ 2462.309238] alloc_file_pseudo+0x16a/0x250 [ 2462.309655] ? alloc_file+0x5a0/0x5a0 [ 2462.310051] ? shmem_get_inode+0x55c/0xbc0 [ 2462.310493] __shmem_file_setup+0x144/0x320 [ 2462.310919] ? _copy_from_user+0xfb/0x1b0 [ 2462.311333] __do_sys_memfd_create+0x275/0x450 [ 2462.311786] ? memfd_file_seals_ptr+0x170/0x170 [ 2462.312269] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2462.312788] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2462.313316] do_syscall_64+0x33/0x40 [ 2462.313694] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2462.314193] RIP: 0033:0x7f8b5799cb19 [ 2462.314572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2462.316336] RSP: 002b:00007f8b54f11f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2462.317091] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 00007f8b5799cb19 [ 2462.317786] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f8b579f60fb [ 2462.318474] RBP: 0000000000000004 R08: 0000000000002100 R09: ffffffffffffffff [ 2462.319160] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000 [ 2462.319851] R13: 0000000020000100 R14: 0000000000fffff0 R15: 0000000020000380 [ 2462.354020] FAULT_INJECTION: forcing a failure. [ 2462.354020] name failslab, interval 1, probability 0, space 0, times 0 [ 2462.355226] CPU: 0 PID: 19110 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2462.355908] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2462.356722] Call Trace: [ 2462.357015] dump_stack+0x107/0x167 [ 2462.357401] should_fail.cold+0x5/0xa [ 2462.357799] ? create_object.isra.0+0x3a/0xa20 [ 2462.358268] should_failslab+0x5/0x20 [ 2462.358663] kmem_cache_alloc+0x5b/0x310 [ 2462.359087] create_object.isra.0+0x3a/0xa20 [ 2462.359531] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2462.360050] kmem_cache_alloc_trace+0x151/0x320 [ 2462.360527] __iomap_dio_rw+0x1ee/0x1110 [ 2462.361013] ? jbd2_journal_stop+0x188/0xdc0 [ 2462.361473] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2462.361954] ? ext4_orphan_add+0x253/0x9e0 [ 2462.362377] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 2462.362873] ? ext4_empty_dir+0xae0/0xae0 [ 2462.363287] ? jbd2__journal_start+0xf3/0x7e0 [ 2462.363719] iomap_dio_rw+0x31/0x90 [ 2462.364068] ext4_file_write_iter+0xb26/0x18d0 [ 2462.364520] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2462.364961] ? kasan_save_stack+0x32/0x40 [ 2462.365364] ? kasan_save_stack+0x1b/0x40 [ 2462.365776] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2462.366381] ? iter_file_splice_write+0x16d/0xc30 [ 2462.366851] ? direct_splice_actor+0x10f/0x170 [ 2462.367296] ? splice_direct_to_actor+0x387/0x980 [ 2462.367790] ? do_splice_direct+0x1c4/0x290 [ 2462.368232] ? do_sendfile+0x553/0x1090 [ 2462.368646] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2462.369130] do_iter_readv_writev+0x476/0x750 [ 2462.369564] ? new_sync_write+0x660/0x660 [ 2462.369958] ? selinux_file_permission+0x92/0x520 [ 2462.370430] do_iter_write+0x191/0x670 [ 2462.370814] ? trace_hardirqs_on+0x5b/0x180 [ 2462.371264] vfs_iter_write+0x70/0xa0 [ 2462.371662] iter_file_splice_write+0x762/0xc30 [ 2462.372161] ? generic_splice_sendpage+0x140/0x140 [ 2462.372662] ? avc_policy_seqno+0x9/0x70 [ 2462.373057] ? selinux_file_permission+0x92/0x520 [ 2462.373508] ? lockdep_init_map_type+0x2c7/0x780 [ 2462.373959] ? generic_splice_sendpage+0x140/0x140 [ 2462.374426] direct_splice_actor+0x10f/0x170 [ 2462.374827] splice_direct_to_actor+0x387/0x980 [ 2462.375268] ? pipe_to_sendpage+0x380/0x380 [ 2462.375677] ? do_splice_to+0x160/0x160 [ 2462.376056] ? security_file_permission+0x24e/0x570 [ 2462.376537] do_splice_direct+0x1c4/0x290 [ 2462.376955] ? splice_direct_to_actor+0x980/0x980 [ 2462.377415] ? selinux_file_permission+0x92/0x520 [ 2462.377877] ? security_file_permission+0x24e/0x570 [ 2462.378364] do_sendfile+0x553/0x1090 [ 2462.378740] ? do_pwritev+0x270/0x270 [ 2462.379116] ? wait_for_completion_io+0x270/0x270 [ 2462.379579] ? rcu_read_lock_any_held+0x75/0xa0 [ 2462.380022] ? vfs_write+0x354/0xa70 [ 2462.380389] __x64_sys_sendfile64+0x1d1/0x210 [ 2462.380812] ? __ia32_sys_sendfile+0x220/0x220 [ 2462.381262] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2462.381753] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2462.382248] do_syscall_64+0x33/0x40 [ 2462.382599] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2462.383075] RIP: 0033:0x7f7d1dff4b19 [ 2462.383433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2462.385151] RSP: 002b:00007f7d1b56a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2462.385897] RAX: ffffffffffffffda RBX: 00007f7d1e107f60 RCX: 00007f7d1dff4b19 [ 2462.386555] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2462.387216] RBP: 00007f7d1b56a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2462.387885] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2462.388556] R13: 00007fff18b5369f R14: 00007f7d1b56a300 R15: 0000000000022000 08:01:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x9, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:01:59 executing program 0: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x2, 0x1, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000001c0)="201900d07642da921fd6ff11430c6c6b8c0ac5060048065e24ecf3bb8ce311427ac446646b66cda5c391a00fbccd665cde721d7307fdcb6b969016edfcfc7632c1f3819bab23a38c40d2", 0x4a, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)=ANY=[]) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000140)) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, r0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, r0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, r0) 08:01:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000035) 08:01:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) (fail_nth: 12) [ 2462.482089] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2462.488264] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2462.532429] FAULT_INJECTION: forcing a failure. [ 2462.532429] name failslab, interval 1, probability 0, space 0, times 0 [ 2462.533742] CPU: 0 PID: 19156 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2462.534461] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2462.535990] Call Trace: [ 2462.536589] dump_stack+0x107/0x167 [ 2462.537244] should_fail.cold+0x5/0xa [ 2462.537642] ? security_file_alloc+0x34/0x170 [ 2462.538098] should_failslab+0x5/0x20 [ 2462.538490] kmem_cache_alloc+0x5b/0x310 [ 2462.538906] security_file_alloc+0x34/0x170 [ 2462.539346] __alloc_file+0xb7/0x320 [ 2462.539721] alloc_empty_file+0x6d/0x170 [ 2462.540131] alloc_file+0x5e/0x5a0 [ 2462.540496] alloc_file_pseudo+0x16a/0x250 [ 2462.540923] ? alloc_file+0x5a0/0x5a0 [ 2462.541431] ? shmem_get_inode+0x55c/0xbc0 [ 2462.541870] __shmem_file_setup+0x144/0x320 [ 2462.542313] ? _copy_from_user+0xfb/0x1b0 [ 2462.542739] __do_sys_memfd_create+0x275/0x450 [ 2462.543205] ? memfd_file_seals_ptr+0x170/0x170 [ 2462.543678] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2462.544193] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2462.544710] do_syscall_64+0x33/0x40 [ 2462.545390] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2462.546541] RIP: 0033:0x7f8b5799cb19 [ 2462.547381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2462.552291] RSP: 002b:00007f8b54f11f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2462.554153] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 00007f8b5799cb19 [ 2462.555706] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f8b579f60fb [ 2462.557123] RBP: 0000000000000004 R08: 0000000000002100 R09: ffffffffffffffff [ 2462.557824] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000 [ 2462.558520] R13: 0000000020000100 R14: 0000000000fffff0 R15: 0000000020000380 [ 2462.572896] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=19157 comm=syz-executor.2 [ 2462.628464] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 08:02:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38d23f35a72a854be6d7a67ea72d3c35001f00667bbc0a4eab811176167de5915109c6d54af8ac9b49b0e8f2c122f8dfb9663cd4147a2a94d1a8d161a48d87386102832c3b36b70dee1ef375cf4c3f094b0317e9a403895d1b51ac5ac0f7a34d5fee30e2a7969a019c4aefd4039f4eb93158833d13990651db5825464e238e977a18", @ANYRES16=r1, @ANYBLOB="1b0000000000000000000f000000180001801400220064756d6d7930000000000000000000000c0001800800030007000000"], 0x38}}, 0x0) 08:02:18 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x2, [0x7a7, 0xbe8]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) 08:02:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0xf, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:02:18 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000036) 08:02:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) (fail_nth: 61) 08:02:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffff9c) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f00000000c0)={@id={0x2, 0x0, @d}}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000003, 0x80010, r1, 0x553ab000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000200)='[\x00', &(0x7f0000000240)='./file1\x00', r1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) 08:02:18 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40028, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140)}, 0x0, 0x2000000000, 0x0, 0x9, 0x0, 0x1e9b}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)=0x328) mmap$IORING_OFF_SQ_RING(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x283, &(0x7f0000000000)=0x0) io_submit(r3, 0x1, &(0x7f00000015c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xffff) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffc, 0x0, 0x0, @buffer={0x0, 0x1000, &(0x7f0000001e00)=""/4096}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000180)={0xd8, 0x8000, 0x2, 0xa5, 0x3, [0x10000, 0x1, 0x0, 0xb233]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0125090000000000000088000002088043002b3f7378138af5c1f298eb345dd7f78f4464652503990e908e063bb9d40eff0bef05017a0bf99ac20f00ea5b97c49fae528ec77bc53b703a25722ff00ad08f269b14d21f870a14534187a1a6415deb175112650f6d6c289a56ae796bb80a6e497f1b0adf8420dd4de93150974c05cb4029baa82b03b3ab5ef63f8e2799aec1cf7d0c77787f2652bda8e4ebb5d79bfc6ade654db46d418f2377155dfc7f3042665623b5bbf573257ef0882a6b5ed307ecf0649ac71ecbc2c01c96a6176c0799fa0ea0d99e3a3e6c8d29fcb11df991f2873c9f72ca358e33a09b77725d5ab068c38ec539", @ANYRES32=r7, @ANYBLOB="3d4c88b0e4e5ba04001d80662152a45cff0f0000506e8024bbe874747d6d791404867abf2e076f090e9abd9cd3b609f35df92678c8fa8657c607ab314421"], 0x20}}, 0x0) fallocate(r5, 0x8, 0x8, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) 08:02:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) (fail_nth: 13) [ 2481.261566] FAULT_INJECTION: forcing a failure. [ 2481.261566] name failslab, interval 1, probability 0, space 0, times 0 [ 2481.265460] CPU: 0 PID: 19176 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2481.267691] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2481.270582] Call Trace: [ 2481.271424] dump_stack+0x107/0x167 [ 2481.272598] should_fail.cold+0x5/0xa [ 2481.273862] ? create_object.isra.0+0x3a/0xa20 [ 2481.275021] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2481.275420] should_failslab+0x5/0x20 [ 2481.275441] kmem_cache_alloc+0x5b/0x310 [ 2481.280215] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2481.282013] create_object.isra.0+0x3a/0xa20 [ 2481.283706] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2481.285602] kmem_cache_alloc+0x159/0x310 [ 2481.287707] security_file_alloc+0x34/0x170 [ 2481.289149] __alloc_file+0xb7/0x320 [ 2481.289586] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2481.290402] alloc_empty_file+0x6d/0x170 [ 2481.290418] alloc_file+0x5e/0x5a0 [ 2481.290449] alloc_file_pseudo+0x16a/0x250 [ 2481.294037] ? alloc_file+0x5a0/0x5a0 [ 2481.294641] ? shmem_get_inode+0x55c/0xbc0 [ 2481.295347] __shmem_file_setup+0x144/0x320 [ 2481.295920] ? _copy_from_user+0xfb/0x1b0 [ 2481.296567] __do_sys_memfd_create+0x275/0x450 [ 2481.297272] ? memfd_file_seals_ptr+0x170/0x170 [ 2481.297872] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2481.298569] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2481.299312] do_syscall_64+0x33/0x40 [ 2481.299746] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2481.300465] RIP: 0033:0x7f8b5799cb19 [ 2481.300954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2481.303263] RSP: 002b:00007f8b54f11f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2481.304334] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 00007f8b5799cb19 [ 2481.305487] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f8b579f60fb [ 2481.306411] RBP: 0000000000000004 R08: 0000000000002100 R09: ffffffffffffffff [ 2481.307305] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000 [ 2481.308216] R13: 0000000020000100 R14: 0000000000fffff0 R15: 0000000020000380 [ 2481.326670] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2481.353804] FAULT_INJECTION: forcing a failure. [ 2481.353804] name failslab, interval 1, probability 0, space 0, times 0 [ 2481.356743] CPU: 1 PID: 19170 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2481.358369] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2481.360288] Call Trace: [ 2481.360899] dump_stack+0x107/0x167 [ 2481.361754] should_fail.cold+0x5/0xa [ 2481.362648] ? jbd2__journal_start+0x190/0x7e0 [ 2481.363705] should_failslab+0x5/0x20 [ 2481.364588] kmem_cache_alloc+0x5b/0x310 [ 2481.365545] jbd2__journal_start+0x190/0x7e0 [ 2481.366584] __ext4_journal_start_sb+0x214/0x390 [ 2481.367686] ext4_file_write_iter+0xdbf/0x18d0 [ 2481.368767] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2481.369830] ? kasan_save_stack+0x32/0x40 [ 2481.370794] ? kasan_save_stack+0x1b/0x40 [ 2481.371752] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2481.372933] ? iter_file_splice_write+0x16d/0xc30 [ 2481.374056] ? direct_splice_actor+0x10f/0x170 [ 2481.375119] ? splice_direct_to_actor+0x387/0x980 [ 2481.376231] ? do_splice_direct+0x1c4/0x290 [ 2481.377254] ? do_sendfile+0x553/0x1090 [ 2481.378166] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2481.379210] do_iter_readv_writev+0x476/0x750 [ 2481.380205] ? new_sync_write+0x660/0x660 [ 2481.381124] ? selinux_file_permission+0x92/0x520 [ 2481.382277] do_iter_write+0x191/0x670 [ 2481.383149] ? trace_hardirqs_on+0x5b/0x180 [ 2481.384102] vfs_iter_write+0x70/0xa0 [ 2481.384949] iter_file_splice_write+0x762/0xc30 [ 2481.386002] ? generic_splice_sendpage+0x140/0x140 [ 2481.387261] ? avc_policy_seqno+0x9/0x70 [ 2481.388163] ? selinux_file_permission+0x92/0x520 [ 2481.389356] ? lockdep_init_map_type+0x2c7/0x780 [ 2481.390542] ? generic_splice_sendpage+0x140/0x140 [ 2481.391707] direct_splice_actor+0x10f/0x170 [ 2481.392759] splice_direct_to_actor+0x387/0x980 [ 2481.393903] ? pipe_to_sendpage+0x380/0x380 [ 2481.394940] ? do_splice_to+0x160/0x160 [ 2481.395944] ? security_file_permission+0x24e/0x570 [ 2481.397155] do_splice_direct+0x1c4/0x290 [ 2481.398185] ? splice_direct_to_actor+0x980/0x980 [ 2481.399349] ? selinux_file_permission+0x92/0x520 [ 2481.400515] ? security_file_permission+0x24e/0x570 [ 2481.401708] do_sendfile+0x553/0x1090 [ 2481.402620] ? do_pwritev+0x270/0x270 [ 2481.403507] ? wait_for_completion_io+0x270/0x270 [ 2481.404632] ? rcu_read_lock_any_held+0x75/0xa0 [ 2481.405713] ? vfs_write+0x354/0xa70 [ 2481.406579] __x64_sys_sendfile64+0x1d1/0x210 [ 2481.407652] ? __ia32_sys_sendfile+0x220/0x220 [ 2481.408708] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2481.409929] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2481.411146] do_syscall_64+0x33/0x40 [ 2481.411994] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2481.413183] RIP: 0033:0x7f7d1dff4b19 [ 2481.414036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2481.418273] RSP: 002b:00007f7d1b56a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2481.419995] RAX: ffffffffffffffda RBX: 00007f7d1e107f60 RCX: 00007f7d1dff4b19 [ 2481.421684] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2481.423351] RBP: 00007f7d1b56a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2481.425044] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2481.426746] R13: 00007fff18b5369f R14: 00007f7d1b56a300 R15: 0000000000022000 08:02:18 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}}, 0x108) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000000000000000000000000000008ba36001e5cfd56c9b704b4da82bcbbb745a69bfae2c34682937d6cfcd3bd4"], 0x10) 08:02:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) (fail_nth: 14) [ 2481.445126] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2481.466801] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2481.494535] FAULT_INJECTION: forcing a failure. [ 2481.494535] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 2481.496967] CPU: 0 PID: 19199 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2481.498585] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2481.500555] Call Trace: [ 2481.501184] dump_stack+0x107/0x167 [ 2481.502111] should_fail.cold+0x5/0xa [ 2481.502982] __alloc_pages_nodemask+0x182/0x600 [ 2481.503505] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2481.504180] ? lock_downgrade+0x6d0/0x6d0 [ 2481.504649] ? lock_acquire+0x197/0x470 [ 2481.505107] alloc_pages_vma+0xbb/0x410 [ 2481.505562] shmem_alloc_page+0x10f/0x1e0 [ 2481.505977] ? shmem_init_inode+0x20/0x20 [ 2481.506416] ? percpu_counter_add_batch+0x8b/0x140 [ 2481.506922] ? __vm_enough_memory+0x184/0x360 [ 2481.507364] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2481.507927] ? shmem_unuse_inode+0xf60/0xf60 [ 2481.508382] ? ktime_get_coarse_real_ts64+0x15a/0x190 [ 2481.508905] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2481.509494] shmem_write_begin+0xf7/0x1d0 [ 2481.509971] generic_perform_write+0x20a/0x4f0 [ 2481.510498] ? page_cache_prev_miss+0x310/0x310 [ 2481.511025] ? evict_inodes+0x420/0x420 [ 2481.511478] ? generic_write_checks+0x2ad/0x390 [ 2481.512018] __generic_file_write_iter+0x39d/0x5d0 [ 2481.512567] generic_file_write_iter+0xdb/0x230 [ 2481.513088] ? iov_iter_init+0x3c/0x130 [ 2481.517700] new_sync_write+0x42c/0x660 [ 2481.518169] ? new_sync_read+0x6f0/0x6f0 [ 2481.518606] ? __x64_sys_pwrite64+0x201/0x260 [ 2481.519070] ? lock_release+0x680/0x680 [ 2481.519480] ? selinux_file_permission+0x92/0x520 [ 2481.519989] vfs_write+0x747/0xa70 [ 2481.520367] __x64_sys_pwrite64+0x201/0x260 [ 2481.520805] ? ksys_pwrite64+0x1b0/0x1b0 [ 2481.521244] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2481.521774] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2481.522284] do_syscall_64+0x33/0x40 [ 2481.522659] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2481.523167] RIP: 0033:0x7f8b5794fab7 [ 2481.523530] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2481.525335] RSP: 002b:00007f8b54f11f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2481.526095] RAX: ffffffffffffffda RBX: 00007f8b579e6970 RCX: 00007f8b5794fab7 [ 2481.526831] RDX: 000000000000005a RSI: 0000000020000040 RDI: 0000000000000004 [ 2481.527559] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2481.528249] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2481.528928] R13: 0000000000000004 R14: 0000000020000300 R15: 0000000000000000 08:02:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x48, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:02:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) pwritev2(r0, &(0x7f0000000580)=[{&(0x7f00000002c0)="81", 0x1}, {&(0x7f0000000480)="5e7518c1656e06aadf3bfbf8c80f05c62f2cf7593d686f1c26932c78397b0374e0bc6280275645aed180f92d3978854c4f9436e752e616c068aedc1418ee6139377594c4d75d256c89e97ec18e982f99e1f82fc8f583d42f8cb0145a18dfecb14e50af7173c69b47ceaed84529339d3dd1210b4e8e7163281e11d0c61091d01525a2728d9ec65e14411534493d153678b73585d5cf628c894df3d5dcd4e076d536695ee0b68469514b4ce41894354279e57510e9b8a896efab36ba65d227d782e20e2168e5c9a75b1c3fb199ff5b", 0xce}, {&(0x7f00000005c0)="3a466e6f971382cd77b8ce8313702e1326f06a87e6788a9c0ec4c179b341866acefed0b286f75c7cfb1f2e4f585e38b22e56eb6ce360e966c9256406389c3a9df8667e13ad4073578252f6b497ac794da390e09a42187bd6729224993e625de272fad2164020041ba55c348052f7011582a9a998ad53fd0b6c3d64de69fd4dce7b7bcf1c509d169be1c5ba1b46c426eefcb896f1ef2010092a7914c367fbd010bcb8e8dd53c04636585dae9f0a556947b7ff2a", 0xb3}], 0x3, 0x0, 0x0, 0x0) fcntl$addseals(r0, 0x409, 0xe) fallocate(r0, 0x0, 0x0, 0x4) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file2\x00') creat(&(0x7f0000000100)='./file2\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r5 = openat(r4, &(0x7f0000000000)='/proc/self/exe\x00', 0xa6000, 0x0) dup2(r5, 0xffffffffffffffff) name_to_handle_at(r5, &(0x7f0000000200)='./file2\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="280000004e000000ff07000000000000ffffffff0000000000f0ffff010100"/48], &(0x7f0000000300), 0x400) getsockopt$inet_mreq(r3, 0x0, 0x4, 0x0, &(0x7f0000000340)) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000340)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x8010, r0, 0x2e1b3000) sendfile(r1, r2, 0x0, 0x100000001) 08:02:18 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000180), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x8020}) close(r0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f}}, './file1\x00'}) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.sectors\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000140)=0x3, 0xeefc) unlink(&(0x7f0000000080)='./file1\x00') 08:02:18 executing program 0: ftruncate(0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x30300, 0x0) ioctl$FIONCLEX(r0, 0x5450) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) acct(0x0) 08:02:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) (fail_nth: 62) [ 2481.621278] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:02:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) (fail_nth: 15) [ 2481.694463] FAULT_INJECTION: forcing a failure. [ 2481.694463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2481.695788] CPU: 1 PID: 19215 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2481.696425] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2481.697181] Call Trace: [ 2481.697448] dump_stack+0x107/0x167 [ 2481.697790] should_fail.cold+0x5/0xa [ 2481.698161] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 2481.698664] ? shmem_write_begin+0xf7/0x1d0 [ 2481.699067] ? shmem_write_begin+0x100/0x1d0 [ 2481.699482] generic_perform_write+0x279/0x4f0 [ 2481.699915] ? page_cache_prev_miss+0x310/0x310 [ 2481.700355] ? evict_inodes+0x420/0x420 [ 2481.700733] ? generic_write_checks+0x2ad/0x390 [ 2481.701184] __generic_file_write_iter+0x39d/0x5d0 [ 2481.701661] generic_file_write_iter+0xdb/0x230 [ 2481.702094] ? iov_iter_init+0x3c/0x130 [ 2481.702472] new_sync_write+0x42c/0x660 [ 2481.702847] ? new_sync_read+0x6f0/0x6f0 [ 2481.703229] ? __x64_sys_pwrite64+0x201/0x260 [ 2481.703657] ? lock_release+0x680/0x680 [ 2481.704153] ? selinux_file_permission+0x92/0x520 [ 2481.704622] vfs_write+0x747/0xa70 [ 2481.704977] __x64_sys_pwrite64+0x201/0x260 [ 2481.705407] ? ksys_pwrite64+0x1b0/0x1b0 [ 2481.705787] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2481.706292] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2481.706764] do_syscall_64+0x33/0x40 [ 2481.707130] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2481.707588] RIP: 0033:0x7f8b5794fab7 [ 2481.707925] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2481.709536] RSP: 002b:00007f8b54f11f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2481.710204] RAX: ffffffffffffffda RBX: 00007f8b579e6970 RCX: 00007f8b5794fab7 [ 2481.710821] RDX: 000000000000005a RSI: 0000000020000040 RDI: 0000000000000004 [ 2481.711446] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2481.712063] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2481.712681] R13: 0000000000000004 R14: 0000000020000300 R15: 0000000000000000 [ 2481.761921] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2481.864884] FAULT_INJECTION: forcing a failure. [ 2481.864884] name failslab, interval 1, probability 0, space 0, times 0 [ 2481.866216] CPU: 0 PID: 19219 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2481.866917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2481.867749] Call Trace: [ 2481.868036] dump_stack+0x107/0x167 [ 2481.868426] should_fail.cold+0x5/0xa [ 2481.868840] ? jbd2__journal_start+0x190/0x7e0 [ 2481.869348] should_failslab+0x5/0x20 [ 2481.869744] kmem_cache_alloc+0x5b/0x310 [ 2481.870174] ? __kernel_text_address+0x9/0x40 [ 2481.870655] jbd2__journal_start+0x190/0x7e0 [ 2481.871125] __ext4_journal_start_sb+0x214/0x390 [ 2481.871608] ext4_iomap_begin+0x485/0x700 [ 2481.872038] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 2481.872530] ? kasan_save_stack+0x1b/0x40 [ 2481.872951] ? ext4_file_write_iter+0xb26/0x18d0 [ 2481.873465] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 2481.874114] ? splice_direct_to_actor+0x387/0x980 [ 2481.874627] ? do_splice_direct+0x1c4/0x290 [ 2481.875061] ? do_sendfile+0x553/0x1090 [ 2481.875465] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2481.875933] ? do_syscall_64+0x33/0x40 [ 2481.876327] ? entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2481.876865] iomap_apply+0x164/0x810 [ 2481.877270] ? iomap_dio_rw+0x90/0x90 [ 2481.877683] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2481.878294] ? mark_held_locks+0x9e/0xe0 [ 2481.878725] ? filemap_check_errors+0xa5/0x150 [ 2481.879190] __iomap_dio_rw+0x6cd/0x1110 [ 2481.879606] ? iomap_dio_rw+0x90/0x90 [ 2481.880022] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2481.880485] ? ext4_orphan_add+0x253/0x9e0 [ 2481.880912] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 2481.881425] ? ext4_empty_dir+0xae0/0xae0 [ 2481.881855] ? jbd2__journal_start+0xf3/0x7e0 [ 2481.882334] iomap_dio_rw+0x31/0x90 [ 2481.882721] ext4_file_write_iter+0xb26/0x18d0 [ 2481.883196] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2481.883669] ? kasan_save_stack+0x32/0x40 [ 2481.884111] ? kasan_save_stack+0x1b/0x40 [ 2481.884574] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2481.885128] ? iter_file_splice_write+0x16d/0xc30 [ 2481.885675] ? direct_splice_actor+0x10f/0x170 [ 2481.886201] ? splice_direct_to_actor+0x387/0x980 [ 2481.887562] ? do_splice_direct+0x1c4/0x290 [ 2481.888068] ? do_sendfile+0x553/0x1090 [ 2481.888553] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2481.889104] do_iter_readv_writev+0x476/0x750 [ 2481.889643] ? new_sync_write+0x660/0x660 [ 2481.890116] ? selinux_file_permission+0x92/0x520 [ 2481.890683] do_iter_write+0x191/0x670 [ 2481.891152] ? trace_hardirqs_on+0x5b/0x180 [ 2481.892443] vfs_iter_write+0x70/0xa0 [ 2481.893011] iter_file_splice_write+0x762/0xc30 [ 2481.894538] ? generic_splice_sendpage+0x140/0x140 [ 2481.895261] ? avc_policy_seqno+0x9/0x70 [ 2481.896560] ? selinux_file_permission+0x92/0x520 [ 2481.898105] ? lockdep_init_map_type+0x2c7/0x780 [ 2481.899607] ? generic_splice_sendpage+0x140/0x140 [ 2481.901088] direct_splice_actor+0x10f/0x170 [ 2481.901734] splice_direct_to_actor+0x387/0x980 [ 2481.902389] ? pipe_to_sendpage+0x380/0x380 [ 2481.902947] ? do_splice_to+0x160/0x160 [ 2481.903506] ? security_file_permission+0x24e/0x570 [ 2481.904208] do_splice_direct+0x1c4/0x290 [ 2481.904810] ? splice_direct_to_actor+0x980/0x980 [ 2481.905489] ? selinux_file_permission+0x92/0x520 [ 2481.906164] ? security_file_permission+0x24e/0x570 [ 2481.906870] do_sendfile+0x553/0x1090 [ 2481.907425] ? do_pwritev+0x270/0x270 [ 2481.907869] ? wait_for_completion_io+0x270/0x270 [ 2481.908354] ? rcu_read_lock_any_held+0x75/0xa0 [ 2481.908943] ? vfs_write+0x354/0xa70 [ 2481.909332] __x64_sys_sendfile64+0x1d1/0x210 [ 2481.909779] ? __ia32_sys_sendfile+0x220/0x220 [ 2481.910235] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2481.910775] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2481.911272] do_syscall_64+0x33/0x40 [ 2481.911641] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2481.912126] RIP: 0033:0x7f7d1dff4b19 [ 2481.912496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2481.914761] RSP: 002b:00007f7d1b56a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2481.915815] RAX: ffffffffffffffda RBX: 00007f7d1e107f60 RCX: 00007f7d1dff4b19 [ 2481.916509] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2481.917340] RBP: 00007f7d1b56a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2481.918138] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2481.919000] R13: 00007fff18b5369f R14: 00007f7d1b56a300 R15: 0000000000022000 08:02:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r0, 0x1, &(0x7f0000000300)=[0x0]) r1 = socket$nl_generic(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, &(0x7f00000034c0)=""/4099, 0x1003, 0x1100) io_submit(0x0, 0x1, &(0x7f0000000480)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x1f, r1, &(0x7f0000000000), 0x0, 0xffffffff, 0x0, 0x1}]) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000340)='./file1\x00', &(0x7f0000000380), 0x800000, &(0x7f0000000700)=ANY=[@ANYBLOB="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"]) sendmmsg$inet6(r2, &(0x7f0000007240)=[{{&(0x7f0000004580)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x2404c000) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) io_getevents(0x0, 0x2, 0x2, &(0x7f0000000500)=[{}, {}], &(0x7f0000000580)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x100000001) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000000), 0x4) 08:02:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) (fail_nth: 63) 08:02:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000037) 08:02:37 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x4c, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:02:37 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={&(0x7f00000000c0), 0xa}, 0x13434, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="66696c74657200000700000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000004a51060b515e36f86dcece00"/104], 0x68) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0x5, 0x0, 0x0, 0x8000]}, &(0x7f0000000140)=0x78) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0xa0d800, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) setresuid(0x0, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) fcntl$dupfd(r3, 0x0, r3) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x0, &(0x7f00000007c0)="3f7623c0fd5713364c901d3c", 0xc) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) symlinkat(&(0x7f0000000100)='./file0\x00', r1, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) 08:02:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x2108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x87) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000000), &(0x7f0000000100), 0x2, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x2, 0x0, &(0x7f0000004b80)) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x2002, 0x3}, 0x4) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, 0x0, 0x8800) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x1100, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 08:02:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) (fail_nth: 16) 08:02:37 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x2, [0x7a7, 0xbe8]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) [ 2500.329068] FAULT_INJECTION: forcing a failure. [ 2500.329068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2500.330620] CPU: 0 PID: 19227 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2500.331321] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2500.332144] Call Trace: [ 2500.332423] dump_stack+0x107/0x167 [ 2500.332799] should_fail.cold+0x5/0xa [ 2500.333200] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 2500.334296] ? shmem_write_begin+0xf7/0x1d0 [ 2500.334736] ? shmem_write_begin+0x100/0x1d0 [ 2500.335186] generic_perform_write+0x279/0x4f0 [ 2500.335655] ? __mnt_drop_write_file+0x9/0x70 [ 2500.336110] ? page_cache_prev_miss+0x310/0x310 [ 2500.336575] ? evict_inodes+0x420/0x420 [ 2500.336987] ? generic_write_checks+0x2ad/0x390 [ 2500.337458] __generic_file_write_iter+0x39d/0x5d0 [ 2500.337947] generic_file_write_iter+0xdb/0x230 [ 2500.338416] ? iov_iter_init+0x3c/0x130 [ 2500.338824] new_sync_write+0x42c/0x660 [ 2500.339243] ? new_sync_read+0x6f0/0x6f0 [ 2500.339665] ? __x64_sys_pwrite64+0x201/0x260 [ 2500.340126] ? lock_release+0x680/0x680 [ 2500.340535] ? selinux_file_permission+0x92/0x520 [ 2500.341041] vfs_write+0x747/0xa70 [ 2500.341428] __x64_sys_pwrite64+0x201/0x260 [ 2500.341874] ? ksys_pwrite64+0x1b0/0x1b0 [ 2500.342291] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2500.342821] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2500.343347] do_syscall_64+0x33/0x40 [ 2500.343730] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2500.344252] RIP: 0033:0x7f8b5794fab7 [ 2500.344633] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2500.346434] RSP: 002b:00007f8b54f11f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2500.347198] RAX: ffffffffffffffda RBX: 00007f8b579e6970 RCX: 00007f8b5794fab7 [ 2500.347914] RDX: 0000000000000009 RSI: 0000000020010400 RDI: 0000000000000004 [ 2500.348620] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2500.349328] R10: 0000000000000800 R11: 0000000000000293 R12: 0000000000000004 [ 2500.350064] R13: 0000000000000004 R14: 0000000020000330 R15: 0000000000000002 [ 2500.361057] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2500.369932] 9pnet_virtio: no channels available for device syz [ 2500.379849] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2500.405697] 9pnet_virtio: no channels available for device syz [ 2500.414242] FAULT_INJECTION: forcing a failure. [ 2500.414242] name failslab, interval 1, probability 0, space 0, times 0 [ 2500.415399] CPU: 0 PID: 19230 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2500.416055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2500.416872] Call Trace: [ 2500.417134] dump_stack+0x107/0x167 [ 2500.417505] should_fail.cold+0x5/0xa [ 2500.417887] ? create_object.isra.0+0x3a/0xa20 [ 2500.418355] should_failslab+0x5/0x20 [ 2500.418719] kmem_cache_alloc+0x5b/0x310 [ 2500.419101] ? entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2500.419605] create_object.isra.0+0x3a/0xa20 [ 2500.420024] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2500.420631] kmem_cache_alloc+0x159/0x310 [ 2500.420828] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2500.421010] ? __kernel_text_address+0x9/0x40 [ 2500.421031] jbd2__journal_start+0x190/0x7e0 [ 2500.422561] __ext4_journal_start_sb+0x214/0x390 [ 2500.423041] ext4_iomap_begin+0x485/0x700 [ 2500.423474] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 2500.423958] ? kasan_save_stack+0x1b/0x40 [ 2500.424415] ? ext4_file_write_iter+0xb26/0x18d0 [ 2500.424892] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 2500.425538] ? splice_direct_to_actor+0x387/0x980 [ 2500.426010] ? do_splice_direct+0x1c4/0x290 [ 2500.426451] ? do_sendfile+0x553/0x1090 [ 2500.426841] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2500.427304] ? do_syscall_64+0x33/0x40 [ 2500.427704] ? entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2500.428259] iomap_apply+0x164/0x810 [ 2500.428676] ? iomap_dio_rw+0x90/0x90 [ 2500.429070] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2500.429683] ? mark_held_locks+0x9e/0xe0 [ 2500.430108] ? filemap_check_errors+0xa5/0x150 [ 2500.430572] __iomap_dio_rw+0x6cd/0x1110 [ 2500.430982] ? iomap_dio_rw+0x90/0x90 [ 2500.431387] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2500.431844] ? ext4_orphan_add+0x253/0x9e0 [ 2500.432273] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 2500.432766] ? ext4_empty_dir+0xae0/0xae0 [ 2500.433184] ? jbd2__journal_start+0xf3/0x7e0 [ 2500.433642] iomap_dio_rw+0x31/0x90 [ 2500.433986] ext4_file_write_iter+0xb26/0x18d0 [ 2500.434460] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2500.434929] ? kasan_save_stack+0x32/0x40 [ 2500.435359] ? kasan_save_stack+0x1b/0x40 [ 2500.435777] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2500.436295] ? iter_file_splice_write+0x16d/0xc30 [ 2500.436783] ? direct_splice_actor+0x10f/0x170 [ 2500.437237] ? splice_direct_to_actor+0x387/0x980 [ 2500.438136] ? do_splice_direct+0x1c4/0x290 [ 2500.439097] ? do_sendfile+0x553/0x1090 [ 2500.439986] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2500.441153] do_iter_readv_writev+0x476/0x750 [ 2500.442158] ? new_sync_write+0x660/0x660 [ 2500.443041] ? selinux_file_permission+0x92/0x520 [ 2500.444031] do_iter_write+0x191/0x670 [ 2500.444864] ? trace_hardirqs_on+0x5b/0x180 [ 2500.445873] vfs_iter_write+0x70/0xa0 [ 2500.446684] iter_file_splice_write+0x762/0xc30 [ 2500.447706] ? generic_splice_sendpage+0x140/0x140 [ 2500.448731] ? avc_policy_seqno+0x9/0x70 [ 2500.449588] ? selinux_file_permission+0x92/0x520 [ 2500.450566] ? lockdep_init_map_type+0x2c7/0x780 [ 2500.451504] ? generic_splice_sendpage+0x140/0x140 [ 2500.452502] direct_splice_actor+0x10f/0x170 [ 2500.453403] splice_direct_to_actor+0x387/0x980 [ 2500.454583] ? pipe_to_sendpage+0x380/0x380 [ 2500.455555] ? do_splice_to+0x160/0x160 [ 2500.456398] ? security_file_permission+0x24e/0x570 [ 2500.457499] do_splice_direct+0x1c4/0x290 [ 2500.458344] ? splice_direct_to_actor+0x980/0x980 [ 2500.459303] ? selinux_file_permission+0x92/0x520 [ 2500.460330] ? security_file_permission+0x24e/0x570 [ 2500.461399] do_sendfile+0x553/0x1090 [ 2500.461836] ? do_pwritev+0x270/0x270 [ 2500.462228] ? wait_for_completion_io+0x270/0x270 [ 2500.462724] ? rcu_read_lock_any_held+0x75/0xa0 [ 2500.463195] ? vfs_write+0x354/0xa70 [ 2500.463593] __x64_sys_sendfile64+0x1d1/0x210 [ 2500.464043] ? __ia32_sys_sendfile+0x220/0x220 [ 2500.464505] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2500.465011] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2500.465656] do_syscall_64+0x33/0x40 [ 2500.466476] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2500.467526] RIP: 0033:0x7f7d1dff4b19 [ 2500.468292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2500.473026] RSP: 002b:00007f7d1b56a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2500.475013] RAX: ffffffffffffffda RBX: 00007f7d1e107f60 RCX: 00007f7d1dff4b19 [ 2500.476894] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2500.478764] RBP: 00007f7d1b56a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2500.480208] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2500.481796] R13: 00007fff18b5369f R14: 00007f7d1b56a300 R15: 0000000000022000 08:02:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) (fail_nth: 17) 08:02:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40003, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x1000000, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) creat(&(0x7f0000000280)='./file0/file0/file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001380)) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r3, 0x8, 0x1) write(r2, &(0x7f0000000240)="01", 0x1) r4 = openat(0xffffffffffffffff, 0x0, 0x404100, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) r5 = openat(0xffffffffffffffff, 0x0, 0x0, 0x120) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000) fstatfs(0xffffffffffffffff, &(0x7f00000000c0)=""/65) sendfile(r0, r1, 0x0, 0x20d315) r6 = dup(r4) write$P9_RREADLINK(r6, &(0x7f0000001580)=ANY=[@ANYRESDEC=r5], 0x1c) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000140)) 08:02:37 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x68, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2500.605271] FAULT_INJECTION: forcing a failure. [ 2500.605271] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2500.607948] CPU: 1 PID: 19249 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2500.609327] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2500.610184] Call Trace: [ 2500.610445] dump_stack+0x107/0x167 [ 2500.610812] should_fail.cold+0x5/0xa [ 2500.611183] __alloc_pages_nodemask+0x182/0x600 [ 2500.611628] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2500.612203] ? lock_downgrade+0x6d0/0x6d0 [ 2500.612596] ? lock_acquire+0x197/0x470 [ 2500.613009] alloc_pages_vma+0xbb/0x410 [ 2500.613413] shmem_alloc_page+0x10f/0x1e0 [ 2500.614029] ? shmem_init_inode+0x20/0x20 [ 2500.614867] ? percpu_counter_add_batch+0x8b/0x140 [ 2500.615891] ? __vm_enough_memory+0x184/0x360 [ 2500.616811] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2500.617731] ? shmem_unuse_inode+0xf60/0xf60 [ 2500.618172] ? ktime_get_coarse_real_ts64+0x15a/0x190 [ 2500.618659] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2500.619155] shmem_write_begin+0xf7/0x1d0 [ 2500.619556] generic_perform_write+0x20a/0x4f0 [ 2500.620003] ? page_cache_prev_miss+0x310/0x310 [ 2500.620436] ? evict_inodes+0x420/0x420 [ 2500.620801] ? generic_write_checks+0x2ad/0x390 [ 2500.621223] __generic_file_write_iter+0x39d/0x5d0 [ 2500.621722] generic_file_write_iter+0xdb/0x230 [ 2500.622060] ? iov_iter_init+0x3c/0x130 [ 2500.622357] new_sync_write+0x42c/0x660 [ 2500.622651] ? new_sync_read+0x6f0/0x6f0 [ 2500.622951] ? __x64_sys_pwrite64+0x201/0x260 [ 2500.623282] ? lock_release+0x680/0x680 [ 2500.623574] ? selinux_file_permission+0x92/0x520 [ 2500.623947] vfs_write+0x747/0xa70 [ 2500.624217] __x64_sys_pwrite64+0x201/0x260 [ 2500.624535] ? ksys_pwrite64+0x1b0/0x1b0 [ 2500.624843] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2500.625234] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2500.625701] do_syscall_64+0x33/0x40 [ 2500.626064] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2500.626557] RIP: 0033:0x7f8b5794fab7 [ 2500.626920] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2500.628659] RSP: 002b:00007f8b54f11f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2500.629383] RAX: ffffffffffffffda RBX: 00007f8b579e6970 RCX: 00007f8b5794fab7 [ 2500.630103] RDX: 000000000000001d RSI: 0000000020011600 RDI: 0000000000000004 [ 2500.630784] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2500.631461] R10: 0000000000002100 R11: 0000000000000293 R12: 0000000000000004 [ 2500.632133] R13: 0000000000000004 R14: 0000000020000348 R15: 0000000000000003 [ 2500.650867] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:02:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x9, 0x1, 0x1, 0x72, 0x0, 0x618d, 0x40600, 0xdd070a082f8d71be, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000040), 0x2}, 0xb2f576c90c786110, 0x6, 0x14b, 0x9, 0x100000001, 0x7, 0x6, 0x0, 0x8, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000100)) close_range(r0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x7, 0x108c0) dup2(r2, r1) [ 2500.726015] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:02:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) (fail_nth: 64) 08:02:37 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x6c, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2500.830586] FAULT_INJECTION: forcing a failure. [ 2500.830586] name failslab, interval 1, probability 0, space 0, times 0 [ 2500.831756] CPU: 0 PID: 19262 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2500.832445] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2500.833271] Call Trace: [ 2500.833582] dump_stack+0x107/0x167 [ 2500.833959] should_fail.cold+0x5/0xa [ 2500.834350] ? create_object.isra.0+0x3a/0xa20 [ 2500.834805] should_failslab+0x5/0x20 [ 2500.835191] kmem_cache_alloc+0x5b/0x310 [ 2500.835598] ? lock_chain_count+0x20/0x20 [ 2500.836020] create_object.isra.0+0x3a/0xa20 [ 2500.836471] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2500.836983] __kmalloc+0x16e/0x390 [ 2500.837352] ext4_find_extent+0xa3d/0xd30 [ 2500.837806] ext4_ext_map_blocks+0x1c8/0x5830 [ 2500.838267] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2500.838753] ? SOFTIRQ_verbose+0x10/0x10 [ 2500.839133] ? perf_trace_lock+0xac/0x490 [ 2500.839544] ? SOFTIRQ_verbose+0x10/0x10 [ 2500.839962] ? __lockdep_reset_lock+0x180/0x180 [ 2500.840441] ? ext4_ext_release+0x10/0x10 [ 2500.840867] ? ext4_map_blocks+0x5cd/0x1910 [ 2500.841355] ? lock_release+0x680/0x680 [ 2500.841786] ? ext4_es_lookup_extent+0x48d/0xaa0 [ 2500.842297] ? lock_downgrade+0x6d0/0x6d0 [ 2500.842739] ? down_write+0xe0/0x160 [ 2500.843114] ? down_write_killable+0x180/0x180 [ 2500.843596] ext4_map_blocks+0x63f/0x1910 [ 2500.844025] ? kmem_cache_alloc+0x2a6/0x310 [ 2500.844462] ? __kernel_text_address+0x9/0x40 [ 2500.844920] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2500.845377] ? jbd2__journal_start+0xf3/0x7e0 [ 2500.845876] ? __ext4_journal_start_sb+0x214/0x390 [ 2500.846370] ? __ext4_journal_start_sb+0x1db/0x390 [ 2500.846877] ext4_iomap_begin+0x3ad/0x700 [ 2500.847310] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 2500.847797] ? kasan_save_stack+0x1b/0x40 [ 2500.848217] ? ext4_file_write_iter+0xb26/0x18d0 [ 2500.848692] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 2500.849519] ? splice_direct_to_actor+0x387/0x980 [ 2500.850005] ? do_splice_direct+0x1c4/0x290 [ 2500.850456] ? do_sendfile+0x553/0x1090 [ 2500.850855] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2500.851321] ? do_syscall_64+0x33/0x40 [ 2500.851703] ? entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2500.852557] iomap_apply+0x164/0x810 [ 2500.853463] ? iomap_dio_rw+0x90/0x90 [ 2500.854377] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2500.855750] ? mark_held_locks+0x9e/0xe0 [ 2500.856771] ? filemap_check_errors+0xa5/0x150 [ 2500.857942] __iomap_dio_rw+0x6cd/0x1110 [ 2500.858896] ? iomap_dio_rw+0x90/0x90 [ 2500.859838] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2500.860957] ? ext4_orphan_add+0x253/0x9e0 [ 2500.862043] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 2500.863279] ? ext4_empty_dir+0xae0/0xae0 [ 2500.864247] ? jbd2__journal_start+0xf3/0x7e0 [ 2500.865448] iomap_dio_rw+0x31/0x90 [ 2500.866361] ext4_file_write_iter+0xb26/0x18d0 [ 2500.867520] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2500.868662] ? kasan_save_stack+0x32/0x40 [ 2500.869726] ? kasan_save_stack+0x1b/0x40 [ 2500.870799] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2500.872081] ? iter_file_splice_write+0x16d/0xc30 [ 2500.873350] ? direct_splice_actor+0x10f/0x170 [ 2500.874636] ? splice_direct_to_actor+0x387/0x980 [ 2500.875892] ? do_splice_direct+0x1c4/0x290 [ 2500.877015] ? do_sendfile+0x553/0x1090 [ 2500.878062] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2500.879310] do_iter_readv_writev+0x476/0x750 [ 2500.880520] ? new_sync_write+0x660/0x660 [ 2500.881659] ? selinux_file_permission+0x92/0x520 [ 2500.882962] do_iter_write+0x191/0x670 [ 2500.884002] ? trace_hardirqs_on+0x5b/0x180 [ 2500.885172] vfs_iter_write+0x70/0xa0 [ 2500.886200] iter_file_splice_write+0x762/0xc30 [ 2500.887483] ? generic_splice_sendpage+0x140/0x140 [ 2500.888823] ? avc_policy_seqno+0x9/0x70 [ 2500.889906] ? selinux_file_permission+0x92/0x520 [ 2500.891198] ? lockdep_init_map_type+0x2c7/0x780 [ 2500.892531] ? generic_splice_sendpage+0x140/0x140 [ 2500.893793] direct_splice_actor+0x10f/0x170 [ 2500.894913] splice_direct_to_actor+0x387/0x980 [ 2500.896241] ? pipe_to_sendpage+0x380/0x380 [ 2500.897419] ? do_splice_to+0x160/0x160 [ 2500.898498] ? security_file_permission+0x24e/0x570 [ 2500.899860] do_splice_direct+0x1c4/0x290 [ 2500.900939] ? splice_direct_to_actor+0x980/0x980 [ 2500.902256] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2500.902296] ? selinux_file_permission+0x92/0x520 [ 2500.902322] ? security_file_permission+0x24e/0x570 [ 2500.906708] do_sendfile+0x553/0x1090 [ 2500.907712] ? do_pwritev+0x270/0x270 [ 2500.908764] ? wait_for_completion_io+0x270/0x270 [ 2500.910036] ? rcu_read_lock_any_held+0x75/0xa0 [ 2500.911214] ? vfs_write+0x354/0xa70 [ 2500.912277] __x64_sys_sendfile64+0x1d1/0x210 [ 2500.913515] ? __ia32_sys_sendfile+0x220/0x220 [ 2500.914729] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2500.916133] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2500.917520] do_syscall_64+0x33/0x40 [ 2500.918441] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2500.918532] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2500.920856] RIP: 0033:0x7f7d1dff4b19 [ 2500.921886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2500.926792] RSP: 002b:00007f7d1b56a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2500.928799] RAX: ffffffffffffffda RBX: 00007f7d1e107f60 RCX: 00007f7d1dff4b19 [ 2500.930734] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2500.932647] RBP: 00007f7d1b56a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2500.934472] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2500.936367] R13: 00007fff18b5369f R14: 00007f7d1b56a300 R15: 0000000000022000 08:02:37 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x480) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x5420, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/189, 0x8}], 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3, 0x1, 0x1ff, 0x1, 0xfff}}) 08:02:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000038) [ 2501.078700] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 08:02:56 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x74, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:02:56 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x2108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x87) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000000), &(0x7f0000000100), 0x2, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x2, 0x0, &(0x7f0000004b80)) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x2002, 0x3}, 0x4) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, 0x0, 0x8800) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x1100, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 08:02:56 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x10262, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xc, 0xffffffffffffffff, 0xb) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000000940)=""/4105, 0x1009}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0xff1f, 0x0, 0x3053, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x15}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB, @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=none,smackfsfloor=:,seclabel,\x00']) syz_io_uring_setup(0x3563, &(0x7f00000005c0)={0x0, 0x2e5e, 0x8, 0x5, 0x3a3, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000100)={0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) clone3(&(0x7f0000001b40)={0x260000000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x3c}, &(0x7f0000000500)=""/140, 0x8c, &(0x7f0000000440), &(0x7f0000001b00)=[r2, 0x0, r2, r2, r2, r2, 0x0, 0xffffffffffffffff], 0x8, {r6}}, 0x58) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x9, &(0x7f0000000340)={r4, r5+60000000}, 0x1, 0x0, 0x1}, 0x40) r7 = fcntl$getown(0xffffffffffffffff, 0x9) fsmount(r1, 0x0, 0x70) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001980)=ANY=[@ANYBLOB="9e84416dce7e83e0d9d8a317adf6db46d6af8845ee6914d26b07fe377ba94b595db2aabf65e5b5490add22373f982e9131a1a3e3e279d0cef0546b2d225adba1021e0f974e6b325d2a5abb163ac8e2d07cc6590e724001e6634e1060e570695c2a95b7ac925ded4a004f292cf91dd35345493f0f53e0ee1de1b9fea296377dd23a06755f3c01253004f160993e18d710ce03", @ANYBLOB="ff0701f6a943a5956f818e2101581c03579de1659d2fc65245e8f9e61a1bdce05221f3732b4ca9146feebd2a2eb3e1291a534ab75461fa86e51b00670de3f572dec0e2cdc7f6e08ede2f6263d05a2b30041c3c60c9342a7e326b789d42385a06337d0c759290acaed994d48a487891b45112b01953d6bb2ead9b08479e1ebb63de4ad98c9f9ec143819fc041dd8469ff5ca1c437e5a66e80f335445612c1010e61059a7c9063629684e34e89d3b87abc7b7f792f819a60b07cae88ab5c605c87949e"], 0x340}}, 0x0) fcntl$setown(r1, 0x8, r7) 08:02:56 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x2, [0x7a7, 0x0, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) 08:02:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) (fail_nth: 18) 08:02:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000039) 08:02:56 executing program 2: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x36) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@reassoc_req={@with_ht={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4}, @broadcast, @device_b, @from_mac=@device_b, {0x8, 0x9}}, @ver_80211n={0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x54, 0x67, @device_b, {0x0, 0x6, @default_ap_ssid}, @void, @void, [{0xdd, 0x1a, "4deceea6ffe2152d11c477a11a55d0d0fdd69ecee86306a320ae"}, {0xdd, 0xb4, "403c5a3c272030e27af890cd67920be913dbccfe30c9d8cac8ca4655b080274439a1c8af4464d155de02b36032e0af434f47dd2068ccbb444b5f5a96f2deaf1d5b1119b7abc191f2d6072750e5ba00df1b74a44b036b5bd7b9d76b58f0c64fa8866def840a7d5e41f8cd69465ef8431eb892c626bf548e2d8d4192cbd6119aaecff7a4390d2e3bd5df977a7edeb446074d9245e96492fdcbdba38067e79d4625c28925bb1a1a5f4606187f68fa6ce4099da1a07b"}, {0xdd, 0x88, "1eb34c31a51e17e9f4a66508185f4f61bd659d94f4267c78e35e5c9bdc692d1966c13eaf79218b9cbb3d0e8952108536581a735f7e01580f7897eacaba0804365a82afadb1de4166430fa7673a46842860297e74cee0a4866ee19e6f6dd933c1672215bae8c8f22dd920f7df8b1542dbc75f9d36dc0798aa7953329c723bce0bdc055f030f6e57f1"}, {0xdd, 0x79, "eafd55aad763be96731dd3906f0af2c2a95eedbddced9ed8d42a5e27107202d6b3e43f4db2fa10fe46038a0f1f47da0e3619b6d976b647c545f1d7a4dc67f9ae980c5868a2c2f6372d2c24e9453e3ff9bc4e2300616b3ab06279bb5ce5f9771bc4e8cc55c30f83ed29c65a5a06c94ffb429c0e0ab4f6b7dfa8"}, {0xdd, 0x92, "aea0ccf70ecb8ab3ca443da4ff97c6a81aeef6e36f67bd967cf8fc6719ad2ed468e01f5fde9ca21c30760dc4dadfef3a0efd5d2d76aa8dafe84de1a5c90018a4f6f457c7eca9a48ac7b1f234eb08374cef67c2b0022fe0bae56d25a514963c394805260d29c2930ebc5d107ff7228a1c2c02ef45b768fb885dbdf59c127e00b05dec65057f8961e2ceedf13270c886107147"}, {0xdd, 0xc5, "c19b24933a6a61b721f64780af464cffd07e1e9f57e62fa53bbd6a11234dced4e4ae18177bc55753f683b15359e9a2bd7a7e882f55b9fb2677d286e72caed6ce01d914adee2151cd1f0ad306a05059b1670fb4f3377362014833bc3b016e1c67c753282d7ce6ef46198daa038d363e7f4d1a6d4cacc3202606a229596732931dce1f18e15786cf6fd6a86057e9e59a1d7c95f86c5b9076e6f76275dcb6726549422ea0e80c1a8d2cc17d3560d08683e891c5edf5ee65610dc46cfdad9395f843809a1ea87a"}, {0xdd, 0x29, "0920214196cccac9617e42784b0ab99a3a13b41da761c1ea92f0ad757d9cbff919ae26d869117998c8"}]}, 0x38b) 08:02:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) (fail_nth: 65) [ 2519.936944] 9pnet: Insufficient options for proto=fd [ 2519.939869] FAULT_INJECTION: forcing a failure. [ 2519.939869] name failslab, interval 1, probability 0, space 0, times 0 [ 2519.941820] CPU: 1 PID: 19390 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2519.942703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2519.943775] Call Trace: [ 2519.944075] dump_stack+0x107/0x167 [ 2519.944632] should_fail.cold+0x5/0xa [ 2519.945055] ? xas_alloc+0x336/0x440 [ 2519.945581] should_failslab+0x5/0x20 [ 2519.945996] kmem_cache_alloc+0x5b/0x310 [ 2519.946517] ? trace_hardirqs_on+0x5b/0x180 [ 2519.946944] xas_alloc+0x336/0x440 [ 2519.947352] xas_create+0x60f/0x10d0 [ 2519.947809] xas_create_range+0x189/0x620 [ 2519.948352] shmem_add_to_page_cache+0x760/0x1130 [ 2519.948991] ? shmem_getattr+0x180/0x180 [ 2519.949545] shmem_getpage_gfp.constprop.0+0x64a/0x1920 [ 2519.950160] ? shmem_unuse_inode+0xf60/0xf60 [ 2519.950668] ? ktime_get_coarse_real_ts64+0x15a/0x190 [ 2519.951231] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2519.951803] shmem_write_begin+0xf7/0x1d0 [ 2519.952356] generic_perform_write+0x20a/0x4f0 [ 2519.952930] ? page_cache_prev_miss+0x310/0x310 [ 2519.953510] ? evict_inodes+0x420/0x420 [ 2519.953931] ? generic_write_checks+0x2ad/0x390 [ 2519.954516] __generic_file_write_iter+0x39d/0x5d0 [ 2519.955016] generic_file_write_iter+0xdb/0x230 [ 2519.955585] ? iov_iter_init+0x3c/0x130 [ 2519.955992] new_sync_write+0x42c/0x660 [ 2519.956600] ? new_sync_read+0x6f0/0x6f0 [ 2519.957014] ? __x64_sys_pwrite64+0x201/0x260 [ 2519.957606] ? lock_release+0x680/0x680 [ 2519.958021] ? selinux_file_permission+0x92/0x520 [ 2519.958629] vfs_write+0x747/0xa70 [ 2519.959003] __x64_sys_pwrite64+0x201/0x260 [ 2519.959642] ? ksys_pwrite64+0x1b0/0x1b0 [ 2519.960065] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2519.960782] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2519.961371] do_syscall_64+0x33/0x40 [ 2519.961814] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2519.962381] RIP: 0033:0x7f8b5794fab7 [ 2519.962809] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2519.964858] RSP: 002b:00007f8b54f11f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2519.965769] RAX: ffffffffffffffda RBX: 00007f8b579e6970 RCX: 00007f8b5794fab7 [ 2519.966569] RDX: 000000000000001d RSI: 0000000020011600 RDI: 0000000000000004 [ 2519.967298] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2519.968049] R10: 0000000000002100 R11: 0000000000000293 R12: 0000000000000004 [ 2519.968886] R13: 0000000000000004 R14: 0000000020000348 R15: 0000000000000003 [ 2519.979256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2519.986811] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2519.990064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2519.996875] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2520.022881] FAULT_INJECTION: forcing a failure. [ 2520.022881] name failslab, interval 1, probability 0, space 0, times 0 [ 2520.026303] CPU: 0 PID: 19389 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2520.028280] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2520.030612] Call Trace: [ 2520.031356] dump_stack+0x107/0x167 [ 2520.032131] should_fail.cold+0x5/0xa [ 2520.032948] ? ext4_mb_new_blocks+0x64d/0x45b0 [ 2520.033874] should_failslab+0x5/0x20 [ 2520.034262] kmem_cache_alloc+0x5b/0x310 [ 2520.034673] ext4_mb_new_blocks+0x64d/0x45b0 [ 2520.035109] ? trace_hardirqs_on+0x5b/0x180 [ 2520.035550] ? ext4_cache_extents+0x148/0x2d0 [ 2520.035999] ? ext4_discard_preallocations+0xd80/0xd80 [ 2520.036509] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2520.036971] ext4_ext_map_blocks+0x1d49/0x5830 [ 2520.037412] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2520.037970] ? SOFTIRQ_verbose+0x10/0x10 [ 2520.038410] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2520.039006] ? SOFTIRQ_verbose+0x10/0x10 [ 2520.039432] ? ext4_ext_release+0x10/0x10 [ 2520.039888] ? ext4_map_blocks+0x5cd/0x1910 [ 2520.040332] ? lock_release+0x680/0x680 [ 2520.040764] ? ext4_es_lookup_extent+0x48d/0xaa0 [ 2520.041230] ? lock_downgrade+0x6d0/0x6d0 [ 2520.041730] ? down_write_killable+0x180/0x180 [ 2520.042173] ext4_map_blocks+0x63f/0x1910 [ 2520.042574] ? kmem_cache_alloc+0x2a6/0x310 [ 2520.042994] ? __kernel_text_address+0x9/0x40 [ 2520.043444] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2520.043893] ? jbd2__journal_start+0xf3/0x7e0 [ 2520.044350] ? __ext4_journal_start_sb+0x214/0x390 [ 2520.044843] ? __ext4_journal_start_sb+0x1db/0x390 [ 2520.045339] ext4_iomap_begin+0x3ad/0x700 [ 2520.046028] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 2520.047356] ? kasan_save_stack+0x1b/0x40 [ 2520.048491] ? ext4_file_write_iter+0xb26/0x18d0 [ 2520.049800] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 2520.051172] ? splice_direct_to_actor+0x387/0x980 [ 2520.052225] ? do_splice_direct+0x1c4/0x290 [ 2520.053155] ? do_sendfile+0x553/0x1090 [ 2520.053843] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2520.054322] ? do_syscall_64+0x33/0x40 [ 2520.054716] ? entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2520.055254] iomap_apply+0x164/0x810 [ 2520.055633] ? iomap_dio_rw+0x90/0x90 [ 2520.056027] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2520.056617] ? mark_held_locks+0x9e/0xe0 [ 2520.057046] ? filemap_check_errors+0xa5/0x150 [ 2520.057513] __iomap_dio_rw+0x6cd/0x1110 [ 2520.058388] ? iomap_dio_rw+0x90/0x90 [ 2520.059250] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2520.060258] ? ext4_orphan_add+0x253/0x9e0 [ 2520.061481] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 2520.063024] ? ext4_empty_dir+0xae0/0xae0 [ 2520.064202] ? jbd2__journal_start+0xf3/0x7e0 [ 2520.065527] iomap_dio_rw+0x31/0x90 [ 2520.066663] ext4_file_write_iter+0xb26/0x18d0 [ 2520.068087] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2520.069481] ? kasan_save_stack+0x32/0x40 [ 2520.070780] ? kasan_save_stack+0x1b/0x40 [ 2520.072175] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2520.073902] ? iter_file_splice_write+0x16d/0xc30 [ 2520.075455] ? direct_splice_actor+0x10f/0x170 [ 2520.076963] ? splice_direct_to_actor+0x387/0x980 [ 2520.078585] ? do_splice_direct+0x1c4/0x290 [ 2520.080049] ? do_sendfile+0x553/0x1090 [ 2520.081390] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2520.083063] do_iter_readv_writev+0x476/0x750 [ 2520.084604] ? new_sync_write+0x660/0x660 [ 2520.086009] ? selinux_file_permission+0x92/0x520 [ 2520.087645] do_iter_write+0x191/0x670 [ 2520.089032] ? trace_hardirqs_on+0x5b/0x180 [ 2520.090514] vfs_iter_write+0x70/0xa0 [ 2520.091803] iter_file_splice_write+0x762/0xc30 [ 2520.093393] ? generic_splice_sendpage+0x140/0x140 [ 2520.095104] ? avc_policy_seqno+0x9/0x70 [ 2520.096469] ? selinux_file_permission+0x92/0x520 [ 2520.098118] ? lockdep_init_map_type+0x2c7/0x780 [ 2520.099701] ? generic_splice_sendpage+0x140/0x140 [ 2520.101247] direct_splice_actor+0x10f/0x170 [ 2520.102620] splice_direct_to_actor+0x387/0x980 [ 2520.104111] ? pipe_to_sendpage+0x380/0x380 [ 2520.105537] ? do_splice_to+0x160/0x160 [ 2520.106882] ? security_file_permission+0x24e/0x570 [ 2520.108548] do_splice_direct+0x1c4/0x290 [ 2520.109926] ? splice_direct_to_actor+0x980/0x980 [ 2520.111357] ? selinux_file_permission+0x92/0x520 [ 2520.112751] ? security_file_permission+0x24e/0x570 [ 2520.114417] do_sendfile+0x553/0x1090 [ 2520.115586] ? do_pwritev+0x270/0x270 [ 2520.116807] ? wait_for_completion_io+0x270/0x270 [ 2520.118360] ? rcu_read_lock_any_held+0x75/0xa0 [ 2520.119867] ? vfs_write+0x354/0xa70 [ 2520.121085] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2520.121115] __x64_sys_sendfile64+0x1d1/0x210 [ 2520.121139] ? __ia32_sys_sendfile+0x220/0x220 [ 2520.126572] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2520.128265] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2520.129941] do_syscall_64+0x33/0x40 [ 2520.131192] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2520.132841] RIP: 0033:0x7f7d1dff4b19 [ 2520.134000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2520.139681] RSP: 002b:00007f7d1b56a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2520.141888] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2520.142092] RAX: ffffffffffffffda RBX: 00007f7d1e107f60 RCX: 00007f7d1dff4b19 [ 2520.142112] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2520.146192] RBP: 00007f7d1b56a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2520.147209] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2520.148306] R13: 00007fff18b5369f R14: 00007f7d1b56a300 R15: 0000000000022000 08:02:56 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x7a, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:02:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) (fail_nth: 19) [ 2520.175272] 9pnet: Insufficient options for proto=fd [ 2520.210710] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 08:02:57 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0xf0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:02:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) (fail_nth: 66) [ 2520.269315] FAULT_INJECTION: forcing a failure. [ 2520.269315] name failslab, interval 1, probability 0, space 0, times 0 [ 2520.272547] CPU: 0 PID: 19410 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2520.274925] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2520.277831] Call Trace: [ 2520.278855] dump_stack+0x107/0x167 [ 2520.280001] should_fail.cold+0x5/0xa [ 2520.280668] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2520.281265] ? create_object.isra.0+0x3a/0xa20 [ 2520.285392] should_failslab+0x5/0x20 [ 2520.286590] kmem_cache_alloc+0x5b/0x310 [ 2520.287868] create_object.isra.0+0x3a/0xa20 [ 2520.289246] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2520.290864] kmem_cache_alloc+0x159/0x310 [ 2520.292001] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2520.292158] ? trace_hardirqs_on+0x5b/0x180 [ 2520.292187] xas_alloc+0x336/0x440 [ 2520.297162] xas_create+0x60f/0x10d0 [ 2520.298368] xas_create_range+0x189/0x620 [ 2520.299672] shmem_add_to_page_cache+0x760/0x1130 [ 2520.301213] ? shmem_getattr+0x180/0x180 [ 2520.302535] shmem_getpage_gfp.constprop.0+0x64a/0x1920 [ 2520.303303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2520.304206] ? shmem_unuse_inode+0xf60/0xf60 [ 2520.304235] ? ktime_get_coarse_real_ts64+0x15a/0x190 [ 2520.310001] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2520.311587] shmem_write_begin+0xf7/0x1d0 [ 2520.312894] generic_perform_write+0x20a/0x4f0 [ 2520.312932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2520.314291] ? page_cache_prev_miss+0x310/0x310 [ 2520.314308] ? evict_inodes+0x420/0x420 [ 2520.314335] ? generic_write_checks+0x2ad/0x390 [ 2520.321131] __generic_file_write_iter+0x39d/0x5d0 [ 2520.322703] generic_file_write_iter+0xdb/0x230 [ 2520.324140] ? iov_iter_init+0x3c/0x130 [ 2520.325373] new_sync_write+0x42c/0x660 [ 2520.326617] ? new_sync_read+0x6f0/0x6f0 [ 2520.327901] ? __x64_sys_pwrite64+0x201/0x260 [ 2520.329324] ? lock_release+0x680/0x680 [ 2520.330582] ? selinux_file_permission+0x92/0x520 [ 2520.332113] vfs_write+0x747/0xa70 [ 2520.333249] __x64_sys_pwrite64+0x201/0x260 [ 2520.334621] ? ksys_pwrite64+0x1b0/0x1b0 [ 2520.335901] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2520.337559] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2520.339182] do_syscall_64+0x33/0x40 [ 2520.340362] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2520.341988] RIP: 0033:0x7f8b5794fab7 [ 2520.343128] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2520.346666] RSP: 002b:00007f8b54f11f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2520.347433] RAX: ffffffffffffffda RBX: 00007f8b579e6970 RCX: 00007f8b5794fab7 [ 2520.348140] RDX: 000000000000001d RSI: 0000000020011600 RDI: 0000000000000004 [ 2520.348851] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2520.349562] R10: 0000000000002100 R11: 0000000000000293 R12: 0000000000000004 [ 2520.350297] R13: 0000000000000004 R14: 0000000020000348 R15: 0000000000000003 08:02:57 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x186, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:02:57 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x2108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x87) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000000), &(0x7f0000000100), 0x2, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x2, 0x0, &(0x7f0000004b80)) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x2002, 0x3}, 0x4) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, 0x0, 0x8800) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x1100, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2520.440471] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:02:57 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000053c0)='io.pressure\x00', 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000005400)={0x0, r2, 0x6, 0x23, 0x9, 0xb24e}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x18, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x4, 0x11}]}, 0x18}}, 0x0) [ 2520.511229] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:02:57 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x20000, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffbfff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001700)='net/arp\x00') preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/135, 0x87}], 0x1, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(r0, r1, 0x2) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/65, 0x41) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:02:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) (fail_nth: 20) [ 2520.547574] FAULT_INJECTION: forcing a failure. [ 2520.547574] name failslab, interval 1, probability 0, space 0, times 0 [ 2520.548867] CPU: 1 PID: 19420 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2520.549562] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2520.550369] Call Trace: [ 2520.550680] dump_stack+0x107/0x167 [ 2520.551025] should_fail.cold+0x5/0xa [ 2520.551418] ? create_object.isra.0+0x3a/0xa20 [ 2520.551907] should_failslab+0x5/0x20 [ 2520.552292] kmem_cache_alloc+0x5b/0x310 [ 2520.552734] ? entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2520.553255] create_object.isra.0+0x3a/0xa20 [ 2520.553746] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2520.554250] kmem_cache_alloc+0x159/0x310 [ 2520.554715] ? __kernel_text_address+0x9/0x40 [ 2520.555165] jbd2__journal_start+0x190/0x7e0 [ 2520.555676] __ext4_journal_start_sb+0x214/0x390 [ 2520.556207] ext4_iomap_begin+0x485/0x700 [ 2520.556685] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 2520.557245] ? kasan_save_stack+0x1b/0x40 [ 2520.557734] ? ext4_file_write_iter+0xb26/0x18d0 [ 2520.558252] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 2520.558950] ? splice_direct_to_actor+0x387/0x980 [ 2520.559508] ? do_splice_direct+0x1c4/0x290 [ 2520.559960] ? do_sendfile+0x553/0x1090 [ 2520.560373] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2520.560823] ? do_syscall_64+0x33/0x40 [ 2520.561208] ? entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2520.561755] iomap_apply+0x164/0x810 [ 2520.562129] ? iomap_dio_rw+0x90/0x90 [ 2520.562523] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2520.563107] ? mark_held_locks+0x9e/0xe0 [ 2520.564370] ? filemap_check_errors+0xa5/0x150 [ 2520.565840] __iomap_dio_rw+0x6cd/0x1110 [ 2520.567108] ? iomap_dio_rw+0x90/0x90 [ 2520.568323] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2520.569768] ? ext4_orphan_add+0x253/0x9e0 [ 2520.571083] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 2520.572637] ? ext4_empty_dir+0xae0/0xae0 [ 2520.573945] ? jbd2__journal_start+0xf3/0x7e0 [ 2520.575388] iomap_dio_rw+0x31/0x90 [ 2520.576537] ext4_file_write_iter+0xb26/0x18d0 [ 2520.577976] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2520.579400] ? kasan_save_stack+0x32/0x40 [ 2520.580657] ? kasan_save_stack+0x1b/0x40 [ 2520.581936] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2520.583476] ? iter_file_splice_write+0x16d/0xc30 [ 2520.584943] ? direct_splice_actor+0x10f/0x170 [ 2520.586347] ? splice_direct_to_actor+0x387/0x980 [ 2520.587866] ? do_splice_direct+0x1c4/0x290 [ 2520.589206] ? do_sendfile+0x553/0x1090 [ 2520.591179] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2520.592605] do_iter_readv_writev+0x476/0x750 [ 2520.594105] ? new_sync_write+0x660/0x660 [ 2520.595516] ? selinux_file_permission+0x92/0x520 [ 2520.597129] do_iter_write+0x191/0x670 [ 2520.598439] ? trace_hardirqs_on+0x5b/0x180 [ 2520.599930] vfs_iter_write+0x70/0xa0 [ 2520.601218] iter_file_splice_write+0x762/0xc30 [ 2520.602806] ? generic_splice_sendpage+0x140/0x140 [ 2520.604443] ? avc_policy_seqno+0x9/0x70 [ 2520.605790] ? selinux_file_permission+0x92/0x520 [ 2520.607485] ? lockdep_init_map_type+0x2c7/0x780 [ 2520.609091] ? generic_splice_sendpage+0x140/0x140 [ 2520.610752] direct_splice_actor+0x10f/0x170 [ 2520.612263] splice_direct_to_actor+0x387/0x980 [ 2520.613835] ? pipe_to_sendpage+0x380/0x380 [ 2520.615225] ? do_splice_to+0x160/0x160 [ 2520.616590] ? security_file_permission+0x24e/0x570 [ 2520.618253] do_splice_direct+0x1c4/0x290 [ 2520.619634] ? splice_direct_to_actor+0x980/0x980 [ 2520.621232] ? selinux_file_permission+0x92/0x520 [ 2520.622903] ? security_file_permission+0x24e/0x570 [ 2520.624637] do_sendfile+0x553/0x1090 [ 2520.625934] ? do_pwritev+0x270/0x270 [ 2520.627277] ? wait_for_completion_io+0x270/0x270 [ 2520.628991] ? rcu_read_lock_any_held+0x75/0xa0 [ 2520.630590] ? vfs_write+0x354/0xa70 [ 2520.631854] __x64_sys_sendfile64+0x1d1/0x210 [ 2520.633380] ? __ia32_sys_sendfile+0x220/0x220 [ 2520.634934] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2520.636703] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2520.638461] do_syscall_64+0x33/0x40 [ 2520.639710] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2520.641472] RIP: 0033:0x7f7d1dff4b19 [ 2520.642751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2520.650710] RSP: 002b:00007f7d1b56a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2520.651699] RAX: ffffffffffffffda RBX: 00007f7d1e107f60 RCX: 00007f7d1dff4b19 [ 2520.652511] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2520.653318] RBP: 00007f7d1b56a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2520.654161] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2520.654973] R13: 00007fff18b5369f R14: 00007f7d1b56a300 R15: 0000000000022000 [ 2520.720087] FAULT_INJECTION: forcing a failure. [ 2520.720087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2520.721801] CPU: 0 PID: 19428 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2520.722596] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2520.723582] Call Trace: [ 2520.723919] dump_stack+0x107/0x167 [ 2520.724362] should_fail.cold+0x5/0xa [ 2520.724847] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 2520.725510] ? shmem_write_begin+0xf7/0x1d0 [ 2520.726039] ? shmem_write_begin+0x100/0x1d0 [ 2520.726579] generic_perform_write+0x279/0x4f0 [ 2520.727134] ? page_cache_prev_miss+0x310/0x310 [ 2520.727687] ? evict_inodes+0x420/0x420 [ 2520.728759] ? generic_write_checks+0x2ad/0x390 [ 2520.729312] __generic_file_write_iter+0x39d/0x5d0 [ 2520.729900] generic_file_write_iter+0xdb/0x230 [ 2520.731159] ? iov_iter_init+0x3c/0x130 [ 2520.731610] new_sync_write+0x42c/0x660 [ 2520.732066] ? new_sync_read+0x6f0/0x6f0 [ 2520.732551] ? __x64_sys_pwrite64+0x201/0x260 [ 2520.733052] ? lock_release+0x680/0x680 [ 2520.733505] ? selinux_file_permission+0x92/0x520 [ 2520.734120] vfs_write+0x747/0xa70 [ 2520.734565] __x64_sys_pwrite64+0x201/0x260 [ 2520.735094] ? ksys_pwrite64+0x1b0/0x1b0 [ 2520.735555] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2520.736703] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2520.737272] do_syscall_64+0x33/0x40 [ 2520.737707] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2520.738267] RIP: 0033:0x7f8b5794fab7 [ 2520.738676] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2520.740800] RSP: 002b:00007f8b54f11f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2520.741671] RAX: ffffffffffffffda RBX: 00007f8b579e6970 RCX: 00007f8b5794fab7 [ 2520.742451] RDX: 000000000000001d RSI: 0000000020011600 RDI: 0000000000000004 [ 2520.743240] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2520.744035] R10: 0000000000002100 R11: 0000000000000293 R12: 0000000000000004 [ 2520.744890] R13: 0000000000000004 R14: 0000000020000348 R15: 0000000000000003 08:02:58 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x2108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x87) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000000), &(0x7f0000000100), 0x2, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x2, 0x0, &(0x7f0000004b80)) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x2002, 0x3}, 0x4) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, 0x0, 0x8800) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x1100, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 08:02:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x300, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:02:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) (fail_nth: 21) 08:02:58 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="67856f93ef03aaaaaaaaaabb91002b008100330008050104099731f296efc77c2db7ea22fcdb65f7e81d54a63549f315e4b2dd0af59dea0d41a8bf855c71d77d33975eb40000f14359d79585f8ac114aaae3530532089a16c847e3087d3f0fdb31d53450494d1e6f443b4871f3dfa4ee4e7bccced59fcd2ab006ec43a57c6789e9ba0dd6b91e6032241d6e547655a80b6ef54d1e1d100764a7652da7cdc5ffed2a89c08932b91b918634e2eaf954fcfb3ad63e7dbf8b94e47c3f2501052534dab5a0f1344a3bade9ff3bd67214ffbea25380f762b680bf186ff20f7c6f766b60b265d03adc9a37b8b034a36ff77f67457722853d69f8d1a2e5287c5085d321a25a7ca4887272ab147baa18023ebdd453300e8e42870d3cb1b0af0f82c8e56d614f104804f10afd0e2f59432fc8c9fb273adab4900b17eb1e52372254cebc0f4ae0fbc2db92c8b2471bd4690cdfff48f2e5547429c589d3b889637dd6e2a38037215367d91ae5aa3ab4ace46c6a285a9dfefa6908a588c943c93ff440ce89e93a1e6d9f9d9b9040063a971b9d23f7f6c750853bb8e8bb20ec8a8a6d986edb75af8c11367319cb11f5de4cef3b3e7486f218ffd042a9784f8bc040d581ea21e203bb8383ad96838be54645df869f5afd6cef0bd5281a9e058d"], &(0x7f0000000180)={0x0, 0x2, [0x7a7, 0x0, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) 08:02:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}]}, 0x28}}, 0x0) syz_io_uring_setup(0x7a88, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x7, 0x0, &(0x7f0000000340)="a48e489b5d4ebe15d23c854cef1a8bee0f50699b245a22c142b872d2a78820f91d89e371a2fcd5070b12cf1cfd583f58b12bb4720d56fe97e96877d62a6997348d0e51b816807b47fbb7f1d4bab989ad5a4769536221a589b0747782717301d65bb9117ffa6fced6f772dd72976ce7e42eb410be3720f51c7c34", 0x4, 0x0, 0x0, {0x3}}, 0x7) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x2, &(0x7f0000000040)={0x0, 0x989680}, 0x1, 0x0, 0x0, {0x0, r2}}, 0x7ff) 08:02:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) (fail_nth: 67) 08:02:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000003a) [ 2521.269530] FAULT_INJECTION: forcing a failure. [ 2521.269530] name failslab, interval 1, probability 0, space 0, times 0 [ 2521.270934] CPU: 0 PID: 19442 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2521.271714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2521.272633] Call Trace: [ 2521.272942] dump_stack+0x107/0x167 [ 2521.273368] should_fail.cold+0x5/0xa [ 2521.273865] ? getname_flags.part.0+0x50/0x4f0 [ 2521.274401] should_failslab+0x5/0x20 [ 2521.274872] kmem_cache_alloc+0x5b/0x310 [ 2521.275346] getname_flags.part.0+0x50/0x4f0 [ 2521.275846] getname+0x8e/0xd0 [ 2521.276223] do_sys_openat2+0xf9/0x420 [ 2521.276661] ? build_open_flags+0x6f0/0x6f0 [ 2521.277846] ? rcu_read_lock_any_held+0x75/0xa0 [ 2521.278407] __x64_sys_openat+0x13f/0x1f0 [ 2521.278913] ? __ia32_sys_open+0x1c0/0x1c0 [ 2521.279431] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2521.280049] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2521.280701] do_syscall_64+0x33/0x40 [ 2521.281168] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2521.281832] RIP: 0033:0x7f8b5794fa04 [ 2521.282288] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2521.284400] RSP: 002b:00007f8b54f11ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2521.285240] RAX: ffffffffffffffda RBX: 00007f8b579e6970 RCX: 00007f8b5794fa04 [ 2521.286221] RDX: 0000000000000002 RSI: 00007f8b54f12000 RDI: 00000000ffffff9c [ 2521.286974] RBP: 00007f8b54f12000 R08: 0000000000000000 R09: ffffffffffffffff [ 2521.287695] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2521.288388] R13: 0000000000000004 R14: 0000000020000360 R15: 0000000000000004 [ 2521.311962] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2521.331906] FAULT_INJECTION: forcing a failure. [ 2521.331906] name failslab, interval 1, probability 0, space 0, times 0 [ 2521.333421] CPU: 0 PID: 19447 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2521.334257] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2521.335240] Call Trace: [ 2521.335568] dump_stack+0x107/0x167 [ 2521.336005] should_fail.cold+0x5/0xa [ 2521.336463] ? ext4_mb_new_blocks+0x64d/0x45b0 [ 2521.337013] should_failslab+0x5/0x20 [ 2521.337469] kmem_cache_alloc+0x5b/0x310 [ 2521.337966] ext4_mb_new_blocks+0x64d/0x45b0 [ 2521.338499] ? trace_hardirqs_on+0x5b/0x180 [ 2521.339021] ? ext4_cache_extents+0x148/0x2d0 [ 2521.339551] ? ext4_discard_preallocations+0xd80/0xd80 [ 2521.340265] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2521.341442] ext4_ext_map_blocks+0x1d49/0x5830 [ 2521.342049] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2521.343619] ? SOFTIRQ_verbose+0x10/0x10 [ 2521.344821] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2521.345428] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2521.345939] ? trace_hardirqs_on+0x5b/0x180 [ 2521.346405] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2521.346896] ? finish_task_switch+0x126/0x5d0 [ 2521.347408] ? ext4_ext_release+0x10/0x10 [ 2521.347893] ? ext4_map_blocks+0x5cd/0x1910 [ 2521.348406] ? lock_release+0x680/0x680 [ 2521.348879] ? io_schedule_timeout+0x140/0x140 [ 2521.349402] ? lock_downgrade+0x6d0/0x6d0 [ 2521.349912] ? down_write_killable+0x180/0x180 [ 2521.350455] ext4_map_blocks+0x63f/0x1910 [ 2521.350955] ? kmem_cache_alloc+0x2a6/0x310 [ 2521.351892] ? __kernel_text_address+0x9/0x40 [ 2521.352397] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2521.352436] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2521.352965] ? jbd2__journal_start+0xf3/0x7e0 [ 2521.355653] ? __ext4_journal_start_sb+0x214/0x390 [ 2521.356216] ? __ext4_journal_start_sb+0x1db/0x390 [ 2521.358654] ext4_iomap_begin+0x3ad/0x700 [ 2521.359175] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 2521.359771] ? lock_chain_count+0x20/0x20 [ 2521.360304] ? ext4_file_write_iter+0xb26/0x18d0 [ 2521.361697] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 2521.363034] ? splice_direct_to_actor+0x387/0x980 [ 2521.363603] ? do_splice_direct+0x1c4/0x290 [ 2521.364115] ? do_sendfile+0x553/0x1090 [ 2521.364547] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2521.365054] ? do_syscall_64+0x33/0x40 [ 2521.365475] ? entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2521.366066] iomap_apply+0x164/0x810 [ 2521.366480] ? iomap_dio_rw+0x90/0x90 [ 2521.366905] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2521.367536] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2521.368117] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2521.368712] ? trace_hardirqs_on+0x5b/0x180 [ 2521.369196] __iomap_dio_rw+0x6cd/0x1110 [ 2521.369634] ? iomap_dio_rw+0x90/0x90 [ 2521.370089] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2521.370596] ? ext4_orphan_add+0x253/0x9e0 [ 2521.371062] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 2521.371596] ? ext4_empty_dir+0xae0/0xae0 [ 2521.372046] ? jbd2__journal_start+0xf3/0x7e0 [ 2521.372541] iomap_dio_rw+0x31/0x90 [ 2521.372951] ext4_file_write_iter+0xb26/0x18d0 [ 2521.373459] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2521.374170] ? kasan_save_stack+0x32/0x40 [ 2521.374648] ? kasan_save_stack+0x1b/0x40 [ 2521.375133] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2521.375727] ? iter_file_splice_write+0x16d/0xc30 [ 2521.376271] ? direct_splice_actor+0x10f/0x170 [ 2521.376860] ? splice_direct_to_actor+0x387/0x980 [ 2521.377441] ? do_splice_direct+0x1c4/0x290 [ 2521.378050] ? do_sendfile+0x553/0x1090 [ 2521.378543] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2521.379113] do_iter_readv_writev+0x476/0x750 [ 2521.379669] ? new_sync_write+0x660/0x660 [ 2521.380188] ? selinux_file_permission+0x92/0x520 [ 2521.380799] do_iter_write+0x191/0x670 [ 2521.381967] ? trace_hardirqs_on+0x5b/0x180 [ 2521.382535] vfs_iter_write+0x70/0xa0 [ 2521.382994] iter_file_splice_write+0x762/0xc30 [ 2521.383551] ? generic_splice_sendpage+0x140/0x140 [ 2521.384129] ? avc_policy_seqno+0x9/0x70 [ 2521.384599] ? selinux_file_permission+0x92/0x520 [ 2521.385170] ? lockdep_init_map_type+0x2c7/0x780 [ 2521.385726] ? generic_splice_sendpage+0x140/0x140 [ 2521.386293] direct_splice_actor+0x10f/0x170 [ 2521.386821] splice_direct_to_actor+0x387/0x980 [ 2521.387355] ? pipe_to_sendpage+0x380/0x380 [ 2521.387838] ? do_splice_to+0x160/0x160 [ 2521.388302] ? security_file_permission+0x24e/0x570 [ 2521.388890] do_splice_direct+0x1c4/0x290 [ 2521.389379] ? splice_direct_to_actor+0x980/0x980 [ 2521.389954] ? selinux_file_permission+0x92/0x520 [ 2521.390518] ? security_file_permission+0x24e/0x570 [ 2521.391123] do_sendfile+0x553/0x1090 [ 2521.391586] ? do_pwritev+0x270/0x270 [ 2521.392044] ? wait_for_completion_io+0x270/0x270 [ 2521.392604] ? rcu_read_lock_any_held+0x75/0xa0 [ 2521.393151] ? vfs_write+0x354/0xa70 [ 2521.393600] __x64_sys_sendfile64+0x1d1/0x210 [ 2521.394143] ? __ia32_sys_sendfile+0x220/0x220 [ 2521.394687] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2521.395287] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2521.395897] do_syscall_64+0x33/0x40 [ 2521.396331] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2521.396918] RIP: 0033:0x7f7d1dff4b19 [ 2521.397358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2521.399454] RSP: 002b:00007f7d1b56a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2521.400326] RAX: ffffffffffffffda RBX: 00007f7d1e107f60 RCX: 00007f7d1dff4b19 [ 2521.401150] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2521.401977] RBP: 00007f7d1b56a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2521.402799] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2521.403617] R13: 00007fff18b5369f R14: 00007f7d1b56a300 R15: 0000000000022000 08:02:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) (fail_nth: 68) [ 2521.452595] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2521.453715] CPU: 1 PID: 19435 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 2521.454513] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2521.455525] Call Trace: [ 2521.455849] dump_stack+0x107/0x167 [ 2521.456300] sysfs_warn_dup.cold+0x1c/0x29 [ 2521.456814] sysfs_do_create_link_sd+0x122/0x140 [ 2521.457387] sysfs_create_link+0x5f/0xc0 [ 2521.457948] device_add+0x703/0x1c50 [ 2521.458407] ? devlink_add_symlinks+0x970/0x970 [ 2521.458967] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2521.459609] wiphy_register+0x1da6/0x2850 [ 2521.460127] ? wiphy_unregister+0xb90/0xb90 [ 2521.460665] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2521.461304] ieee80211_register_hw+0x23c5/0x38b0 [ 2521.461898] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2521.462475] ? net_generic+0xdb/0x2b0 [ 2521.462897] ? lockdep_init_map_type+0x2c7/0x780 [ 2521.463415] ? memset+0x20/0x50 [ 2521.463815] ? __hrtimer_init+0x12c/0x270 [ 2521.464284] mac80211_hwsim_new_radio+0x1ce0/0x4250 [ 2521.464882] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2521.465429] ? hwsim_new_radio_nl+0x967/0x1080 [ 2521.466006] ? memcpy+0x39/0x60 [ 2521.466431] hwsim_new_radio_nl+0x991/0x1080 [ 2521.466962] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 2521.467580] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2521.468328] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2521.469149] genl_family_rcv_msg_doit+0x22d/0x330 [ 2521.469704] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2521.470475] ? cap_capable+0x1cd/0x230 [ 2521.470938] ? ns_capable+0xe2/0x110 [ 2521.471398] genl_rcv_msg+0x33c/0x5a0 [ 2521.471861] ? genl_get_cmd+0x480/0x480 [ 2521.472409] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 2521.473062] ? lock_release+0x680/0x680 [ 2521.473558] ? netlink_deliver_tap+0xf4/0xcc0 [ 2521.474110] netlink_rcv_skb+0x14b/0x430 [ 2521.474590] ? genl_get_cmd+0x480/0x480 [ 2521.475057] ? netlink_ack+0xab0/0xab0 [ 2521.475536] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2521.476075] ? is_vmalloc_addr+0x7b/0xb0 [ 2521.476582] genl_rcv+0x24/0x40 [ 2521.476964] netlink_unicast+0x549/0x7f0 [ 2521.477463] ? netlink_attachskb+0x870/0x870 [ 2521.478016] netlink_sendmsg+0x90f/0xdf0 [ 2521.478498] ? netlink_unicast+0x7f0/0x7f0 [ 2521.478981] ? netlink_unicast+0x7f0/0x7f0 [ 2521.479473] __sock_sendmsg+0x154/0x190 [ 2521.479914] ____sys_sendmsg+0x70d/0x870 [ 2521.480314] ? sock_write_iter+0x3d0/0x3d0 [ 2521.480838] ? do_recvmmsg+0x6d0/0x6d0 [ 2521.481259] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2521.481843] ___sys_sendmsg+0xf3/0x170 [ 2521.482277] ? sendmsg_copy_msghdr+0x160/0x160 [ 2521.482803] ? lock_downgrade+0x6d0/0x6d0 [ 2521.483288] ? finish_task_switch+0x126/0x5d0 [ 2521.483803] ? lock_downgrade+0x6d0/0x6d0 [ 2521.484271] ? __fget_files+0x296/0x4c0 [ 2521.484724] ? __fget_light+0xea/0x290 [ 2521.485162] __sys_sendmsg+0xe5/0x1b0 [ 2521.485565] ? __sys_sendmsg_sock+0x40/0x40 [ 2521.486045] ? io_schedule_timeout+0x140/0x140 [ 2521.486582] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2521.487168] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2521.487761] ? trace_hardirqs_on+0x5b/0x180 [ 2521.488278] do_syscall_64+0x33/0x40 [ 2521.488699] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2521.489258] RIP: 0033:0x7fe244fa0b19 [ 2521.489692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2521.491692] RSP: 002b:00007fe242516188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2521.492552] RAX: ffffffffffffffda RBX: 00007fe2450b3f60 RCX: 00007fe244fa0b19 [ 2521.493311] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 2521.494098] RBP: 00007fe244ffaf6d R08: 0000000000000000 R09: 0000000000000000 [ 2521.494861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2521.495644] R13: 00007fff8dc8935f R14: 00007fe242516300 R15: 0000000000022000 08:02:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) (fail_nth: 22) 08:02:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x500, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2521.542809] FAULT_INJECTION: forcing a failure. [ 2521.542809] name failslab, interval 1, probability 0, space 0, times 0 [ 2521.544453] CPU: 0 PID: 19452 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2521.545302] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2521.546280] Call Trace: [ 2521.546598] dump_stack+0x107/0x167 [ 2521.547022] should_fail.cold+0x5/0xa [ 2521.547489] ? create_object.isra.0+0x3a/0xa20 [ 2521.548027] should_failslab+0x5/0x20 [ 2521.548482] kmem_cache_alloc+0x5b/0x310 [ 2521.548942] ? __generic_file_write_iter+0x1a4/0x5d0 [ 2521.549519] create_object.isra.0+0x3a/0xa20 [ 2521.550030] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2521.550615] kmem_cache_alloc+0x159/0x310 [ 2521.551091] getname_flags.part.0+0x50/0x4f0 [ 2521.551600] getname+0x8e/0xd0 [ 2521.551968] do_sys_openat2+0xf9/0x420 [ 2521.553173] ? build_open_flags+0x6f0/0x6f0 [ 2521.553723] ? rcu_read_lock_any_held+0x75/0xa0 [ 2521.554293] __x64_sys_openat+0x13f/0x1f0 [ 2521.554799] ? __ia32_sys_open+0x1c0/0x1c0 [ 2521.555321] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2521.555949] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2521.556571] do_syscall_64+0x33/0x40 [ 2521.557041] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2521.557677] RIP: 0033:0x7f8b5794fa04 [ 2521.558135] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2521.560132] RSP: 002b:00007f8b54f11ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2521.560890] RAX: ffffffffffffffda RBX: 00007f8b579e6970 RCX: 00007f8b5794fa04 [ 2521.561605] RDX: 0000000000000002 RSI: 00007f8b54f12000 RDI: 00000000ffffff9c [ 2521.562328] RBP: 00007f8b54f12000 R08: 0000000000000000 R09: ffffffffffffffff [ 2521.563039] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2521.563766] R13: 0000000000000004 R14: 0000000020000360 R15: 0000000000000004 [ 2521.594741] FAULT_INJECTION: forcing a failure. [ 2521.594741] name failslab, interval 1, probability 0, space 0, times 0 [ 2521.596155] CPU: 0 PID: 19450 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2521.597251] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2521.598448] Call Trace: [ 2521.598761] dump_stack+0x107/0x167 [ 2521.599793] should_fail.cold+0x5/0xa [ 2521.600238] ? ext4_mb_new_blocks+0x209f/0x45b0 [ 2521.601527] should_failslab+0x5/0x20 [ 2521.602003] kmem_cache_alloc+0x5b/0x310 [ 2521.602495] ext4_mb_new_blocks+0x209f/0x45b0 [ 2521.603046] ? trace_hardirqs_on+0x5b/0x180 [ 2521.603551] ? ext4_cache_extents+0x148/0x2d0 [ 2521.604080] ? ext4_discard_preallocations+0xd80/0xd80 [ 2521.604680] ? ext4_ext_search_right+0x2e3/0xbd0 [ 2521.605243] ext4_ext_map_blocks+0x1d49/0x5830 [ 2521.605807] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2521.606419] ? SOFTIRQ_verbose+0x10/0x10 [ 2521.606893] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2521.607496] ? SOFTIRQ_verbose+0x10/0x10 [ 2521.607966] ? ext4_ext_release+0x10/0x10 [ 2521.608451] ? ext4_map_blocks+0x5cd/0x1910 [ 2521.608956] ? lock_release+0x680/0x680 [ 2521.609413] ? ext4_es_lookup_extent+0x48d/0xaa0 [ 2521.609962] ? lock_downgrade+0x6d0/0x6d0 [ 2521.610466] ? down_write_killable+0x180/0x180 [ 2521.610981] ext4_map_blocks+0x63f/0x1910 [ 2521.611482] ? kmem_cache_alloc+0x2a6/0x310 [ 2521.611966] ? __kernel_text_address+0x9/0x40 [ 2521.612466] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2521.612980] ? jbd2__journal_start+0xf3/0x7e0 [ 2521.613493] ? __ext4_journal_start_sb+0x214/0x390 [ 2521.614057] ? __ext4_journal_start_sb+0x1db/0x390 [ 2521.614603] ext4_iomap_begin+0x3ad/0x700 [ 2521.615058] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 2521.615717] ? kasan_save_stack+0x1b/0x40 [ 2521.616174] ? ext4_file_write_iter+0xb26/0x18d0 [ 2521.616694] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 2521.617390] ? splice_direct_to_actor+0x387/0x980 [ 2521.617936] ? do_splice_direct+0x1c4/0x290 [ 2521.618440] ? do_sendfile+0x553/0x1090 [ 2521.618878] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2521.619422] ? do_syscall_64+0x33/0x40 [ 2521.619863] ? entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2521.620511] iomap_apply+0x164/0x810 [ 2521.620927] ? iomap_dio_rw+0x90/0x90 [ 2521.621364] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2521.622021] ? mark_held_locks+0x9e/0xe0 [ 2521.622478] ? filemap_check_errors+0xa5/0x150 [ 2521.622990] __iomap_dio_rw+0x6cd/0x1110 [ 2521.623458] ? iomap_dio_rw+0x90/0x90 [ 2521.623906] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2521.624420] ? ext4_orphan_add+0x253/0x9e0 [ 2521.624909] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 2521.625475] ? ext4_empty_dir+0xae0/0xae0 [ 2521.625988] ? jbd2__journal_start+0xf3/0x7e0 [ 2521.626522] iomap_dio_rw+0x31/0x90 [ 2521.626958] ext4_file_write_iter+0xb26/0x18d0 [ 2521.627529] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2521.628068] ? kasan_save_stack+0x32/0x40 [ 2521.628538] ? kasan_save_stack+0x1b/0x40 [ 2521.628996] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2521.629547] ? iter_file_splice_write+0x16d/0xc30 [ 2521.630088] ? direct_splice_actor+0x10f/0x170 [ 2521.630586] ? splice_direct_to_actor+0x387/0x980 [ 2521.631117] ? do_splice_direct+0x1c4/0x290 [ 2521.631665] ? do_sendfile+0x553/0x1090 [ 2521.632117] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2521.632651] do_iter_readv_writev+0x476/0x750 [ 2521.633264] ? new_sync_write+0x660/0x660 [ 2521.634378] ? selinux_file_permission+0x92/0x520 [ 2521.635401] do_iter_write+0x191/0x670 [ 2521.636222] ? trace_hardirqs_on+0x5b/0x180 [ 2521.637123] vfs_iter_write+0x70/0xa0 [ 2521.638029] iter_file_splice_write+0x762/0xc30 [ 2521.639168] ? generic_splice_sendpage+0x140/0x140 [ 2521.640333] ? avc_policy_seqno+0x9/0x70 [ 2521.641296] ? selinux_file_permission+0x92/0x520 [ 2521.642040] ? lockdep_init_map_type+0x2c7/0x780 [ 2521.642555] ? generic_splice_sendpage+0x140/0x140 [ 2521.643082] direct_splice_actor+0x10f/0x170 [ 2521.643549] splice_direct_to_actor+0x387/0x980 [ 2521.644053] ? pipe_to_sendpage+0x380/0x380 [ 2521.644518] ? do_splice_to+0x160/0x160 [ 2521.644946] ? security_file_permission+0x24e/0x570 [ 2521.645488] do_splice_direct+0x1c4/0x290 [ 2521.646433] ? splice_direct_to_actor+0x980/0x980 [ 2521.647543] ? selinux_file_permission+0x92/0x520 [ 2521.648563] ? security_file_permission+0x24e/0x570 [ 2521.649620] do_sendfile+0x553/0x1090 [ 2521.650740] ? do_pwritev+0x270/0x270 [ 2521.651562] ? wait_for_completion_io+0x270/0x270 [ 2521.652560] ? rcu_read_lock_any_held+0x75/0xa0 [ 2521.653177] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2521.653571] ? vfs_write+0x354/0xa70 [ 2521.653597] __x64_sys_sendfile64+0x1d1/0x210 [ 2521.655353] ? __ia32_sys_sendfile+0x220/0x220 [ 2521.655854] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2521.656446] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2521.657001] do_syscall_64+0x33/0x40 [ 2521.657407] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2521.658517] RIP: 0033:0x7f7d1dff4b19 [ 2521.659385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2521.664549] RSP: 002b:00007f7d1b56a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2521.666564] RAX: ffffffffffffffda RBX: 00007f7d1e107f60 RCX: 00007f7d1dff4b19 [ 2521.668284] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2521.669841] RBP: 00007f7d1b56a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2521.670629] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2521.671374] R13: 00007fff18b5369f R14: 00007f7d1b56a300 R15: 0000000000022000 08:02:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x600, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:02:58 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, @perf_config_ext, 0x8100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_security(0x11, r0, 0x0, 0x0) 08:03:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) (fail_nth: 23) 08:03:18 executing program 2: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x1261, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 08:03:18 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/137, 0x89}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/102, 0x66}], 0x3, 0x8, 0x6aa12b08) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1108, 0x8423, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = dup2(r3, r2) readv(r2, 0x0, 0xfffffffffffffe73) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x1031, &(0x7f0000001240)=""/4108}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) clock_gettime(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0xfffffffffffffed9, r4, {0x2}}, './file0\x00'}) r6 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200), &(0x7f00000000c0)) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000005c0)={"758049b5e5b198a3f9d937e54fe22bd9", 0x0, 0x0, {0x9, 0x200}, {0x4, 0x3f}, 0x100, [0x1, 0xff, 0x1ff, 0x7, 0x1000, 0x6c7b, 0x100000001, 0x77, 0x30, 0x8001, 0x7f, 0x698debf3, 0x9, 0x40, 0x0, 0x1]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000002280)={{r6}, r7, 0x4, @unused=[0x8, 0x37d, 0x6035b083, 0x8], @subvolid=0x9}) clock_gettime(0x1, &(0x7f0000000580)) [ 2541.247085] FAULT_INJECTION: forcing a failure. [ 2541.247085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2541.248386] CPU: 0 PID: 19474 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2541.249116] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2541.250153] Call Trace: [ 2541.250502] dump_stack+0x107/0x167 [ 2541.251065] should_fail.cold+0x5/0xa [ 2541.251530] strncpy_from_user+0x34/0x470 [ 2541.251922] getname_flags.part.0+0x95/0x4f0 [ 2541.252336] getname+0x8e/0xd0 [ 2541.252725] do_sys_openat2+0xf9/0x420 [ 2541.253089] ? build_open_flags+0x6f0/0x6f0 08:03:18 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x2, [0x7a7, 0x0, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) 08:03:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x700, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:03:18 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000003b) [ 2541.253673] ? rcu_read_lock_any_held+0x75/0xa0 [ 2541.254174] __x64_sys_openat+0x13f/0x1f0 [ 2541.254656] ? __ia32_sys_open+0x1c0/0x1c0 [ 2541.255054] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2541.255606] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2541.256083] do_syscall_64+0x33/0x40 [ 2541.256491] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2541.256950] RIP: 0033:0x7f8b5794fa04 [ 2541.257292] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2541.259099] RSP: 002b:00007f8b54f11ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2541.259928] RAX: ffffffffffffffda RBX: 00007f8b579e6970 RCX: 00007f8b5794fa04 [ 2541.260572] RDX: 0000000000000002 RSI: 00007f8b54f12000 RDI: 00000000ffffff9c [ 2541.261213] RBP: 00007f8b54f12000 R08: 0000000000000000 R09: ffffffffffffffff [ 2541.262302] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2541.263917] R13: 0000000000000004 R14: 0000000020000360 R15: 0000000000000004 08:03:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) (fail_nth: 69) 08:03:18 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5327, &(0x7f0000000440)=@disckey={0x2, 0x0, "82ada47325d97f4913eab67f45f8051b13c07023b811c48ee40657e81cfe62cb92e604e9bcd55086db0a1a2e7095bad10c02b2cc36a07c6373d96b8e942b81021f372d7c9361f3aeb0d5dc6b6451d1bb8fcea706d4a74088b40178f4057a239ac0502a37c2376962cda551df057a61c78a2fd44cb5fd30c40f247d680857a97031e4885cc086f74ffa1e55144d240dde2fbd35e099a6b3761f1cc4e577676efe5f13094991f1ea1d6dcc219f56815a02e3e6427dba1d7cd5ed838575f3e98f353699c52cc4fdd515f4224df8d49d5f67be0a6a7d3b83722e9449133c82b886f742588119d0dc3fe6d69466a03f95d342e31699a6157f9d51e1b9c6542d6c5d60f41aee52512f20b99eae0b38067b9902654f02a0606860ff744f2ccdd5a0ca7c4e231cb65bd4445f4f69cb5bda24a729cfa93270cac3903fff4f77b1cf85cfd044025f61568580c07745860dba20f80d92af0b8f0409c6c9886e12488c56d5411aa0f5e8f6d4c3c14b73afa6934d3ae019bfcebcbf7e293cb79a7dcb588795d496ad2f6cd0a8209904e2ec46d5401f87369780d40be7c370d44da03687716be6dda73c62eeefe6cbe5e381b9716ae6d3ee1af560151b8d341a5f1b8685fca41957a99889eb0f3bd0f7de0ffea71e32a11d703c4783c64c5371034149005de778560f257aca78ec573686447facb7ec185b860be18e41944d1490306df1c953c0a3ffc975b090f219da1084c908907918226cf134faad8a5defe3aa3825df1b24f31275a98d23862b167ab8dc2f2435a284cad8a20e7673d783ad860c3ce5b4fdcf938e12df69c6de088dfe3e98a8270ec8aeb74b0188a8fe22cf6715142bf57aba362230698353dab43eee58419272e8028ac3aefaba63a7c8a25ccba5f519cdc61da88a910f040547d2c9ed601259a1d748d295cf51eaf1ece671807207423ebe64141336ff957445b1b90588582cfab585ae10092e789acd5ed886349404a6241851b8977e7e5ad96c3e2001e7c32f482cf64d871cd44af474471856518f6486a5ccfdcd7a164771c7188e6e0e3b17358befbe217eef0b73fa6cbbe61bb64b2c64d09dd3795e0119353086ef4bcc36abe57d83932c66df9d608678b297c5b0b1e899b532d0c37e7f3cdc7fd68446da2f5d90b02c00511a7429b73b95b51b78fb06e3a97f4e5c4a6bea4ec5a10f279814693aa4917dbba798cee12cabf6091c29b701097b224146ac2e076e90ad2e5acabdd78399ca83c829e00bc4f90b0ec00b1e411e823e1ab31193fe37ef4d1fe977f98e724e224f0354be8398722fe39da436aad0ea8cd70000007c2ba06a63d5edcaf3181dfcc91ee258f9455b5d9a479aaa6da4e5cdf0c40e7c056bd46f741d65f2d51136c0bb35f5573797a896bb5add7798c6f6a7b5d82de1bb1c5976d8c6fb067ad7e590ebea9412fe9f00d9f418be72edddae0749d5eff4b3dd25ccefa46522c5e5b960ad796035bcb582946424e0446f6992cefc5ebdac5f2e97e539e220ee2f1c7c7f233582c186dcddbdfc9ce954d85a29195788a3b8a964f281ce77ff06e771ea139b71da9b583f8ff4d4cb97dddfea34839695b81d97eabc250e2c891aecfbb60580312a57662d4eabd2226c406665a61ff59942e2bd3be82fae938be4c04f95f5159e6098dc1400579153fd1c419a3eac4c5b82ac58928a2f52410e915796e51e0b10fb5d9c70d67d5cd0b03ad8cd459cd15e58675f4875b9676b48aa61ed3c3b3b0e7d67203bc50207be4498aa013892a357dda413013c28479e612d739cb4972a0f19b0d77a04319b4d1786f82dd4a99e6d82f70c27a21733c77be8722a7313bcb7da5c6437bb87e59f56bd9c46c3ad50d691f6856719f1d305c5b57fea18d43228d813f9d91825ca830d748f80a9ccfadccfa4baeb4914b4a60b22478a5b2b7fb1156072179b6233f53e964a8182d6c01422d01ecc7983006d06d63cb19486017ffdf19265f83a6ac3fa1d52f003a7a9996e8e3f9ef23f8188ae5e414a443c5f58b7aa9deb97bc9925727fa9124ab667634d64fdcf9ad9375e5ab09f3e85f0b0dbe39395271f38005d6894aa45e68e51ba137ddba579fb864d65a337f881d6b434ca81cc89703f1ac18b56b7c88e9fdcc94d27c73120841522c4c90298d671a2611e2836ada099e789959372e392746e540b1268c5fdebb19339334f57e647d90691c9111d206db0de1d36fe5458a0a024e89d889e3a3f46d28e221e2c58ed45c502c5d08d837d5aa7fa3a50cedf3193a416b6c10123ed14bf36eb9a5c6f4d321ca1b55d1b98c275ea63c0a4dcef800bc3217ef34114f920e0556d2d30ba65f6ae443e4c9eefae05c1f4e2b3faae316f5658571aabbd80db226c5f10d3bf7ba6af81e0795239631a1de0eded351e10d43c38a1df20822d75b6bd5c3ccf21773f8250491b024fcb038ec487fe4b11a75df141483ab51db87be21aa37dd9f37a19367b6313d0bb175c1eeca0c0dc437053ba40385de089c7d06dbfa89851073aeb384bfa805abc50d756305520987ef57db25d7bc4a7841df5b83acf6b40292f46cdad7371b03ab7521cdce4953c932283e784f8ea4ce223746e23b6e100000080f7018db08ada6387e434bb95bae0ef1855dfb39c4b92b418a8bf81327da288cf01270ec2e9a33a21dc3a1f5dc4d0830aeaf7fe1a95d61fa81440205dea9f9cd0e25518035a5a06cc25a60aec547a79eee39941d6df6485aba011e8cdcccee0594769513133d18803e997fc543bcbc267ee0a253f287849619ec2e99daab97a83b622b44c08debfa5e18b62526f15958550390965013992d113275ae2d4ad32ef877b75006d9480809c1400"}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000280)=@v2={0x2, @aes128, 0x2, '\x00', @d}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000520e003ccfbd3536cb00c33600000000"], 0x14}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000000)=0x80) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000237}, 0x8010}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"]) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) creat(&(0x7f0000000100)='./file0\x00', 0x111) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="fe", 0x1, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000000240)) copy_file_range(0xffffffffffffffff, 0x0, r1, &(0x7f0000000080)=0x6f, 0x0, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x3f]}, 0xfffffffffffffd81, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000200)=0x3) [ 2541.298048] FAULT_INJECTION: forcing a failure. [ 2541.298048] name failslab, interval 1, probability 0, space 0, times 0 [ 2541.299160] CPU: 0 PID: 19477 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2541.299792] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2541.299874] __nla_validate_parse: 2 callbacks suppressed [ 2541.299883] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2541.300540] Call Trace: [ 2541.302232] dump_stack+0x107/0x167 [ 2541.302587] should_fail.cold+0x5/0xa [ 2541.302989] ? __es_insert_extent+0xed1/0x1370 [ 2541.303504] should_failslab+0x5/0x20 [ 2541.303856] kmem_cache_alloc+0x5b/0x310 [ 2541.304237] __es_insert_extent+0xed1/0x1370 [ 2541.304673] ext4_es_insert_extent+0x45d/0xf10 [ 2541.305203] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2541.305614] ? lock_downgrade+0x6d0/0x6d0 [ 2541.306031] ? down_write_killable+0x180/0x180 [ 2541.306639] ext4_map_blocks+0x80b/0x1910 [ 2541.307435] ? __kernel_text_address+0x9/0x40 [ 2541.308275] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2541.309106] ? jbd2__journal_start+0xf3/0x7e0 [ 2541.309958] ? __ext4_journal_start_sb+0x214/0x390 [ 2541.310379] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2541.310423] ? __ext4_journal_start_sb+0x1db/0x390 [ 2541.310448] ext4_iomap_begin+0x3ad/0x700 [ 2541.312051] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 2541.312506] ? kasan_save_stack+0x1b/0x40 [ 2541.312891] ? ext4_file_write_iter+0xb26/0x18d0 [ 2541.313335] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 2541.313920] ? splice_direct_to_actor+0x387/0x980 [ 2541.314370] ? do_splice_direct+0x1c4/0x290 [ 2541.314770] ? do_sendfile+0x553/0x1090 [ 2541.315138] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2541.315564] ? do_syscall_64+0x33/0x40 [ 2541.315920] ? entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2541.316412] iomap_apply+0x164/0x810 [ 2541.316758] ? iomap_dio_rw+0x90/0x90 [ 2541.317110] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2541.317653] ? mark_held_locks+0x9e/0xe0 [ 2541.318057] ? filemap_check_errors+0xa5/0x150 [ 2541.318489] __iomap_dio_rw+0x6cd/0x1110 [ 2541.318861] ? iomap_dio_rw+0x90/0x90 [ 2541.319234] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2541.319653] ? ext4_orphan_add+0x253/0x9e0 [ 2541.320041] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 2541.320496] ? ext4_empty_dir+0xae0/0xae0 [ 2541.320875] ? jbd2__journal_start+0xf3/0x7e0 [ 2541.321300] iomap_dio_rw+0x31/0x90 [ 2541.321642] ext4_file_write_iter+0xb26/0x18d0 [ 2541.322107] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2541.322529] ? kasan_save_stack+0x32/0x40 [ 2541.322910] ? kasan_save_stack+0x1b/0x40 [ 2541.323290] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2541.323754] ? iter_file_splice_write+0x16d/0xc30 [ 2541.324192] ? direct_splice_actor+0x10f/0x170 [ 2541.324612] ? splice_direct_to_actor+0x387/0x980 [ 2541.325047] ? do_splice_direct+0x1c4/0x290 [ 2541.325444] ? do_sendfile+0x553/0x1090 [ 2541.325813] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2541.326267] do_iter_readv_writev+0x476/0x750 [ 2541.326686] ? new_sync_write+0x660/0x660 [ 2541.327066] ? selinux_file_permission+0x92/0x520 [ 2541.327530] do_iter_write+0x191/0x670 [ 2541.327898] ? trace_hardirqs_on+0x5b/0x180 [ 2541.329888] vfs_iter_write+0x70/0xa0 [ 2541.330606] iter_file_splice_write+0x762/0xc30 [ 2541.331068] ? generic_splice_sendpage+0x140/0x140 [ 2541.331582] ? avc_policy_seqno+0x9/0x70 [ 2541.331953] ? selinux_file_permission+0x92/0x520 [ 2541.332456] ? lockdep_init_map_type+0x2c7/0x780 [ 2541.332905] ? generic_splice_sendpage+0x140/0x140 [ 2541.333354] direct_splice_actor+0x10f/0x170 [ 2541.333855] splice_direct_to_actor+0x387/0x980 [ 2541.334342] ? pipe_to_sendpage+0x380/0x380 [ 2541.334884] ? do_splice_to+0x160/0x160 [ 2541.335257] ? security_file_permission+0x24e/0x570 [ 2541.335790] do_splice_direct+0x1c4/0x290 [ 2541.336170] ? splice_direct_to_actor+0x980/0x980 [ 2541.336662] ? selinux_file_permission+0x92/0x520 [ 2541.337108] ? security_file_permission+0x24e/0x570 [ 2541.337675] do_sendfile+0x553/0x1090 [ 2541.338077] ? do_pwritev+0x270/0x270 [ 2541.338611] ? wait_for_completion_io+0x270/0x270 [ 2541.339058] ? rcu_read_lock_any_held+0x75/0xa0 [ 2541.339485] ? vfs_write+0x354/0xa70 [ 2541.339837] __x64_sys_sendfile64+0x1d1/0x210 [ 2541.340251] ? __ia32_sys_sendfile+0x220/0x220 [ 2541.340688] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2541.341173] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2541.341766] do_syscall_64+0x33/0x40 [ 2541.342162] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2541.342693] RIP: 0033:0x7f7d1dff4b19 [ 2541.343040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2541.344682] RSP: 002b:00007f7d1b56a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2541.345375] RAX: ffffffffffffffda RBX: 00007f7d1e107f60 RCX: 00007f7d1dff4b19 [ 2541.346043] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2541.346701] RBP: 00007f7d1b56a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2541.347344] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2541.347989] R13: 00007fff18b5369f R14: 00007f7d1b56a300 R15: 0000000000022000 [ 2541.449992] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 08:03:18 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xab, 0x0, 0x0, 0x0, 0x0, 0x200000005e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x48, 0x2, 0x0, 0x7, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r3 = shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x4000) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/50) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=ANY=[@ANYRESHEX=r2, @ANYRES32=r3, @ANYRES16, @ANYRES32, @ANYRES64=r0, @ANYRESOCT, @ANYRESHEX=r2, @ANYRESHEX, @ANYRES16], 0x10b, 0x1) r4 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r4, 0x0, 0x880) syz_open_dev$tty1(0xc, 0x4, 0x1) shmdt(0x0) lseek(r1, 0x2, 0x4) r5 = shmget(0x1, 0x4000, 0xf97d709ca5b5f77f, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmget(0x0, 0x3000, 0x240, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000380)=""/220) shmctl$IPC_RMID(0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 08:03:38 executing program 5: r0 = clone3(&(0x7f0000000000)={0x2000000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0xffffffffffffff47, 0x0, 0x0}, 0x58) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x894a, &(0x7f0000006900)={'wlan0\x00', @ifru_data=0x0}) fcntl$setown(r2, 0x8, r0) 08:03:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000003c) 08:03:38 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x181142, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000040)) r2 = gettid() process_vm_readv(r2, &(0x7f0000000400)=[{&(0x7f0000000140)=""/74, 0x4a}, {&(0x7f00000001c0)=""/158, 0x9e}, {&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f0000000280)=""/41, 0x29}, {&(0x7f0000000380)=""/124, 0x7c}], 0x5, &(0x7f0000000480), 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8, 0x11000, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x7f, 0xf1}, 0x4000, 0x7f, 0x31b, 0x1, 0x1, 0x8, 0x6, 0x0, 0xe3c, 0x0, 0x3}, r2, 0x7, r0, 0x2) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x100000001) 08:03:38 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x900, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:03:38 executing program 0: r0 = syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f00000003c0)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x262}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x7fff}, {&(0x7f0000000380)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00ff00000ffcc3e3afda55a8aa6f31852a47e411e524388800aa223e430877c71f7e4bdbca21e396f498b3afa6d56e1aee1d0e180028"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x4, 0x0, r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000000c0)='./file0/file0\x00', 0x254, 0x100}, 0x101) fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001180)={0x0, 0x0, 0x0}, &(0x7f00000011c0)=0xc) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r5}}]}}) r6 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="01fe00000100060000f14784da120002", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=0xee01, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="040006000000000008000600", @ANYRES32=r2, @ANYBLOB="08000600", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="10000400000000002000010000000000"], 0x5c, 0x2) getdents(r0, 0x0, 0x0) [ 2561.277248] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2561.279722] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:03:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) (fail_nth: 70) 08:03:38 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x2, [0x0, 0xbe8, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) 08:03:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) (fail_nth: 24) [ 2561.330508] FAULT_INJECTION: forcing a failure. [ 2561.330508] name failslab, interval 1, probability 0, space 0, times 0 [ 2561.331620] CPU: 1 PID: 19630 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2561.332269] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2561.333044] Call Trace: [ 2561.333313] dump_stack+0x107/0x167 [ 2561.333667] should_fail.cold+0x5/0xa [ 2561.334046] ? __alloc_file+0x21/0x320 [ 2561.334456] should_failslab+0x5/0x20 [ 2561.334827] kmem_cache_alloc+0x5b/0x310 [ 2561.335220] ? __lock_acquire+0xbb1/0x5b00 [ 2561.335629] __alloc_file+0x21/0x320 [ 2561.335990] alloc_empty_file+0x6d/0x170 [ 2561.336385] path_openat+0xe3/0x26e0 [ 2561.336760] ? path_lookupat+0x860/0x860 [ 2561.337159] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2561.337663] ? SOFTIRQ_verbose+0x10/0x10 [ 2561.338045] ? find_held_lock+0x2c/0x110 [ 2561.338454] do_filp_open+0x190/0x3e0 [ 2561.338826] ? may_open_dev+0xf0/0xf0 [ 2561.339202] ? __alloc_fd+0x2b8/0x630 [ 2561.339555] ? lock_downgrade+0x6d0/0x6d0 [ 2561.339947] ? do_raw_spin_lock+0x121/0x260 [ 2561.340366] ? rwlock_bug.part.0+0x90/0x90 [ 2561.340781] ? _raw_spin_unlock+0x1a/0x30 [ 2561.341179] ? __alloc_fd+0x2b8/0x630 [ 2561.341556] do_sys_openat2+0x171/0x420 [ 2561.341944] ? build_open_flags+0x6f0/0x6f0 [ 2561.342392] ? rcu_read_lock_any_held+0x75/0xa0 [ 2561.342845] __x64_sys_openat+0x13f/0x1f0 [ 2561.343246] ? __ia32_sys_open+0x1c0/0x1c0 [ 2561.343657] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2561.344154] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2561.344651] do_syscall_64+0x33/0x40 [ 2561.345012] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2561.345506] RIP: 0033:0x7f8b5794fa04 [ 2561.345873] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2561.347612] RSP: 002b:00007f8b54f11ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2561.348335] RAX: ffffffffffffffda RBX: 00007f8b579e6970 RCX: 00007f8b5794fa04 [ 2561.349008] RDX: 0000000000000002 RSI: 00007f8b54f12000 RDI: 00000000ffffff9c [ 2561.349682] RBP: 00007f8b54f12000 R08: 0000000000000000 R09: ffffffffffffffff [ 2561.350386] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2561.351057] R13: 0000000000000004 R14: 0000000020000360 R15: 0000000000000004 08:03:38 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0xec0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:03:38 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x894a, &(0x7f0000006900)={'wlan0\x00', @ifru_data=0x0}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f00000000c0)) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) pread64(r4, &(0x7f0000000140)=""/100, 0x64, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 08:03:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) (fail_nth: 25) [ 2561.461395] FAULT_INJECTION: forcing a failure. [ 2561.461395] name failslab, interval 1, probability 0, space 0, times 0 [ 2561.462679] CPU: 0 PID: 19730 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2561.463376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2561.464204] Call Trace: [ 2561.464487] dump_stack+0x107/0x167 [ 2561.464866] should_fail.cold+0x5/0xa [ 2561.465265] ? create_object.isra.0+0x3a/0xa20 [ 2561.465741] should_failslab+0x5/0x20 [ 2561.466134] kmem_cache_alloc+0x5b/0x310 [ 2561.466580] create_object.isra.0+0x3a/0xa20 [ 2561.467029] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2561.467605] kmem_cache_alloc+0x159/0x310 [ 2561.468041] __alloc_file+0x21/0x320 [ 2561.468461] alloc_empty_file+0x6d/0x170 [ 2561.468882] path_openat+0xe3/0x26e0 [ 2561.469281] ? path_lookupat+0x860/0x860 [ 2561.469705] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2561.470256] ? SOFTIRQ_verbose+0x10/0x10 [ 2561.470674] ? find_held_lock+0x2c/0x110 [ 2561.471102] do_filp_open+0x190/0x3e0 [ 2561.471501] ? may_open_dev+0xf0/0xf0 [ 2561.471900] ? __alloc_fd+0x2b8/0x630 [ 2561.472296] ? lock_downgrade+0x6d0/0x6d0 [ 2561.472736] ? do_raw_spin_lock+0x121/0x260 [ 2561.473187] ? rwlock_bug.part.0+0x90/0x90 [ 2561.473614] ? _raw_spin_unlock+0x1a/0x30 [ 2561.474043] ? __alloc_fd+0x2b8/0x630 [ 2561.474475] do_sys_openat2+0x171/0x420 [ 2561.474892] ? build_open_flags+0x6f0/0x6f0 [ 2561.475350] ? rcu_read_lock_any_held+0x75/0xa0 [ 2561.475836] __x64_sys_openat+0x13f/0x1f0 [ 2561.476267] ? __ia32_sys_open+0x1c0/0x1c0 [ 2561.476722] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2561.477262] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2561.477797] do_syscall_64+0x33/0x40 [ 2561.478196] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2561.478738] RIP: 0033:0x7f8b5794fa04 [ 2561.479130] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2561.480956] RSP: 002b:00007f8b54f11ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2561.481773] RAX: ffffffffffffffda RBX: 00007f8b579e6970 RCX: 00007f8b5794fa04 [ 2561.482682] RDX: 0000000000000002 RSI: 00007f8b54f12000 RDI: 00000000ffffff9c [ 2561.483397] RBP: 00007f8b54f12000 R08: 0000000000000000 R09: ffffffffffffffff [ 2561.484103] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2561.484826] R13: 0000000000000004 R14: 0000000020000360 R15: 0000000000000004 08:03:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) (fail_nth: 26) [ 2561.553602] FAULT_INJECTION: forcing a failure. [ 2561.553602] name failslab, interval 1, probability 0, space 0, times 0 [ 2561.554810] CPU: 0 PID: 19734 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2561.555484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2561.556285] Call Trace: [ 2561.556557] dump_stack+0x107/0x167 [ 2561.556928] should_fail.cold+0x5/0xa [ 2561.557317] ? security_file_alloc+0x34/0x170 [ 2561.557765] should_failslab+0x5/0x20 [ 2561.558137] kmem_cache_alloc+0x5b/0x310 [ 2561.558540] security_file_alloc+0x34/0x170 [ 2561.558977] __alloc_file+0xb7/0x320 [ 2561.559352] alloc_empty_file+0x6d/0x170 [ 2561.559761] path_openat+0xe3/0x26e0 [ 2561.560144] ? path_lookupat+0x860/0x860 [ 2561.560558] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2561.561081] ? SOFTIRQ_verbose+0x10/0x10 [ 2561.561488] ? find_held_lock+0x2c/0x110 [ 2561.561906] do_filp_open+0x190/0x3e0 [ 2561.562307] ? may_open_dev+0xf0/0xf0 [ 2561.562697] ? __alloc_fd+0x2b8/0x630 [ 2561.563080] ? lock_downgrade+0x6d0/0x6d0 [ 2561.563471] ? do_raw_spin_lock+0x121/0x260 [ 2561.563897] ? rwlock_bug.part.0+0x90/0x90 [ 2561.564332] ? _raw_spin_unlock+0x1a/0x30 [ 2561.564745] ? __alloc_fd+0x2b8/0x630 [ 2561.565138] do_sys_openat2+0x171/0x420 [ 2561.565542] ? build_open_flags+0x6f0/0x6f0 [ 2561.565986] ? rcu_read_lock_any_held+0x75/0xa0 [ 2561.566481] __x64_sys_openat+0x13f/0x1f0 [ 2561.566895] ? __ia32_sys_open+0x1c0/0x1c0 [ 2561.567324] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2561.567842] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2561.568357] do_syscall_64+0x33/0x40 [ 2561.568730] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2561.569238] RIP: 0033:0x7f8b5794fa04 [ 2561.569613] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2561.571414] RSP: 002b:00007f8b54f11ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2561.572159] RAX: ffffffffffffffda RBX: 00007f8b579e6970 RCX: 00007f8b5794fa04 [ 2561.572858] RDX: 0000000000000002 RSI: 00007f8b54f12000 RDI: 00000000ffffff9c [ 2561.573546] RBP: 00007f8b54f12000 R08: 0000000000000000 R09: ffffffffffffffff [ 2561.574250] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2561.574933] R13: 0000000000000004 R14: 0000000020000360 R15: 0000000000000004 [ 2561.635555] FAULT_INJECTION: forcing a failure. [ 2561.635555] name failslab, interval 1, probability 0, space 0, times 0 [ 2561.636706] CPU: 0 PID: 19731 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2561.637382] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2561.638187] Call Trace: [ 2561.638478] dump_stack+0x107/0x167 [ 2561.638693] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2561.638851] should_fail.cold+0x5/0xa [ 2561.640065] ? create_object.isra.0+0x3a/0xa20 [ 2561.640528] should_failslab+0x5/0x20 [ 2561.640910] kmem_cache_alloc+0x5b/0x310 [ 2561.641318] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2561.641333] create_object.isra.0+0x3a/0xa20 [ 2561.641356] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2561.643079] kmem_cache_alloc+0x159/0x310 [ 2561.643505] __es_insert_extent+0xed1/0x1370 [ 2561.643960] ext4_es_insert_extent+0x45d/0xf10 [ 2561.644426] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2561.644856] ? lock_downgrade+0x6d0/0x6d0 [ 2561.645292] ? down_write_killable+0x180/0x180 [ 2561.645763] ext4_map_blocks+0x80b/0x1910 [ 2561.646200] ? __kernel_text_address+0x9/0x40 [ 2561.646660] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2561.647115] ? jbd2__journal_start+0xf3/0x7e0 [ 2561.647569] ? __ext4_journal_start_sb+0x214/0x390 [ 2561.648051] ? __ext4_journal_start_sb+0x1db/0x390 [ 2561.648541] ext4_iomap_begin+0x3ad/0x700 [ 2561.648966] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 2561.649450] ? kasan_save_stack+0x1b/0x40 [ 2561.649862] ? ext4_file_write_iter+0xb26/0x18d0 [ 2561.650363] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 2561.650984] ? splice_direct_to_actor+0x387/0x980 [ 2561.651441] ? do_splice_direct+0x1c4/0x290 [ 2561.651863] ? do_sendfile+0x553/0x1090 [ 2561.652263] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2561.652724] ? do_syscall_64+0x33/0x40 [ 2561.653113] ? entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2561.653641] iomap_apply+0x164/0x810 [ 2561.654017] ? iomap_dio_rw+0x90/0x90 [ 2561.654422] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2561.655001] ? mark_held_locks+0x9e/0xe0 [ 2561.655423] ? filemap_check_errors+0xa5/0x150 [ 2561.655883] __iomap_dio_rw+0x6cd/0x1110 [ 2561.656285] ? iomap_dio_rw+0x90/0x90 [ 2561.656685] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2561.657140] ? ext4_orphan_add+0x253/0x9e0 [ 2561.657558] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 2561.658046] ? ext4_empty_dir+0xae0/0xae0 [ 2561.658475] ? jbd2__journal_start+0xf3/0x7e0 [ 2561.658927] iomap_dio_rw+0x31/0x90 [ 2561.659297] ext4_file_write_iter+0xb26/0x18d0 [ 2561.659767] ? ext4_file_read_iter+0x4c0/0x4c0 [ 2561.660220] ? kasan_save_stack+0x32/0x40 [ 2561.660631] ? kasan_save_stack+0x1b/0x40 [ 2561.661045] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2561.661544] ? iter_file_splice_write+0x16d/0xc30 [ 2561.662025] ? direct_splice_actor+0x10f/0x170 [ 2561.662496] ? splice_direct_to_actor+0x387/0x980 [ 2561.662969] ? do_splice_direct+0x1c4/0x290 [ 2561.663396] ? do_sendfile+0x553/0x1090 [ 2561.663791] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2561.664249] do_iter_readv_writev+0x476/0x750 [ 2561.664691] ? new_sync_write+0x660/0x660 [ 2561.665105] ? selinux_file_permission+0x92/0x520 [ 2561.665596] do_iter_write+0x191/0x670 [ 2561.665992] ? trace_hardirqs_on+0x5b/0x180 [ 2561.666452] vfs_iter_write+0x70/0xa0 [ 2561.666835] iter_file_splice_write+0x762/0xc30 [ 2561.667315] ? generic_splice_sendpage+0x140/0x140 [ 2561.667815] ? avc_policy_seqno+0x9/0x70 [ 2561.668220] ? selinux_file_permission+0x92/0x520 [ 2561.668703] ? lockdep_init_map_type+0x2c7/0x780 [ 2561.669177] ? generic_splice_sendpage+0x140/0x140 [ 2561.669662] direct_splice_actor+0x10f/0x170 [ 2561.670100] splice_direct_to_actor+0x387/0x980 [ 2561.670589] ? pipe_to_sendpage+0x380/0x380 [ 2561.671026] ? do_splice_to+0x160/0x160 [ 2561.671427] ? security_file_permission+0x24e/0x570 [ 2561.671928] do_splice_direct+0x1c4/0x290 [ 2561.672344] ? splice_direct_to_actor+0x980/0x980 [ 2561.672817] ? selinux_file_permission+0x92/0x520 [ 2561.673299] ? security_file_permission+0x24e/0x570 [ 2561.673808] do_sendfile+0x553/0x1090 [ 2561.674223] ? do_pwritev+0x270/0x270 [ 2561.674616] ? wait_for_completion_io+0x270/0x270 [ 2561.675101] ? rcu_read_lock_any_held+0x75/0xa0 [ 2561.675558] ? vfs_write+0x354/0xa70 [ 2561.675941] __x64_sys_sendfile64+0x1d1/0x210 [ 2561.676390] ? __ia32_sys_sendfile+0x220/0x220 [ 2561.676850] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2561.677349] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2561.677865] do_syscall_64+0x33/0x40 [ 2561.678254] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2561.678763] RIP: 0033:0x7f7d1dff4b19 [ 2561.679139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2561.680892] RSP: 002b:00007f7d1b549188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2561.681635] RAX: ffffffffffffffda RBX: 00007f7d1e108020 RCX: 00007f7d1dff4b19 [ 2561.682349] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2561.683045] RBP: 00007f7d1b5491d0 R08: 0000000000000000 R09: 0000000000000000 [ 2561.683738] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 2561.684437] R13: 00007fff18b5369f R14: 00007f7d1b549300 R15: 0000000000022000 08:03:38 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0xf00, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2561.703172] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2561.715250] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2561.717696] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:03:38 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x33, 0x0, @private=0xa010102, @remote, {[@timestamp_addr={0x7, 0x4, 0x0, 0x3}]}}, {0x0, 0x0, 0x24, 0x0, @wg=@data={0x4, 0x209e, 0x390, "5bc31319ad693231f0ba4dbc"}}}}}}, 0x0) 08:03:38 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x1ed2, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:03:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x4000) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x0, r1, 0x1, 0x9, 0x81, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r3, 0x894a, &(0x7f0000006900)={'wlan0\x00', @ifru_data=0x0}) dup2(0xffffffffffffffff, r3) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x0, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r4, 0x3, 0x4077, 0x8000) 08:03:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) (fail_nth: 27) 08:03:38 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x4000010, r0, 0x8000000) r3 = eventfd2(0x0, 0x800) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4303, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x3]}, 0x8, 0x80000) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 2561.882224] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2561.904727] FAULT_INJECTION: forcing a failure. [ 2561.904727] name failslab, interval 1, probability 0, space 0, times 0 [ 2561.905866] CPU: 1 PID: 19752 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2561.906243] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 2561.906707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2561.906721] Call Trace: [ 2561.908501] dump_stack+0x107/0x167 [ 2561.908830] should_fail.cold+0x5/0xa [ 2561.909196] ? create_object.isra.0+0x3a/0xa20 [ 2561.909644] should_failslab+0x5/0x20 [ 2561.910016] kmem_cache_alloc+0x5b/0x310 [ 2561.910460] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2561.910996] create_object.isra.0+0x3a/0xa20 [ 2561.911424] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2561.911921] kmem_cache_alloc+0x159/0x310 [ 2561.912354] security_file_alloc+0x34/0x170 [ 2561.912782] __alloc_file+0xb7/0x320 [ 2561.913157] alloc_empty_file+0x6d/0x170 [ 2561.913563] path_openat+0xe3/0x26e0 [ 2561.913938] ? path_lookupat+0x860/0x860 [ 2561.914361] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2561.914874] ? SOFTIRQ_verbose+0x10/0x10 [ 2561.915274] ? find_held_lock+0x2c/0x110 [ 2561.915681] do_filp_open+0x190/0x3e0 [ 2561.916051] ? may_open_dev+0xf0/0xf0 [ 2561.916433] ? __alloc_fd+0x2b8/0x630 [ 2561.916809] ? lock_downgrade+0x6d0/0x6d0 [ 2561.917218] ? do_raw_spin_lock+0x121/0x260 [ 2561.917651] ? rwlock_bug.part.0+0x90/0x90 [ 2561.918074] ? _raw_spin_unlock+0x1a/0x30 [ 2561.918506] ? __alloc_fd+0x2b8/0x630 [ 2561.918884] do_sys_openat2+0x171/0x420 [ 2561.919270] ? build_open_flags+0x6f0/0x6f0 [ 2561.919695] ? rcu_read_lock_any_held+0x75/0xa0 [ 2561.920150] __x64_sys_openat+0x13f/0x1f0 [ 2561.920600] ? __ia32_sys_open+0x1c0/0x1c0 [ 2561.921020] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2561.921540] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2561.922045] do_syscall_64+0x33/0x40 [ 2561.925452] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2561.925956] RIP: 0033:0x7f8b5794fa04 [ 2561.926347] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2561.928187] RSP: 002b:00007f8b54f11ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2561.929009] RAX: ffffffffffffffda RBX: 00007f8b579e6970 RCX: 00007f8b5794fa04 [ 2561.929716] RDX: 0000000000000002 RSI: 00007f8b54f12000 RDI: 00000000ffffff9c [ 2561.930490] RBP: 00007f8b54f12000 R08: 0000000000000000 R09: ffffffffffffffff [ 2561.931162] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2561.931898] R13: 0000000000000004 R14: 0000000020000360 R15: 0000000000000004 [ 2561.940798] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2562.354344] netlink: 'syz-executor.0': attribute type 11 has an invalid length. 08:04:05 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x2, [0x0, 0xbe8, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) 08:04:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x4800, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2588.924475] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2588.930209] FAULT_INJECTION: forcing a failure. [ 2588.930209] name failslab, interval 1, probability 0, space 0, times 0 [ 2588.931997] CPU: 0 PID: 19876 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2588.933019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2588.933847] Call Trace: [ 2588.934115] dump_stack+0x107/0x167 [ 2588.934525] should_fail.cold+0x5/0xa [ 2588.934929] ? __d_alloc+0x2a/0x990 [ 2588.935291] should_failslab+0x5/0x20 [ 2588.935752] kmem_cache_alloc+0x5b/0x310 [ 2588.936155] __d_alloc+0x2a/0x990 [ 2588.936559] d_alloc_parallel+0x111/0x1bc0 [ 2588.936967] ? __d_lookup+0x396/0x760 [ 2588.937317] ? lock_downgrade+0x6d0/0x6d0 [ 2588.937759] ? find_held_lock+0x2c/0x110 [ 2588.938164] ? __d_lookup_rcu+0x6d0/0x6d0 [ 2588.938744] ? __d_lookup+0x3bf/0x760 [ 2588.939125] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2588.939698] lookup_open.isra.0+0x962/0x1270 [ 2588.940139] ? vfs_tmpfile+0x350/0x350 [ 2588.940637] ? __mnt_want_write+0x196/0x280 [ 2588.941070] path_openat+0x96f/0x26e0 [ 2588.941506] ? path_lookupat+0x860/0x860 [ 2588.941904] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2588.942406] ? SOFTIRQ_verbose+0x10/0x10 [ 2588.942879] ? find_held_lock+0x2c/0x110 [ 2588.943288] do_filp_open+0x190/0x3e0 [ 2588.943719] ? may_open_dev+0xf0/0xf0 [ 2588.944103] ? do_raw_spin_lock+0x121/0x260 [ 2588.944577] ? rwlock_bug.part.0+0x90/0x90 [ 2588.944808] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2588.944996] ? _raw_spin_unlock+0x1a/0x30 [ 2588.946211] ? __alloc_fd+0x2b8/0x630 [ 2588.946733] do_sys_openat2+0x171/0x420 [ 2588.947124] ? build_open_flags+0x6f0/0x6f0 [ 2588.947606] ? rcu_read_lock_any_held+0x75/0xa0 [ 2588.948058] __x64_sys_openat+0x13f/0x1f0 [ 2588.948511] ? __ia32_sys_open+0x1c0/0x1c0 [ 2588.948927] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2588.949639] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2588.950149] do_syscall_64+0x33/0x40 [ 2588.950583] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2588.951091] RIP: 0033:0x7f8b5794fa04 [ 2588.951517] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2588.953288] RSP: 002b:00007f8b54f11ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2588.954092] RAX: ffffffffffffffda RBX: 00007f8b579e6970 RCX: 00007f8b5794fa04 [ 2588.954904] RDX: 0000000000000002 RSI: 00007f8b54f12000 RDI: 00000000ffffff9c [ 2588.955647] RBP: 00007f8b54f12000 R08: 0000000000000000 R09: ffffffffffffffff [ 2588.956349] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2588.957102] R13: 0000000000000004 R14: 0000000020000360 R15: 0000000000000004 08:04:05 executing program 2: syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbd8bbbbbbbbbbbbbbbb86dd6096151700383a00fc020000000000000000000000000000ff020000000000000000000000000001880868b00502009078000000006011fec700003a00ff020000000000000000000000000001ff010000000000000000000000000001813282"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) write$tun(r1, &(0x7f00000000c0)={@val={0x0, 0x8863}, @void, @ipv6=@gre_packet={0x1, 0x6, "23a7ef", 0x39a, 0x2f, 0xff, @ipv4={'\x00', '\xff\xff', @broadcast}, @private1, {[@srh={0xc, 0xa, 0x4, 0x5, 0x5, 0x0, 0x4, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @local, @dev={0xfe, 0x80, '\x00', 0x1f}, @local]}, @srh={0x3c, 0x4, 0x4, 0x2, 0x1, 0x0, 0x20, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote]}, @hopopts={0x5c, 0x9, '\x00', [@ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0x4, [0x0, 0x40, 0x3ff, 0x2, 0x8]}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x40, 0x81, [0x6]}}]}, @hopopts={0x2f, 0x6, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x1, 0x7f, [0x0, 0x3]}}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x1ff}, @enc_lim={0x4, 0x1, 0x4}]}, @srh={0x87, 0x8, 0x4, 0x4, 0x7, 0x0, 0x7, [@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, @private1, @mcast1]}, @fragment={0x2e, 0x0, 0x9c, 0x0, 0x0, 0x7, 0x65}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x55, 0x3, [], "ad82462f13c7b474439a2043d46443314bf2132694db087888060e32a211c10a078e6787e68866a95caf30235989bcfb3b24eb5c7477e78f6da21c8a2f3a0b23ad7162fb0725a67910b51dd0af8a3aaff3c74114e7"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0xfffb], "9763ff1689b2aa483eba6eb4a941b2a7028c8fa74f750aee42f00ea32526f9b4725c8a8271ba3e76b7812564b61d14f0bbc4761de15606e37641243ed671f2c2595aea1e46908d88d0982907eea488ff2f6a5ff9f43bfd2f7db70def6b9584d9a70acd2b59b09c5510564969b9aac5019fcba4da55107740a491dd881ba0f7194cca39cfbb4d36b82442f3c838531ddc511c4b95de1a5dffd527b9da5258ec28c18a94f2af90d6a1b7c32fb0d7878410146700d48a89a219014ef79b2ff6d40129"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x9d7, 0x20, 0x5], "842e8b0dad46069697105854202d9ec86b35bc982dd52fdee5405fa0d6e30b2e85e0723927b849acc39c95b70cb7260a346a2dffc0ef487c86cf93773b79c5e0a7bb0d6271b6c13fefaedbe4d3f3272207"}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x8, 0x0, 0x0, 0x3, 0x1, 0x3}, 0x1, {0xe84}}}, {0x8, 0x22eb, 0x4, {{0xd, 0x2, 0x1f, 0x2, 0x1, 0x3, 0x6}, 0x2, {0x9, 0xa5, 0x0, 0x1e, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x2, "ff7c095ab006aff8eb7bd5c344895039bf07976f416d64de96b10eefa985e76d0bbde9f27672566a97c61939a3cea8ce8adafbdb41a346345433a373ad459f3b07d1f0a74a662f3d6bf1b6ec8acee858dca2367f98d1dbf8139b821cfa9ba1dc7a78b791f341e99d74cd054e341e188f8771c92a5dceac14080ff97ffc6c5b43f5f47205020ce3"}}}}}, 0x3c6) 08:04:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) 08:04:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) (fail_nth: 28) 08:04:05 executing program 5: r0 = open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), 0x0, 0x0, 0x3) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)={0x28, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5fe, 0x0, 0x0, @u32}, @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @binary="da"}]}]}, 0x28}}, 0x0) r4 = openat2(r3, &(0x7f0000000280)='./file1\x00', &(0x7f0000000340)={0x52ac0, 0x107, 0x14}, 0x18) ioctl$RNDZAPENTCNT(r4, 0x5204, &(0x7f0000000380)=0x7851669e) getdents64(r0, &(0x7f0000000140)=""/255, 0xff) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRES16], 0x14}}, 0x4090) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fadvise64(r6, 0x0, 0x0, 0x1) readv(r6, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/21, 0x200001d5}], 0x1) timerfd_settime(r6, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) open_tree(r0, &(0x7f0000000100)='./file1\x00', 0x0) unshare(0x48020200) 08:04:05 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000041) 08:04:05 executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0xa2) ioctl$CDROMPLAYTRKIND(0xffffffffffffffff, 0x5304, &(0x7f0000000180)={0x9c, 0x0, 0x8, 0x80}) signalfd(r0, &(0x7f0000000040)={[0x60]}, 0x8) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x108}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x6) getgroups(0x0, 0x0) r2 = getegid() r3 = fork() ptrace(0x10, r3) wait4(r3, 0x0, 0x8, 0x0) lstat(&(0x7f0000000000)='./file1\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000100)=[r4, r2, r2]) fork() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)) fork() r5 = getpgid(r3) move_pages(r5, 0x3, &(0x7f0000000280)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil], 0x0, 0x0, 0x0) setresgid(r2, 0x0, r2) ptrace(0x11, r3) 08:04:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x4c00, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:04:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) (fail_nth: 29) [ 2589.053877] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2589.089726] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2589.100986] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2589.141062] FAULT_INJECTION: forcing a failure. [ 2589.141062] name failslab, interval 1, probability 0, space 0, times 0 [ 2589.142321] CPU: 0 PID: 19893 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2589.143114] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2589.143960] Call Trace: [ 2589.144232] dump_stack+0x107/0x167 [ 2589.144649] should_fail.cold+0x5/0xa [ 2589.145026] ? create_object.isra.0+0x3a/0xa20 [ 2589.145525] should_failslab+0x5/0x20 [ 2589.145902] kmem_cache_alloc+0x5b/0x310 [ 2589.146311] create_object.isra.0+0x3a/0xa20 [ 2589.146803] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2589.147305] kmem_cache_alloc+0x159/0x310 [ 2589.147803] __d_alloc+0x2a/0x990 [ 2589.148159] d_alloc_parallel+0x111/0x1bc0 [ 2589.148639] ? __d_lookup+0x396/0x760 [ 2589.149021] ? lock_downgrade+0x6d0/0x6d0 [ 2589.149457] ? find_held_lock+0x2c/0x110 [ 2589.149861] ? __d_lookup_rcu+0x6d0/0x6d0 [ 2589.150283] ? __d_lookup+0x3bf/0x760 [ 2589.150730] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2589.151250] lookup_open.isra.0+0x962/0x1270 [ 2589.151748] ? vfs_tmpfile+0x350/0x350 [ 2589.152158] ? __mnt_want_write+0x196/0x280 [ 2589.152684] path_openat+0x96f/0x26e0 [ 2589.153072] ? path_lookupat+0x860/0x860 [ 2589.153537] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2589.154047] ? SOFTIRQ_verbose+0x10/0x10 [ 2589.154498] ? find_held_lock+0x2c/0x110 [ 2589.154937] do_filp_open+0x190/0x3e0 [ 2589.155321] ? may_open_dev+0xf0/0xf0 [ 2589.155768] ? do_raw_spin_lock+0x121/0x260 [ 2589.156193] ? rwlock_bug.part.0+0x90/0x90 [ 2589.156679] ? _raw_spin_unlock+0x1a/0x30 [ 2589.157082] ? __alloc_fd+0x2b8/0x630 [ 2589.157562] do_sys_openat2+0x171/0x420 [ 2589.157962] ? build_open_flags+0x6f0/0x6f0 [ 2589.158403] ? rcu_read_lock_any_held+0x75/0xa0 [ 2589.158947] __x64_sys_openat+0x13f/0x1f0 [ 2589.159367] ? __ia32_sys_open+0x1c0/0x1c0 [ 2589.159855] do_syscall_64+0x33/0x40 [ 2589.160236] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2589.160786] RIP: 0033:0x7f8b5794fa04 [ 2589.161165] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2589.163088] RSP: 002b:00007f8b54f11ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2589.164695] RAX: ffffffffffffffda RBX: 00007f8b579e6970 RCX: 00007f8b5794fa04 [ 2589.165923] RDX: 0000000000000002 RSI: 00007f8b54f12000 RDI: 00000000ffffff9c [ 2589.166714] RBP: 00007f8b54f12000 R08: 0000000000000000 R09: ffffffffffffffff [ 2589.168987] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2589.169730] R13: 0000000000000004 R14: 0000000020000360 R15: 0000000000000004 08:04:06 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x6800, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2589.228609] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2589.246195] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:04:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) (fail_nth: 30) 08:04:06 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x2, [0x0, 0xbe8, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) 08:04:06 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x6c00, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2589.423519] FAULT_INJECTION: forcing a failure. [ 2589.423519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2589.424822] CPU: 0 PID: 19981 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2589.425585] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2589.426468] Call Trace: [ 2589.426778] dump_stack+0x107/0x167 [ 2589.427184] should_fail.cold+0x5/0xa [ 2589.427602] _copy_to_user+0x2e/0x180 [ 2589.428035] simple_read_from_buffer+0xcc/0x160 [ 2589.428553] proc_fail_nth_read+0x198/0x230 [ 2589.429027] ? proc_sessionid_read+0x230/0x230 [ 2589.430138] ? security_file_permission+0x24e/0x570 [ 2589.430698] ? perf_trace_initcall_start+0x101/0x380 [ 2589.431975] ? proc_sessionid_read+0x230/0x230 [ 2589.432557] vfs_read+0x228/0x580 [ 2589.433389] ksys_read+0x12d/0x260 [ 2589.434327] ? vfs_write+0xa70/0xa70 [ 2589.435316] do_syscall_64+0x33/0x40 [ 2589.436263] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2589.437580] RIP: 0033:0x7f8b5794f69c [ 2589.438528] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2589.443196] RSP: 002b:00007f8b54f12170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2589.445105] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f8b5794f69c [ 2589.446908] RDX: 000000000000000f RSI: 00007f8b54f121e0 RDI: 0000000000000003 [ 2589.448712] RBP: 00007f8b54f121d0 R08: 0000000000000000 R09: ffffffffffffffff [ 2589.450449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2589.452270] R13: 00007ffe57dc118f R14: 00007f8b54f12300 R15: 0000000000022000 08:04:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000042) 08:04:06 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x10000000, 0x0, 0x0, 0xffffffff}, 0xfffffffc) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2589.541939] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:04:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000002) [ 2589.571920] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:04:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) [ 2589.609351] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 08:04:25 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {0x17}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x6c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x20040004) ftruncate(0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x0) lstat(0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000040)={{}, {}, 0x0, 0x6}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) io_setup(0x3, &(0x7f0000000000)=0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r3, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0x6a, 0x101, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x20, 0x0, 0x61, 0x6}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c98bb4b", @ANYRES16=0x0, @ANYBLOB="100b2abd7000fcdbdf250f000000280007800c000300ff030000000000000c00040020000000000000000c0004008000000000000000500006804200040067636d28616573290000000000000000000000000000000000000000000000001a0000009371ee0fe07152927037eaa472a40cef7cf2da3b923fb8bcfaf8000004000200040002000c00028008000100000000002400098008000200010100000800020003000000080001000080000008000100000000001400078008000100080000000800020006000000240003800800020003775351080003000180000008000200030000000800030008000000"], 0xf4}, 0x1, 0x0, 0x0, 0x4080}, 0x11) close(r5) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 08:04:25 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x7400, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:04:25 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x2, [0x7a7, 0xbe8, 0x0, 0x9a2]}) acct(0x0) unshare(0x4a060400) 08:04:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000003) 08:04:25 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x87) memfd_create(&(0x7f0000000040)='\x00', 0x0) sendmsg$inet6(r0, 0x0, 0x80) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x3ff) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x1100, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 08:04:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) 08:04:25 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000043) 08:04:25 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)=""/49, 0x31}, {&(0x7f0000000040)=""/97, 0x61}, {&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000000100)}], 0x4, 0x2, 0x5) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000740), 0x0) [ 2608.189936] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2608.203440] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2608.243919] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 08:04:25 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x7a00, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:04:25 executing program 5: r0 = open(&(0x7f0000000000)='./file1\x00', 0x102, 0x61) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f00000000c0)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/schedstat\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x894a, &(0x7f0000006900)={'wlan0\x00', @ifru_data=0x0}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000680)={0x0, r1, 0x5ed, 0x6, 0x8001, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x10001, 0x6, &(0x7f0000000500)=[{&(0x7f0000000200)="23fec5cd5aac5818c2843a33aef56286e28e81e233ab23ce679a469fc06bf4a05c2df64e94be4d7396e473076242debd1fe2ab508c69978eee9b1695b98c4acff237aff75f9c69cca71c93e2a907629a620609364709d3cdb575ff864586aa814a5545ca477270875a7b265da19be4903afb3de2abae726388aebde2345b9409c1c229666a947f5ef90b36e1e6feaba772ef52e6dc78412c2b813d68bf8304ab8ea39a8604e17e0ff65317034f8a70722d0833c856d7282fb36b05ec", 0xbc, 0x9}, {&(0x7f00000002c0)="d497124659ef6dc30c9283b9158ac6a650716b5fad0b570c8e63c2fd48f94d17358880235431deafc7013969e4a02a0489a76e7783f9a94f8e659e0709737282ac2655e0f726d2a12fb6d3800c7ee7308c4dcddc3f1098137b91b04b987a461553d48c80e75613658a443bdfe4bb38d917e1cec2b93b8951a3080f2b0b98ab", 0x7f, 0x7f}, {&(0x7f0000000340)="3aa37a223855fb1ef5dc3cae94aefb8e81d31f53dc9968f4ccd65e18e47a54949c246434fdfbc3a115a76db8a8465f3713bebe047af85bcfedeea994f67693bcbc0a6cf051c94420b4105a40f8f2ea73c592b8bb63ca8fc686ba8b6fb377278e624c0fb9cf050631d7364fa3c9d228ee7204460cb9ff5b43124c0d526a81be49df6e5661cf8d79570a28f27172c49f132f9c4cdab4558f6acf2267cabd37b5fbe3bd62e6b519cc0070b224540f77997115531e93d4e9f6c88647ab538adb78fcd343bda490f5e1d91cede61b09d27e09cb31d65682f2e05f2a04903c070c3216ec0aa5ce4246db", 0xe7, 0x6}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000000440)="9a90b6ea1c3f7d2f70b141625042a7293dd0c3a99d55b4e070897032a0ad0b8a4983f1c4927b74e7d0b090e18cc260e339e223d5c0b6b5ac052c0a5c59fbd0e1662730d18a7ea91761", 0x49, 0x80}, {&(0x7f00000004c0)="b352a355c2506c7901a31f5661b20b02d5", 0x11, 0x401}], 0x204008, &(0x7f00000005c0)={[{@errors_remount}, {@nouser_xattr}, {@abort}, {@errors_continue}, {@jqfmt_vfsold}, {@data_err_ignore}], [{@subj_user={'subj_user', 0x3d, '\','}}, {@subj_user={'subj_user', 0x3d, '\\:&[+^@!+'}}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) linkat(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x400) 08:04:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) [ 2608.381595] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2608.413715] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:04:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r2 = fsmount(r0, 0x0, 0x8) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000300)=@v1={0x1000000, [{0xfffffff9, 0xfb}]}, 0xc, 0x3) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000500)=ANY=[@ANYBLOB="e00000027f0000010000000002000000ac1414aa000000007fde7d572762653f0b80fa0e6c67e7ca51bc02eff7b6250903ddc14cdb3f0fdb8925a3836c08f32037d43c6dacb050c4c257fc052f871304c54e19b70dbe2b34e1f642bc46295a50c5da73b487a4ed61a1228dbedefb1a4ce8d46977674a885c13085870a22029af479c2710fe31191eae5180ccb4105a50ee20f40e99728850e4080a4dc3bb5dc8c5c4daacdbbbe93b71e8de77403b79e67351c851313e402a36637c99629630f94bc7145b13ec470bb1b2"], 0x18) r3 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) io_submit(0x0, 0x0, 0x0) openat(r0, &(0x7f00000002c0)='./file1\x00', 0x410802, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f0000000240)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000004c0)={0x1, 0x1}, 0x8) pwritev(r4, &(0x7f0000001140)=[{&(0x7f0000000080)="f2", 0x1}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) syz_mount_image$nfs(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x80000000, 0x1, &(0x7f0000000440)=[{&(0x7f00000003c0)="89761d29b777f6dbf3e471c62f31c0c4828d49d1d9daca5f3cfcabd38d406455816645f84637a73a4f9563078eb9ef6d52ac0485f64d1eb18995f097f67eec20833d6e861b93ea545fdf942e09945338ba", 0x51, 0x100000000}], 0x3028000, &(0x7f0000000480)=ANY=[@ANYBLOB='$,+,$],subj_cser=\x00,fowner<', @ANYRESDEC=0xee00, @ANYBLOB=',dont_measure,\x00']) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0800010000000100008000000000"], 0x0) 08:04:25 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="67856f93ef03aaaaaaaaaabb91002b008100330008050104099731f296efc77c2db7ea22fcdb65f7e81d54a63549f315e4b2dd0af59dea0d41a8bf855c71d77d33975eb40000f14359d79585f8ac114aaae3530532089a16c847e3087d3f0fdb31d53450494d1e6f443b4871f3dfa4ee4e7bccced59fcd2ab006ec43a57c6789e9ba0dd6b91e6032241d6e547655a80b6ef54d1e1d100764a7652da7cdc5ffed2a89c08932b91b918634e2eaf954fcfb3ad63e7dbf8b94e47c3f2501052534dab5a0f1344a3bade9ff3bd67214ffbea25380f762b680bf186ff20f7c6f766b60b265d03adc9a37b8b034a36ff77f67457722853d69f8d1a2e5287c5085d321a25a7ca4887272ab147baa18023ebdd453300e8e42870d3cb1b0af0f82c8e56d614f104804f10afd0e2f59432fc8c9fb273adab4900b17eb1e52372254cebc0f4ae0fbc2db92c8b2471bd4690cdfff48f2e5547429c589d3b889637dd6e2a38037215367d91ae5aa3ab4ace46c6a285a9dfefa6908a588c943c93ff440ce89e93a1e6d9f9d9b9040063a971b9d23f7f6c750853bb8e8bb20ec8a8a6d986edb75af8c11367319cb11f5de4cef3b3e7486f218ffd042a9784f8bc040d581ea21e203bb8383ad96838be54645df869f5afd6cef0bd5281a9e058d"], &(0x7f0000000180)={0x0, 0x2, [0x7a7, 0xbe8, 0x0, 0x9a2]}) acct(0x0) unshare(0x4a060400) 08:04:25 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x8601, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:04:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) [ 2608.544319] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2608.548456] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:04:25 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000044) 08:04:25 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0xc00e, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2608.709279] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 08:04:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) [ 2608.726560] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2608.805657] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:04:25 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x2, [0x7a7, 0xbe8, 0x0, 0x9a2]}) acct(0x0) unshare(0x4a060400) 08:04:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) 08:04:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000004) 08:04:44 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0xd21e, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2627.761023] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2627.768489] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:04:44 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x28, 0x5e, 0x300, 0x0, 0x25dfdbfd, {}, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x28}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000427bd7000fddbdf250d0000000800040000020000080006000600000021000280060002004e24000006000b000296a330319809a2f2a43a3100000008c2000600db0000000c00028006000b00020000"], 0x4c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r4, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x5}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r5, 0x894a, &(0x7f0000006900)={'wlan0\x00', @ifru_data=0x0}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r5, 0x8983, &(0x7f00000000c0)) 08:04:44 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x9, 0x3f, 0x7f, 0xbd8}]}) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x12) 08:04:44 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x13, r0, 0x7ee26000) write(r1, &(0x7f0000000180)="f5", 0x1) r2 = dup(r1) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0xec, 0x8, 0xa6, 0xfd, 0x0, 0x8, 0x1000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x1ae}, 0x2, 0x1, 0x7, 0x9, 0x400, 0x80000000, 0x9, 0x0, 0x32, 0x0, 0x3168}, 0x0, 0xb, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0x0, r5) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x58, 0x20000000}, 0x40801) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000001f80)={0x7, {{0x2, 0x4e22, @multicast2}}}, 0x88) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) statx(r2, &(0x7f0000000140)='./file1\x00', 0x6000, 0x7ff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r3, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="8cdf25170000000800070000000000000000400000000000eca4fa29aa9085ee81b279498714c55a5420fdf8b23ea636d3f0f1950bfdf9d5ef05c7fbe77e88100d388e2101af845dec240b91dc9faf24eada064c760e103364bbd8f8d866b933650b5de0296907c597e3a1eaabd8e24a2cb96c14c1a903be599e12fcb2e92349", @ANYRES32=r5, @ANYBLOB="08007900070000006c02218008008f00", @ANYRES32, @ANYBLOB="aa32eaf245e81094574a51501ad866e01bba793f96cd803ff573a842f9adccf9834557f455caad4b18404049651d8f8142bf061458204d0c4f4258cc24b9017277dbb999a292af4b7aa13c45ec4242dc731a6b8cd6740100e37d1fcaa6e8df5999ed20dc3e8fd7367cec4c13e7d8b8b63605d85fdfb41963f1b77b7f055e2a72eb374de17b9f9c76daffabcce738efbac026a4aa56a1506de604e473853051497375060f28fe633ff6e0c57825fd1442781ca31919021d786d10328e20fe9715cede3c459e0ffc15a8a11d7b68a262ff2d5482825ef087bb1a86d9feb3bd6ec88c10d0c27151c508000b00", @ANYRES32=r6, @ANYBLOB="08008400", @ANYRES32=r7, @ANYBLOB="2e01fffc0a381af079c6034debf6fc7f4c4abf8bd33040086edf84a8b855c39e93f89c2aec7345706ba19ed390110866b5f0fca610f95220b221ceecb43023867ffd5eb6f2ebad2384227efc7d3ea0b7004733fb69ed339641ce721a153cc9c9c598975df5059a36542c1a00c1c12e9b3c3e435a435bfde74bd66601fb6ab54d7a98f87b94ea3784ccf7caba6b6bc995390ad2048f5f77445163fded3e64c8a933555e1e4da68efe2a001ef49e1fd15415505ad21d75927189097d1025d35263d20bff13b2a4a632feca530dc8782e46b6dfe978d4ccbec22b2a470f380a44bd82b491946908e2db326474dce5f94e8ad5bdf89ca043d0fd9a894b3394f556dbe1ad06691e70829cfab1bfb8fe8ef5aa9a4a752a223b9f214d88c164d1564a9acaac0f928764744b8a8af73dff084197fb51b161a6c8398a480e6a7a7ed30d588f6e82d7a414c3130cbb65179951fcc27936ef52a4859e55a615a888e51bb0fb96d1803db12e5d26a3fb006800d21ed86b7db936794997a1f302d7aba0f7822f1d272e0b0f4b0d7c6e7d8132318f2aa56031322fbb64661f8db0671a122a088ca9c8a2c5ac54530aaaee7bcf2696defd07fcacb83bb051e12556f8ec09f0d97be74557d5f2b75092c39e2660edd5e91d21363c8cc22a2e01fab95456e7b9be441b5118fd284f323eed24cfb982c31197b09ba39708a3a6ae31af77805a4ea8041a9f62240c0f979bd3f88e44bf471dbd868ed1220964f87c6846eeba7d6aa33830bc69648576f93b65193d75192366386f3346f1bf8f5f96e5a17b3616bd9701d9bb4d01f1430bfa09596b37fda8e1ef937c12469a51f8cdb150dfcc6a88ec409c1227d500"], 0x38c}, 0x1, 0x0, 0x0, 0x80}, 0x24004010) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x2) sendfile(r3, r8, 0x0, 0x100000001) ioctl$KDGKBLED(r8, 0x4b64, &(0x7f0000000080)) sendfile(r2, r2, &(0x7f0000000040), 0x3fffc000000000) 08:04:44 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x2, [0x7a7, 0xbe8, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x0) 08:04:44 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000045) [ 2627.866813] audit: type=1326 audit(1712736284.784:945): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=20304 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a70b4b19 code=0x7ffc0000 [ 2627.869769] audit: type=1326 audit(1712736284.784:946): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=20304 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a70b4b19 code=0x7ffc0000 [ 2627.872309] audit: type=1326 audit(1712736284.788:947): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=20304 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc0a70b4b19 code=0x7ffc0000 [ 2627.876888] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2627.897033] audit: type=1326 audit(1712736284.793:948): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=20304 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a70b4b19 code=0x7ffc0000 [ 2627.907262] audit: type=1326 audit(1712736284.793:949): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=20304 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc0a70b4b19 code=0x7ffc0000 08:05:03 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff6000/0x4000)=nil, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001100)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4096, 0x1000, 0x0, &(0x7f00000011c0)=""/211, 0xd3}, &(0x7f0000001140)=0x40) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000001000)=0x1, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000001180)=0x80, 0x4) 08:05:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) 08:05:03 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000025ee0f0027bd7000ffdbdf25ff7f0000"], 0x14}, 0x1, 0x0, 0x0, 0x4008844}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000480)=0x10001, 0x4) stat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') 08:05:03 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x200, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x300b4e2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000004ec0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, 0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000500)=ANY=[@ANYBLOB="0000000000000000cd653a40d440fb6c0fb08d7ada7c747982d6b59bdffec2fe2489dc68b00732935dc0fcf66bbb57356b581f34353b3f589616473f9bb81a0eb7f5a6f53b", @ANYRES32=r1, @ANYBLOB="512a29c0c9a46347fb3b359f2f0595520def77216672c526e7e5fa9a8dfb5177327a30314f7aaa78a00b060080a633b0b494bb06132cec1290"]) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000002c0)={0x20, {{0xa, 0x4e21, 0x6, @private0, 0x200}}, 0x0, 0x3, [{{0xa, 0x4e20, 0x1, @loopback, 0x20}}, {{0xa, 0x4e24, 0x5, @mcast1, 0xfff}}, {{0xa, 0x4e23, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}]}, 0x210) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, r4}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="00000000000016002e2f66696c6531006f988f40255fb0"]) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x5, @private2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x560, 0x2000000000004}, 0x0, 0x0, 0x1004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x0, 0x34, 0x1000, 0x1f}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x400c080) 08:05:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0xf000, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:05:03 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x2, [0x7a7, 0xbe8, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x0) [ 2646.741661] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:05:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000046) 08:05:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000005) [ 2646.745507] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2646.835309] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 08:05:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x34000, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:05:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) [ 2646.894103] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2646.910036] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:05:03 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="67856f93ef03aaaaaaaaaabb91002b008100330008050104099731f296efc77c2db7ea22fcdb65f7e81d54a63549f315e4b2dd0af59dea0d41a8bf855c71d77d33975eb40000f14359d79585f8ac114aaae3530532089a16c847e3087d3f0fdb31d53450494d1e6f443b4871f3dfa4ee4e7bccced59fcd2ab006ec43a57c6789e9ba0dd6b91e6032241d6e547655a80b6ef54d1e1d100764a7652da7cdc5ffed2a89c08932b91b918634e2eaf954fcfb3ad63e7dbf8b94e47c3f2501052534dab5a0f1344a3bade9ff3bd67214ffbea25380f762b680bf186ff20f7c6f766b60b265d03adc9a37b8b034a36ff77f67457722853d69f8d1a2e5287c5085d321a25a7ca4887272ab147baa18023ebdd453300e8e42870d3cb1b0af0f82c8e56d614f104804f10afd0e2f59432fc8c9fb273adab4900b17eb1e52372254cebc0f4ae0fbc2db92c8b2471bd4690cdfff48f2e5547429c589d3b889637dd6e2a38037215367d91ae5aa3ab4ace46c6a285a9dfefa6908a588c943c93ff440ce89e93a1e6d9f9d9b9040063a971b9d23f7f6c750853bb8e8bb20ec8a8a6d986edb75af8c11367319cb11f5de4cef3b3e7486f218ffd042a9784f8bc040d581ea21e203bb8383ad96838be54645df869f5afd6cef0bd5281a9e058d"], &(0x7f0000000180)={0x0, 0x2, [0x7a7, 0xbe8, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x0) 08:05:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0xfeee, 0xfd, 0x7f, 0xfb, 0xff, 0x0, 0x2, 0x4, 0xd, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8000, 0x3, 0x32, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x2) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00') pread64(r0, &(0x7f0000002100)=""/4095, 0xfff, 0x6) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000240)='./file0\x00', 0x20, 0x800}, 0x7) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffe, @empty, 0x99d9}, 0x1c) [ 2665.535015] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2665.537960] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 08:05:22 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x80000, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:05:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000006) 08:05:22 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) (fail_nth: 1) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x2, [0x7a7, 0xbe8, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) 08:05:22 executing program 2: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2, 0x0, 0x0, 0x9}, {0x6, 0x0, 0x0, 0xa34}]}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r5, 0x894a, &(0x7f0000006900)={'wlan0\x00', @ifru_data=0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) sendfile(r2, r3, 0x0, 0x100000001) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="602000001f4200360fd581b3f34691531f667df8270310b5084d83e52c8d9e51e7b7b757ce096b5f1587798b0cdbf9e2243faa764ac417ee324e3eda31bfc12936d0b58dab5a0000b207493b00000000000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000300)={'batadv_slave_1\x00', {0x2, 0x0, @loopback}}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x210240, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x10, r2, 0x10000000) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)=[r5, r8, r5, r3], 0x4}, 0xffffffff) 08:05:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x18, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) 08:05:22 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e22, @private=0xa010102}, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e23, @empty}, 0x2, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)='macvtap0\x00', 0x1c678625, 0x7f, 0x100}) [ 2665.548536] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2665.555010] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2665.578974] FAULT_INJECTION: forcing a failure. [ 2665.578974] name failslab, interval 1, probability 0, space 0, times 0 [ 2665.580545] CPU: 0 PID: 20493 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2665.581227] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2665.582011] Call Trace: [ 2665.582259] dump_stack+0x107/0x167 [ 2665.582630] should_fail.cold+0x5/0xa [ 2665.583015] ? iovec_from_user+0x36c/0x400 [ 2665.583446] should_failslab+0x5/0x20 [ 2665.583964] __kmalloc+0x72/0x390 [ 2665.584404] iovec_from_user+0x36c/0x400 [ 2665.584903] __import_iovec+0x67/0x590 [ 2665.585402] import_iovec+0x83/0xb0 [ 2665.585868] vfs_readv+0xbb/0x160 [ 2665.586303] ? vfs_iter_read+0xa0/0xa0 [ 2665.586771] ? __fget_files+0x26d/0x4c0 [ 2665.587272] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2665.587923] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2665.588465] ? trace_hardirqs_on+0x5b/0x180 [ 2665.588907] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2665.589451] ? do_readv+0xfb/0x300 [ 2665.589821] do_readv+0x139/0x300 [ 2665.590180] ? vfs_readv+0x160/0x160 [ 2665.590581] do_syscall_64+0x33/0x40 [ 2665.590962] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2665.591479] RIP: 0033:0x7f24ba810b19 [ 2665.592008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2665.594275] RSP: 002b:00007f24b7d86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2665.595207] RAX: ffffffffffffffda RBX: 00007f24ba923f60 RCX: 00007f24ba810b19 [ 2665.596099] RDX: 100000000000011f RSI: 00000000200003c0 RDI: 0000000000000004 [ 2665.596974] RBP: 00007f24b7d861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2665.597854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2665.598728] R13: 00007ffd8c5cb41f R14: 00007f24b7d86300 R15: 0000000000022000 [ 2665.621992] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="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"]) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r9, 0x894a, &(0x7f0000006900)={'wlan0\x00', @ifru_data=0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r9, 0x4, 0x7, 0xc69}) fallocate(r10, 0x8, 0x7, 0x9) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x0) 08:05:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000240)='./file0\x00', 0x20, 0x800, 0x1}, 0x7) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) pread64(r2, &(0x7f0000000400)=""/212, 0xd4, 0xdf8bc86) 08:05:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000047) 08:05:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1c, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) 08:05:22 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x400300, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2665.644337] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2665.650730] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:05:22 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x15}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x21000, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@smackfsfloor={'smackfsfloor', 0x3d, ':'}}, {@seclabel}]}}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x4c, r2, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x24, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}]}, 0x4c}}, 0x0) 08:05:22 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0xe0ffff, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:05:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6a, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) [ 2665.792285] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2665.810548] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:05:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x400300, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:05:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000048) [ 2665.893036] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 08:05:22 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0xf0ffff, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2665.968518] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2665.972842] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2666.471179] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 08:05:41 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) (fail_nth: 2) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="67856f93ef03aaaaaaaaaabb91002b008100330008050104099731f296efc77c2db7ea22fcdb65f7e81d54a63549f315e4b2dd0af59dea0d41a8bf855c71d77d33975eb40000f14359d79585f8ac114aaae3530532089a16c847e3087d3f0fdb31d53450494d1e6f443b4871f3dfa4ee4e7bccced59fcd2ab006ec43a57c6789e9ba0dd6b91e6032241d6e547655a80b6ef54d1e1d100764a7652da7cdc5ffed2a89c08932b91b918634e2eaf954fcfb3ad63e7dbf8b94e47c3f2501052534dab5a0f1344a3bade9ff3bd67214ffbea25380f762b680bf186ff20f7c6f766b60b265d03adc9a37b8b034a36ff77f67457722853d69f8d1a2e5287c5085d321a25a7ca4887272ab147baa18023ebdd453300e8e42870d3cb1b0af0f82c8e56d614f104804f10afd0e2f59432fc8c9fb273adab4900b17eb1e52372254cebc0f4ae0fbc2db92c8b2471bd4690cdfff48f2e5547429c589d3b889637dd6e2a38037215367d91ae5aa3ab4ace46c6a285a9dfefa6908a588c943c93ff440ce89e93a1e6d9f9d9b9040063a971b9d23f7f6c750853bb8e8bb20ec8a8a6d986edb75af8c11367319cb11f5de4cef3b3e7486f218ffd042a9784f8bc040d581ea21e203bb8383ad96838be54645df869f5afd6cef0bd5281a9e058d"], &(0x7f0000000180)={0x0, 0x2, [0x7a7, 0xbe8, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) 08:05:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) 08:05:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000049) 08:05:41 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0xff, 0x44, 0x20, 0x0, 0x0, 0x2, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x200}, 0x10000, 0x81, 0x81, 0x4, 0x5f74, 0x6, 0x8003, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, r0, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) perf_event_open$cgroup(&(0x7f00000001c0)={0x2, 0x80, 0x1f, 0xfb, 0x7, 0x74, 0x0, 0x5, 0x20041, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xe35, 0x2, @perf_bp={0xfffffffffffffffd, 0xd}, 0x4002, 0x2, 0x2, 0x3, 0x4, 0x2, 0x4, 0x0, 0x1, 0x0, 0x4}, r1, 0x4, 0xffffffffffffffff, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000027bd70804f04819e00000040050807000600000045aea6542e5e237d4738f0c4f22a35040db5ac358547dbe5acc2c5712dccc2aae8478509280d1f699fe9003dd127a2791ad690e652d7f778402656398422ffe106f2654e45d685fd5a2d12901fb8bef6445bb0da3e98df602af05ec416d6e8"], 0x1c}, 0x1, 0x0, 0x0, 0x4004014}, 0x20001804) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r3) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffe9a, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}}, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x8}, &(0x7f0000000280)='./file0\x00', 0x18}, 0x0) 08:05:41 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0xef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x894a, &(0x7f0000006900)={'wlan0\x00', @ifru_data=0x0}) close(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x228000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000140)={0x8, 0x101, 0x6, {0x80, 0x5}, 0x40000, 0x58}) close(r1) ioctl$FIOCLEX(r2, 0x5451) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup_procs(r1, &(0x7f0000000340)='tasks\x00', 0x2, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000280), 0xffffffff, 0x101080) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000002c0)={0x4, 0x0, {0x3, 0x0, 0x0, 0x2, 0x1000}, 0x8}) 08:05:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x1000000, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:05:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000007) 08:05:41 executing program 5: ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000040)) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000005a00)={&(0x7f00000011c0), 0xc, 0x0}, 0x84c00) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x894a, &(0x7f0000006900)={'wlan0\x00', @ifru_data=0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ipvlan0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) write$bt_hci(r1, &(0x7f0000000580)={0x1, @user_passkey_reply={{0x42e, 0xa}, {@none}}}, 0xe) umount2(&(0x7f0000000140)='./file0\x00', 0x8) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@private1, @in6=@mcast1}}, {{@in=@broadcast}, 0x0, @in6=@private0}}, &(0x7f0000000180)=0xe8) [ 2684.455404] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2684.461316] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:05:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x2000000, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2684.533992] FAULT_INJECTION: forcing a failure. [ 2684.533992] name failslab, interval 1, probability 0, space 0, times 0 [ 2684.535344] CPU: 1 PID: 20658 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2684.536122] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2684.536876] Call Trace: [ 2684.537135] dump_stack+0x107/0x167 [ 2684.537487] should_fail.cold+0x5/0xa [ 2684.537855] ? create_object.isra.0+0x3a/0xa20 [ 2684.538298] should_failslab+0x5/0x20 [ 2684.538666] kmem_cache_alloc+0x5b/0x310 [ 2684.539060] create_object.isra.0+0x3a/0xa20 [ 2684.539479] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2684.539982] __kmalloc+0x16e/0x390 [ 2684.540330] iovec_from_user+0x36c/0x400 [ 2684.540720] __import_iovec+0x67/0x590 [ 2684.541097] import_iovec+0x83/0xb0 [ 2684.541451] vfs_readv+0xbb/0x160 [ 2684.541786] ? vfs_iter_read+0xa0/0xa0 [ 2684.542160] ? __fget_files+0x26d/0x4c0 [ 2684.542545] ? lock_downgrade+0x6d0/0x6d0 [ 2684.542936] ? find_held_lock+0x2c/0x110 [ 2684.543331] ? __fget_files+0x296/0x4c0 [ 2684.543718] ? __fget_light+0xea/0x290 [ 2684.544114] do_readv+0x139/0x300 [ 2684.544478] ? vfs_readv+0x160/0x160 [ 2684.544845] do_syscall_64+0x33/0x40 [ 2684.545203] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2684.545725] RIP: 0033:0x7f24ba810b19 [ 2684.546080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2684.547766] RSP: 002b:00007f24b7d86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2684.548509] RAX: ffffffffffffffda RBX: 00007f24ba923f60 RCX: 00007f24ba810b19 [ 2684.549177] RDX: 100000000000011f RSI: 00000000200003c0 RDI: 0000000000000004 [ 2684.549842] RBP: 00007f24b7d861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2684.550505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2684.551167] R13: 00007ffd8c5cb41f R14: 00007f24b7d86300 R15: 0000000000022000 [ 2684.570581] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2684.644516] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:05:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x300, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) [ 2684.658564] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:05:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x3000000, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:05:41 executing program 0: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xe, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x1002, 0x0, 0x7, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x40, @multicast2}, {0x2, 0x0, @loopback}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x155, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) creat(&(0x7f0000000240)='./file0\x00', 0x49) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0xc244, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0xb96, 0x4}, 0x40, 0x0, 0xfffffffd, 0x1, 0xfffffffffffff9f8, 0x2, 0xffff, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1100) sendmmsg(0xffffffffffffffff, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYRESDEC=r3], 0x10}}], 0x2, 0x24000801) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) fstatfs(r1, &(0x7f0000002e00)=""/4102) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000002c0)={0x2, 0xf4, 0xfffffffffffffff9}) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) [ 2684.789579] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2684.800236] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:05:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x480, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) 08:05:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x4000000, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:05:41 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) (fail_nth: 3) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="67856f93ef03aaaaaaaaaabb91002b008100330008050104099731f296efc77c2db7ea22fcdb65f7e81d54a63549f315e4b2dd0af59dea0d41a8bf855c71d77d33975eb40000f14359d79585f8ac114aaae3530532089a16c847e3087d3f0fdb31d53450494d1e6f443b4871f3dfa4ee4e7bccced59fcd2ab006ec43a57c6789e9ba0dd6b91e6032241d6e547655a80b6ef54d1e1d100764a7652da7cdc5ffed2a89c08932b91b918634e2eaf954fcfb3ad63e7dbf8b94e47c3f2501052534dab5a0f1344a3bade9ff3bd67214ffbea25380f762b680bf186ff20f7c6f766b60b265d03adc9a37b8b034a36ff77f67457722853d69f8d1a2e5287c5085d321a25a7ca4887272ab147baa18023ebdd453300e8e42870d3cb1b0af0f82c8e56d614f104804f10afd0e2f59432fc8c9fb273adab4900b17eb1e52372254cebc0f4ae0fbc2db92c8b2471bd4690cdfff48f2e5547429c589d3b889637dd6e2a38037215367d91ae5aa3ab4ace46c6a285a9dfefa6908a588c943c93ff440ce89e93a1e6d9f9d9b9040063a971b9d23f7f6c750853bb8e8bb20ec8a8a6d986edb75af8c11367319cb11f5de4cef3b3e7486f218ffd042a9784f8bc040d581ea21e203bb8383ad96838be54645df869f5afd6cef0bd5281a9e058d"], &(0x7f0000000180)={0x0, 0x2, [0x7a7, 0xbe8, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) [ 2684.879503] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2684.890034] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:05:41 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f00000002c0)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x2, 0x3, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x4, 0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x41}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x30}}, 0x4000045) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r3, 0xd8499488957a772f}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) timer_gettime(r1, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000300)={{r4, r5+10000000}, {0x77359400}}, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="7e693c51c33150762720dc9b7b0b884139f55865d38066e68f42f8df3bff231ddbedce14608b4991d1eff491"]) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2684.958510] FAULT_INJECTION: forcing a failure. [ 2684.958510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2684.960507] CPU: 0 PID: 20794 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2684.961182] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2684.962016] Call Trace: [ 2684.962293] dump_stack+0x107/0x167 [ 2684.962708] should_fail.cold+0x5/0xa [ 2684.963115] _copy_from_user+0x2e/0x1b0 [ 2684.963613] iovec_from_user+0x141/0x400 [ 2684.964066] __import_iovec+0x67/0x590 [ 2684.964572] import_iovec+0x83/0xb0 [ 2684.964989] vfs_readv+0xbb/0x160 [ 2684.965473] ? vfs_iter_read+0xa0/0xa0 [ 2684.965924] ? __fget_files+0x26d/0x4c0 [ 2684.966417] ? lock_downgrade+0x6d0/0x6d0 [ 2684.966896] ? find_held_lock+0x2c/0x110 [ 2684.967360] ? __fget_files+0x296/0x4c0 [ 2684.967882] ? __fget_light+0xea/0x290 [ 2684.968327] do_readv+0x139/0x300 [ 2684.968779] ? vfs_readv+0x160/0x160 [ 2684.969212] do_syscall_64+0x33/0x40 [ 2684.969731] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2684.970304] RIP: 0033:0x7f24ba810b19 [ 2684.970776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2684.972865] RSP: 002b:00007f24b7d86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2684.973811] RAX: ffffffffffffffda RBX: 00007f24ba923f60 RCX: 00007f24ba810b19 [ 2684.974660] RDX: 100000000000011f RSI: 00000000200003c0 RDI: 0000000000000004 [ 2684.975504] RBP: 00007f24b7d861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2684.976275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2684.977016] R13: 00007ffd8c5cb41f R14: 00007f24b7d86300 R15: 0000000000022000 08:06:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x500, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) 08:06:01 executing program 0: r0 = openat(0xffffffffffffffff, 0x0, 0x2d3242, 0x84) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYRES16], 0xfdef) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x894a, &(0x7f0000006900)={'wlan0\x00', @ifru_data=0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0x0, r5) sendmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r5}}}], 0x20}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)={0x3bc, 0x2f, 0x300, 0x70bd28, 0x25dfdbfe, {0x8}, [@typed={0x4, 0x2a}, @nested={0x224, 0x43, 0x0, 0x1, [@typed={0x8, 0x3e, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="2914b2e3def22776d5299e23a8f4c96baed568a146a4728e5a293675eb3b8d98d952a3db6db0e070c719c270498dc1b9d3f115f79701501127c56405120267475b38f72daf6d2adf7a2f5cef0806dcf82308a8190499604ea13872fa8fe46a113e9925bcab3452b671922e0eca0ef6e4f899d47bc5676ee03f56e5c0f246dec77b3b834230d74fc309a95cdee6c05d4bb2ce8846a4709e043d5152d0b2977de029552dac4e3e00b10c", @typed={0xc, 0x6c, 0x0, 0x0, @u64}, @typed={0xe, 0x4c, 0x0, 0x0, @str='access=any'}, @generic="48d508f11b126c13f6b79839c1fca1ffc57a4c0c9595c8e65a9cf9b82510ba6ccf44dd12be16c190104b61cf0bbf0087f96f8fe77de78751b29843d8810255a2702bcf8b0d96a9daf171db2cd532851d77a15db07e92eb66b50e2e18a4ac7af20746911133a91c3dafacb81d587729715909b024acef9b08e96e960818b0063382cbeb18c2564a9e274975f8baa10d42ca7b059dc1884a0fcdde", @typed={0xf, 0x14, 0x0, 0x0, @str='/dev/nvram\x00'}, @generic="08eb4138dbce68a2388cc966dff880765a2602f9a49d5b4db1a45ac89fe89252ef6689607dca80dc9d31841f425cbd5df69b52c719b656ac43f50b47a0dea7d9292a52066999c0814d3bf2f0f635d2fc94647894a7893ebfaec934f7ca62369d27beca0a83b18c13bef63c87e2151767f82edaf585a9ace05c5e721f0eefd5bf618597c0a6a18e7c8c5802bee7cfe043d678e814c5fb141aa1406fc7ae7120236ca92208ed8448e28f"]}, @nested={0x84, 0x72, 0x0, 0x1, [@typed={0xb, 0x38, 0x0, 0x0, @str='fowner<'}, @generic="ab660eeb3e9ec86b8693e68caaa0278fe0839cb0415d94332d15d89dae87baa72bc6dcabdf9efca1497114fc72141b6396d6ad79506e3e082cbc9e2707", @typed={0x8, 0x92, 0x0, 0x0, @fd=r2}, @typed={0x7, 0xb, 0x0, 0x0, @str='9p\x00'}, @generic="ce36e84482cfa2a7d8723d9ade972728d227e795b0bd7a16d149e72406262dd2d83ee536606829"]}, @typed={0x8, 0x2a, 0x0, 0x0, @uid=r5}, @nested={0xf3, 0x87, 0x0, 0x1, [@generic="4521e0b68412a2799cdae23a692c977e947ea435f072580593a18002ef87664dd558c55183e963d4be1586cc21d85ad05b2423c41d3e1cbb205c25d6716d3f501490658b0adf2cb3df40daa532405974b8bb7881340ef52195e74fa6b8f2caa721e812f02658c7fe5ce46bc2978c7e4d73d1b8214eb6688373dd929497ab3d89e850ed4c6c1eee658cf4b0d7921563c654517461a6c08339a700788969093551dfe227378c4455d3c1995bb72d084b22bcbf1669246eaa33041638bdd98f67b428fb6ede2e111253e129341bdc312f9eb2fbd9855b36b883b5eca528b2867dfd66464a54fdbf4c", @typed={0x7, 0x45, 0x0, 0x0, @str=',%\x00'}]}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x4, &(0x7f00000004c0)={'trans=virtio,', {[{@cache_none}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@cache_fscache}, {@nodevmap}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@access_uid}, {@msize={'msize', 0x3d, 0x101}}, {@access_user}, {@debug={'debug', 0x3d, 0xfffffffffffff597}}, {@access_any}], [{@fowner_lt}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) quotactl(0x2, &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000680)="69eb1e6f327054e098d4b672a2ac69e4a486eec99baaeb24bc9dc28efe8d0c838961f1d61ceaf812d84d496f943e749abf74baedc04a5553b47861f92ca15074048c41addccf37") 08:06:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000008) 08:06:01 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x5000000, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2704.448697] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2704.454636] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:06:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa2682, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x218481, 0x40) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000103bc0019000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) sendfile(r1, r2, 0x0, 0x100000001) [ 2704.465791] audit: type=1400 audit(1712736361.382:950): avc: denied { associate } for pid=20807 comm="syz-executor.0" name="nvram" dev="devtmpfs" ino=99 scontext=system_u:object_r:syslogd_var_lib_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 08:06:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000004a) 08:06:01 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000100), 0xd8, 0x4100) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000058a40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004af00)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x0, "e6a2e51d013042"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000059a40)={0x15, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}], 0x6, "868ef8b2f5bc3e"}) signalfd(r2, &(0x7f0000000140)={[0xffffffff]}, 0x8) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x3, @loopback}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000002ec0), 0x4) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000001) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x8, 0x0, "b01a904befe77d2c66634504a819a945bf37f84ad5c00ebae8ff464819877e56477dfc408a06e310a9be17d80ef68351c9e01e800e4837106516347ccf5d7c6abe9f579e38ee51985521c765323d8dea"}, 0xd8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x24000, 0x0) sendfile(r5, r7, 0x0, 0x80000001) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r8) 08:06:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x600, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) 08:06:01 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) (fail_nth: 4) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x2, [0x7a7, 0xbe8, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) 08:06:01 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x6000000, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2704.564844] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2704.570852] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2704.576439] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:06:01 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x7000000, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2704.641992] FAULT_INJECTION: forcing a failure. [ 2704.641992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2704.643846] CPU: 0 PID: 20833 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2704.644800] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2704.648479] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2704.648510] Call Trace: [ 2704.648534] dump_stack+0x107/0x167 [ 2704.648554] should_fail.cold+0x5/0xa [ 2704.651098] _copy_to_iter+0x264/0x12d0 [ 2704.651492] ? __lock_acquire+0x1657/0x5b00 [ 2704.651911] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2704.652400] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2704.652890] ? check_stack_object+0x6e/0xb0 [ 2704.653309] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2704.653803] ? __check_object_size+0xae/0x440 [ 2704.654243] tty_read+0x29a/0x5e0 [ 2704.654592] ? do_SAK+0x70/0x70 [ 2704.654942] do_iter_readv_writev+0x57c/0x750 [ 2704.655159] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2704.655385] ? new_sync_write+0x660/0x660 [ 2704.655401] ? selinux_file_permission+0x92/0x520 [ 2704.655438] do_iter_read+0x28f/0x6d0 [ 2704.655461] ? import_iovec+0x83/0xb0 [ 2704.655481] vfs_readv+0xe5/0x160 [ 2704.655496] ? vfs_iter_read+0xa0/0xa0 [ 2704.655510] ? __fget_files+0x26d/0x4c0 [ 2704.655527] ? lock_downgrade+0x6d0/0x6d0 [ 2704.655540] ? find_held_lock+0x2c/0x110 [ 2704.655570] ? __fget_files+0x296/0x4c0 [ 2704.655598] ? __fget_light+0xea/0x290 [ 2704.655620] do_readv+0x139/0x300 [ 2704.655637] ? vfs_readv+0x160/0x160 [ 2704.655668] do_syscall_64+0x33/0x40 [ 2704.655684] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2704.655695] RIP: 0033:0x7f24ba810b19 [ 2704.655713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2704.655722] RSP: 002b:00007f24b7d86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2704.655739] RAX: ffffffffffffffda RBX: 00007f24ba923f60 RCX: 00007f24ba810b19 [ 2704.655749] RDX: 100000000000011f RSI: 00000000200003c0 RDI: 0000000000000004 [ 2704.655758] RBP: 00007f24b7d861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2704.655768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2704.655777] R13: 00007ffd8c5cb41f R14: 00007f24b7d86300 R15: 0000000000022000 08:06:01 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, 0x3d, 0x800, 0x70bd2d, 0x25dfdbfe, {0x6}, [@generic="81", @typed={0x14, 0x17, 0x0, 0x0, @ipv6=@private2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) write(r0, &(0x7f00000002c0)="3c864a9319f68dfc86b507b5a41c80739063ce3423889d73fa268849c534a6c846e2860fa5ede071c576477308c912d5f8a1d9447039492ecab451e5a283f53395dd716252f4cdca6eeb425be415ba98bcfe6cb90e31c4574148873cab0034500778ae7843e7b354b3f716716269829690a2b13aa6f085e941f617358b3687d2e9a530c70a1115fd756f549722fc0c5d5bbdd25e2f5725a6d42168b7f4658f", 0x9f) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000280)='./file1\x00', 0x101002, 0x45) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2bd3e8a90941a4020000000000000006057054bf19e39db8"]) [ 2704.699726] 9pnet: Insufficient options for proto=fd 08:06:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x700, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) 08:06:01 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x9000000, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2704.924434] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2704.945386] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:06:20 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1800, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) 08:06:20 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) mknodat$loop(r0, &(0x7f0000000100)='./file0\x00', 0x2000, 0x1) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0xffffffffffffffff) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)) setresuid(0xffffffffffffffff, r1, 0x0) openat(r0, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) 08:06:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000009) 08:06:20 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) (fail_nth: 5) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x2, [0x7a7, 0xbe8, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) 08:06:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000004b) 08:06:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0xf000000, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:06:20 executing program 5: syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_io_uring_setup(0x8, &(0x7f0000000180), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x5000)=nil, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r1, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, "4cfa52a749d2e5c4"}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001000010000000000001e6dcf0f00000005f00000ff7f000000010000040014"], 0x24}}, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020201000ace670325132510000e670325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c45312020202020202000ace670325132510000e670325107", 0x9b, 0x600}], 0x0, &(0x7f0000000080)=ANY=[]) io_setup(0x5, &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2ce900009bd41c91b037a8d91323406f5217ac2be167efa133088d0478f4df6e2b1b20217760d279780ff085195c3dddfbc2972bdeddd0e111f47ba17b1624827cc56e040f96000000802e436944f233ac6deb2a03b5e5fdac02e8e14bdf3fed75fb5d65d96e8b12ce1853fb6c9dc3f982879b0a0f15b5b30d42d23a8de61e2b39d5260f1ff099033db35cb186f0da60621c6b2ca74aca99c2d1844dcaf468ebcdfbfdfe6aa2435868acba2a75548f265f10c1faee7c4e038c61b938077a0efa72eb768c89ea3a1ada", @ANYRES16=0x0, @ANYBLOB="000027bd7000ffdbdf250b0000000500000000385af73d0028000200000005002f0001000033"], 0x2c}, 0x1, 0x0, 0x0, 0x20004815}, 0x4000004) openat(r2, &(0x7f00000000c0)='./file2\x00', 0x8040, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x4150, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x80000001) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x4, 0x1, 0x3, 0x40, 0x0, 0x7, 0x1000, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340), 0x4}, 0x7008, 0x1, 0x3, 0x4, 0x8, 0x81, 0x1, 0x0, 0x2b0, 0x0, 0x7ff}, 0x0, 0xf, 0xffffffffffffffff, 0x1) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f00000001c0)={0x3fc}, 0x0, 0x0, 0x0) 08:06:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="cc012373acb0d8be216a1898cbeb21d33818230a74c764", @ANYRES16=0x0, @ANYBLOB="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"], 0x1cc}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000040) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x843, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x900, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x17c}, 0x1, 0x0, 0x0, 0x20}, 0x0) accept(0xffffffffffffffff, &(0x7f00000003c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0x5a) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x80, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x8000}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7, 0x400000}}, './cgroup/cgroup.procs\x00'}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(r2, 0x0, 0x420400, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r4, r2, 0x0, 0x80464c453f) [ 2723.635911] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2723.674071] FAULT_INJECTION: forcing a failure. [ 2723.674071] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2723.677730] CPU: 1 PID: 20973 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2723.678470] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2723.679356] Call Trace: [ 2723.679659] dump_stack+0x107/0x167 [ 2723.680067] should_fail.cold+0x5/0xa [ 2723.680521] __alloc_pages_nodemask+0x182/0x600 [ 2723.681032] ? lock_chain_count+0x20/0x20 [ 2723.681462] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2723.682112] alloc_pages_vma+0xbb/0x410 [ 2723.682533] wp_page_copy+0xee7/0x1f00 [ 2723.682952] ? print_bad_pte+0x5a0/0x5a0 [ 2723.683373] ? lock_downgrade+0x6d0/0x6d0 [ 2723.683810] ? vm_normal_page+0x162/0x2e0 [ 2723.684247] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2723.688844] do_wp_page+0x27b/0x1390 [ 2723.689236] handle_mm_fault+0x1cc7/0x3500 08:06:20 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x26a543, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40005, 0x5}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000700)=ANY=[@ANYBLOB="00000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000005000000f7ffffff00000000000000000800000000000000ff000000000000000000000001000000000000000000000000000000000000000000000000000000ff0f0000020000003700000000000000018000000000000009000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000170316f39f19420af9f90a63463621e7a37556f13aa02ff265a615b68387686a3910b6a549985157c4e17b71e9d56286"]) open(&(0x7f00000002c0)='./file0\x00', 0x2800, 0x80) write(r3, &(0x7f0000000240)="01", 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000001, 0x10, r1, 0x0) mount$cgroup2(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000280), 0x11000, 0x0) syz_io_uring_complete(0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) r4 = timerfd_create(0x4, 0x80000) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000a80)={{0x0, 0xe1, 0x9, 0x6, 0x13fd, 0x5, 0x1ff, 0xffffffff, 0x9, 0x7d0, 0x5, 0x4, 0x80000001, 0x1}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f00000003c0)=ANY=[@ANYRES64=r5, @ANYBLOB="09000000000000f00004000000000000000900000000000000050000000000000006000000000000001f0000000000000000000000ff0f0000ff0100000100000001000080000000000300000000000000c7ef000000000000130a0000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0100"/161]) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/unix\x00') openat(0xffffffffffffffff, 0x0, 0x650483, 0x120) sendfile(r0, r2, 0x0, 0x20d315) [ 2723.689676] ? __pmd_alloc+0x5e0/0x5e0 [ 2723.696630] ? vmacache_find+0x55/0x2a0 [ 2723.697055] do_user_addr_fault+0x56e/0xc60 [ 2723.697511] exc_page_fault+0xa2/0x1a0 [ 2723.697911] asm_exc_page_fault+0x1e/0x30 [ 2723.698330] RIP: 0010:copy_user_generic_string+0x2c/0x40 [ 2723.698869] Code: cb 83 fa 08 72 27 89 f9 83 e1 07 74 15 83 e9 08 f7 d9 29 ca 8a 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 48 a5 89 d1 f3 a4 31 c0 0f 01 ca e9 23 6d 1e 02 0f 1f 00 0f 01 [ 2723.700704] RSP: 0018:ffff88805ad578c8 EFLAGS: 00050246 [ 2723.701244] RAX: 0000000000000001 RBX: 0000000000000040 RCX: 0000000000000008 [ 2723.701954] RDX: 0000000000000000 RSI: ffff88805ad57ac8 RDI: 0000000020001340 [ 2723.702670] RBP: 0000000020001340 R08: 0000000000000000 R09: ffff88805ad57b07 [ 2723.703383] R10: ffffed100b5aaf60 R11: 0000000000000001 R12: ffff88805ad57ac8 [ 2723.704097] R13: 0000000020001380 R14: 00007ffffffff000 R15: 0000000000000000 [ 2723.708882] copyout.part.0+0x10b/0x140 [ 2723.709297] _copy_to_iter+0x293/0x12d0 [ 2723.716575] ? __lock_acquire+0x1657/0x5b00 [ 2723.717031] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2723.717542] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2723.718056] ? check_stack_object+0x6e/0xb0 [ 2723.718490] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2723.719009] ? __check_object_size+0xae/0x440 [ 2723.719449] tty_read+0x29a/0x5e0 [ 2723.719804] ? do_SAK+0x70/0x70 [ 2723.720174] do_iter_readv_writev+0x57c/0x750 [ 2723.720650] ? new_sync_write+0x660/0x660 [ 2723.721078] ? selinux_file_permission+0x92/0x520 [ 2723.721579] do_iter_read+0x28f/0x6d0 [ 2723.728500] ? import_iovec+0x83/0xb0 [ 2723.728900] vfs_readv+0xe5/0x160 [ 2723.729255] ? vfs_iter_read+0xa0/0xa0 [ 2723.729654] ? __fget_files+0x26d/0x4c0 [ 2723.730064] ? lock_downgrade+0x6d0/0x6d0 [ 2723.730489] ? find_held_lock+0x2c/0x110 [ 2723.730905] ? __fget_files+0x296/0x4c0 [ 2723.731311] ? __fget_light+0xea/0x290 [ 2723.731728] do_readv+0x139/0x300 [ 2723.732102] ? vfs_readv+0x160/0x160 [ 2723.732536] do_syscall_64+0x33/0x40 [ 2723.732937] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2723.733474] RIP: 0033:0x7f24ba810b19 [ 2723.733869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2723.735758] RSP: 002b:00007f24b7d86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2723.736573] RAX: ffffffffffffffda RBX: 00007f24ba923f60 RCX: 00007f24ba810b19 [ 2723.737317] RDX: 100000000000011f RSI: 00000000200003c0 RDI: 0000000000000004 [ 2723.738048] RBP: 00007f24b7d861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2723.738776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2723.739503] R13: 00007ffd8c5cb41f R14: 00007f24b7d86300 R15: 0000000000022000 08:06:20 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1c00, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) [ 2723.752980] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2723.765980] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 08:06:20 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) creat(0x0, 0x183) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x1ff, 0x8, &(0x7f00000007c0)=[{&(0x7f0000000240)="5e202182d18e172a55f2f05149c15f79d79c1f2b9e2c274e2b26687ca73c0c504942b2ec7fbd5202b56a717de2c5b24b34835cf60a55fb51e04dcb8054641848e2924ce27d316e7a41a142244b3749994975d2c8d3fd24340666e05376b921d2ced1039f7d19604134ddb3c63258fd560e7708823652e03145a6722c8135d34a5eaa85a66e892a898a0412904ba2b002c2a28e3aad67318f6a2c0e654f44288145665357338260a8a5e76c3c1b355b2de2c743d32486b4cc8d1486d54b508b30a99af38cb94808176d6036de551f50410ea2", 0xd2, 0x5}, {&(0x7f0000000340)="e2089a252f6b5e5dba18e83920bc3acd4a4912", 0x13, 0x5}, {&(0x7f0000000380)="1029f0efda86f0a89b268d56c9727f3d61cadc0e0162436755b59f01d47c5a8e8e", 0x21, 0x6}, {&(0x7f00000003c0)="d6185bc51bf0694cb7c55f17dbe1a87e78a55f20a823b9761b78c894d6f0a7866d977a6d1355570c4996d9bf5e29be08a38bf3f74ce5aaa8f89131efe323d8d2368c3a97b7d7ff771b380c285dbeb83b8122804392fc45a29b8b7eddb7a72c22ab83bc2a820efdb42c3440e7115a5c4ee998802f452e08a6d07fd49e0e6cc27c9bd2c46d857b3ddd956ae5c9de9de5a7464d6416d9df663bf5d12cb13beeac6095e9", 0xa2}, {&(0x7f0000000500)="46148491ad6bb6c21110b43f194878284af86f017e026736bb0db026733085075e91ebf8a24a18a058a4417537920b7bdc1471716398c6408f9c2994e2d0ea42b62957a82850c80f3511719bcb8368afdcbe8bb1019fdaca3eebfa6e95e31b4c7736d9f39d5e79a0c5ccd18d3133bf7b24969b6d1a55314e1d5a4d72b33fbbbec3c8770e4110f7b58c52fadf65f302cdde6603d24757267d7058c5566c072c7a86a85b44d6132a1bf7ebb36e53f62a1647605b54842635e3bd2ed18dd5ae322158de80932218aa057035085e066bf4bf823092c75e26dca24db1c912d77beb2302ed4ee0afafe6c7d21b5db7fb", 0xed, 0x4}, {&(0x7f0000000600)="447d391dff6e36e4aae205b90e326ee619a27393eee64d6c87cb708b402646c937209737f8e55b13e99eeee6b17482fa069192b3d96c0f72c8026b336e8f205625b0b068e4812586dc8aea3ffd3dbd1659cfd4e176eaca0b5c25a30ec96bf5e5bdae26135fc0411a36be0f22f8e5d5f812377e30e98f2c081139477639470eecd6a6f89ecf302b2f48491bf89be1d069b76367b10036b19312d450e4aeb3a3fdfee9ab1d43e21c6c5fa354cca9ed676615aeaddc1d722d42b0fb9620036b77021f79ea4276bc07a4d8a0aeef755f3b3c", 0xd0, 0x1000}, {&(0x7f0000000700)="4bcaabeaedb5713ba886417fde495db513b58a99428ebc8666c9689545fdafbc80737d55f2d172b981e5730269d235b672683dbcbbecd88980ff5b9e4300322a4c7e9137ece9", 0x46}, {0x0, 0x0, 0x8}], 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="002c00d3a72e92c133ba65b53eb22c2c2f29a43a295b3a2c5d252c00000000"]) 08:06:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x48000000, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:06:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x894a, &(0x7f0000006900)={'wlan0\x00', @ifru_data=0x0}) fallocate(r0, 0x0, 0x2, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x100000004000, 0x0, 0x0, 0x3800800, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0xfff}, 0x4406, 0x3, 0x3, 0x7, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x7, 0x1, 0x20, 0x9, 0x0, 0x7, 0x200, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x70, 0x0, @perf_bp={&(0x7f0000000100), 0xd}, 0x812d, 0xb945, 0x8, 0x5, 0x0, 0x6, 0x8, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xd, r2, 0xa) umount2(&(0x7f0000000400)='./file0/file0\x00', 0x2) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 08:06:20 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2000, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) [ 2723.926955] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2723.929715] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:06:20 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3f00, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) 08:06:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x4c000000, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:06:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000001500)=[{&(0x7f0000000140)="1f", 0x1}], 0x1, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x0, @none, 0x0, 0x7}, 0xe) bind$bt_l2cap(r1, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x8020}) close(r0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x6, 0x1, 0x12, 0x1, 0x100000001, 0x1f34f383}, {0x7fff, 0x5, 0xfffffffffffff5e1, 0x7, 0x5, 0x8}], ['\x00']}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000004000000050000000300000000000000000000009a1b70a6aa66ff1d79df2a61ad73428c02650109764b20e4e471d02c87c4e75840e69f18bbdcc8001c1761f2ddb99e0f03a76af394392117e31fcaeeeb338d596580894949551a797ca302de974a71eabba9f06df2dd345dbf730da7ca9df149dfc58f54925db76895da57b495e0302e6724af3b166d6982c4e772c69bc9889c5e8e909edde0c3beb1b7d7315c4dae814ad3598bd3481eace6ebf380d63dd1b23569eef6c7540611a69f751f8768bd401ff27b00909f24b6cb09bd7951657a81339a68ba53fc11c558dd8388f5c48c1be1ae34"], 0x0) io_submit(0x0, 0x1, &(0x7f0000001540)=[0x0]) 08:06:20 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004200210e00000000000b000000000000"], 0x14}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) timerfd_create(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000080)={@local, 0x78, r3}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r3}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@polexpire={0xc8, 0x1b, 0x20, 0x70bd28, 0x25dfdbfb, {{{@in6=@remote, @in=@multicast1, 0x4e24, 0x8001, 0x4e23, 0x9, 0xa, 0xa0, 0x0, 0x84, r3, 0xffffffffffffffff}, {0xffffffff, 0x3fca, 0x7, 0x3, 0x1c45, 0x7fffffff, 0x9, 0x3}, {0x7, 0x2, 0x100000001, 0x400}, 0xfffff5c1, 0x6e6bbb, 0x2, 0x1}, 0xac}, [@XFRMA_IF_ID={0x8}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000440)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_create(0x0, 0x0) unshare(0x48020200) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/199, 0xc7, 0x8) [ 2724.062892] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2724.068828] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:06:40 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) (fail_nth: 6) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x2, [0x7a7, 0xbe8, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) 08:06:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6a00, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) 08:06:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000000a) 08:06:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000004c) [ 2743.396100] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2743.398803] FAULT_INJECTION: forcing a failure. [ 2743.398803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2743.400324] CPU: 1 PID: 21126 Comm: syz-executor.6 Not tainted 5.10.214 #1 08:06:40 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x68000000, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:06:40 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5942332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae443343359bcde6da4aff8e131310f04d1e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3e68ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e91826"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1f0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000001c0)=@sco}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x8) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = getpgrp(0x0) pidfd_open(r5, 0x0) r6 = getpgrp(0x0) r7 = pidfd_open(r6, 0x0) process_madvise(r7, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) pidfd_open(r6, 0x0) setresuid(r8, 0x0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2743.400935] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2743.401887] Call Trace: [ 2743.402121] dump_stack+0x107/0x167 [ 2743.402441] should_fail.cold+0x5/0xa [ 2743.402778] _copy_to_iter+0x264/0x12d0 [ 2743.403130] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2743.403578] ? trace_hardirqs_on+0x5b/0x180 [ 2743.403953] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2743.404418] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2743.404848] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2743.405276] ? check_stack_object+0x6e/0xb0 [ 2743.405647] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2743.406089] ? __check_object_size+0xae/0x440 [ 2743.406475] tty_read+0x29a/0x5e0 [ 2743.406783] ? do_SAK+0x70/0x70 [ 2743.407070] ? trace_hardirqs_on+0x5b/0x180 [ 2743.407463] do_iter_readv_writev+0x57c/0x750 [ 2743.407851] ? new_sync_write+0x660/0x660 [ 2743.408228] do_iter_read+0x28f/0x6d0 [ 2743.408593] ? import_iovec+0x83/0xb0 [ 2743.408927] vfs_readv+0xe5/0x160 [ 2743.409228] ? vfs_iter_read+0xa0/0xa0 [ 2743.409563] ? __fget_files+0x26d/0x4c0 [ 2743.409899] ? lock_downgrade+0x6d0/0x6d0 [ 2743.410246] ? find_held_lock+0x2c/0x110 [ 2743.410604] ? __fget_files+0x296/0x4c0 [ 2743.410949] ? __fget_light+0xea/0x290 [ 2743.411279] do_readv+0x139/0x300 [ 2743.411572] ? vfs_readv+0x160/0x160 [ 2743.411898] do_syscall_64+0x33/0x40 [ 2743.412209] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2743.412643] RIP: 0033:0x7f24ba810b19 [ 2743.412961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2743.414513] RSP: 002b:00007f24b7d86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2743.415214] RAX: ffffffffffffffda RBX: 00007f24ba923f60 RCX: 00007f24ba810b19 [ 2743.415853] RDX: 100000000000011f RSI: 00000000200003c0 RDI: 0000000000000004 [ 2743.416490] RBP: 00007f24b7d861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2743.418245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2743.420119] R13: 00007ffd8c5cb41f R14: 00007f24b7d86300 R15: 0000000000022000 [ 2743.430512] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2743.447382] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2743.455712] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2743.463280] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 08:06:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8004, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) 08:06:40 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x6c000000, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2743.570776] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2743.575833] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:06:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xeffd, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) 08:06:40 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x74000000, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:06:40 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x2a040600) unshare(0x800) unshare(0x60020000) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x3, 0x5, &(0x7f00000012c0)=[{&(0x7f00000000c0)="b2fa6f49d05568c90c01f945f11105999f199782ed8981d589c6cdb5ae168f9fcae1a1c3e4ad", 0x26, 0x5}, {&(0x7f00000002c0)="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", 0x1000, 0x4}, {&(0x7f0000000140)="29e88e3a4ebe76f26de3e6ddc6864460ab35e50caeffb6cc705e10bafbf069d85577235361b3a8bea72c9870d95d633ff861ebacc91975c765e74e9766d3fada5f3038", 0x43, 0x7}, {&(0x7f00000001c0)="7636a33b075a12d82f4eac273008c7f3dc3c2c66a3fb26d2b896c9d053b935141b823310cdb356d9de8d0d23170e87fb305d2fc64a9df6f83206521e0fab9f10bf46afe13469baed7dbb7c7d9e9c7848467e2b7ad0129a130184423924e2abab61a9410906b09c32e0f07a888e602ed3781e76ad0be8afdfd2ae2aab9886542af77afcb404ab5222197bae471e523d21d57db81342451413c1963114ba64c47306c0743aec6cdde16e8a29", 0xab}, {&(0x7f0000001600)="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", 0x12a, 0x100000000000}], 0x100000, &(0x7f0000001740)=ANY=[@ANYBLOB="73686f72746e616d650177696e6e742c6e6f6e756d7461696c3d302c6e6e6f6e756d746169686f72746e616d653d77696e6e742c7063723d30303030303030303030303030303030303030362c004103fad1926fbbbb8c0cdf7ab3d3ca9ff60f35e2c7f439a29035c8c8cb49ddf71a525c9757653ffe0e05a4850bf72228a95ea61cf22070d7faae9cc44c55cb9676c0941bc8f853bd1573c56e34a1c00f000000000000c81e2068cd45828a3887808cbcdad6c68fc0f1dfa922d541f2e99efcc9912dc35fd7b4e187db1f7b630e930718038fb55ebe1abfc2573bba4fbb6edc840ed91c0842ab10ad0ad1a08445467fcebf6da5510000000000"]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001340)='./file0\x00', 0x2000, 0x120) [ 2743.660969] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2743.663955] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:06:40 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x7a000000, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2743.704650] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2743.720699] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:06:40 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x86010000, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:06:40 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x9effffff, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:06:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0xc00e0000, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:06:59 executing program 2: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, 0x0, 0x400, 0x8, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) r1 = syz_open_dev$vcsn(0x0, 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0) syz_io_uring_setup(0x4d4f, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x29, 0x81, 0xf6, 0x5, 0x39, @rand_addr=' \x01\x00', @empty, 0x8, 0x8000, 0x0, 0xffff8001}}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000005c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xff}, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00080000000000000000000400020008000c0000000000"], 0x1c}}, 0x0) 08:06:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000004d) 08:06:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf000, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) 08:06:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000e000000080002800400c3fd"], 0x1c}}, 0x0) 08:06:59 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) (fail_nth: 7) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x2, [0x7a7, 0xbe8, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) 08:06:59 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x235, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_readv(r1, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x81, 0x7c, 0x57, 0x0, 0xff, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x3}, 0x800, 0x94f, 0x574, 0x0, 0x7, 0x0, 0x3f, 0x0, 0x9, 0x0, 0xfffffffffffffffa}, r1, 0x10, r0, 0x3) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x3, 0xd7, 0x27, 0x1, 0x0, 0x5, 0x40000, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f00000000c0), 0xc}, 0x18610, 0x6, 0x8, 0x9, 0x0, 0x8, 0xf7, 0x0, 0x8001, 0x0, 0x5}, r1, 0x6, r3, 0x9) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffdffb, 0xe22f}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r2) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000740), 0x40000, 0x0) 08:06:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000000c) [ 2762.329311] __nla_validate_parse: 4 callbacks suppressed [ 2762.329321] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2762.341824] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2762.371325] FAULT_INJECTION: forcing a failure. [ 2762.371325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2762.372760] CPU: 1 PID: 21422 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2762.373553] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2762.374332] Call Trace: [ 2762.374596] dump_stack+0x107/0x167 [ 2762.374954] should_fail.cold+0x5/0xa [ 2762.375329] _copy_to_iter+0x264/0x12d0 [ 2762.375728] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2762.376234] ? trace_hardirqs_on+0x5b/0x180 [ 2762.376643] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2762.377177] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2762.377648] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2762.378140] ? check_stack_object+0x6e/0xb0 [ 2762.378556] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2762.379052] ? __check_object_size+0xae/0x440 [ 2762.379492] tty_read+0x29a/0x5e0 [ 2762.379841] ? do_SAK+0x70/0x70 [ 2762.380192] do_iter_readv_writev+0x57c/0x750 [ 2762.380630] ? new_sync_write+0x660/0x660 [ 2762.381041] ? selinux_file_permission+0x92/0x520 [ 2762.381516] ? __import_iovec+0x244/0x590 [ 2762.381928] do_iter_read+0x28f/0x6d0 [ 2762.382294] ? import_iovec+0x83/0xb0 [ 2762.382673] vfs_readv+0xe5/0x160 [ 2762.383013] ? vfs_iter_read+0xa0/0xa0 [ 2762.383393] ? __fget_files+0x26d/0x4c0 [ 2762.383784] ? lock_downgrade+0x6d0/0x6d0 [ 2762.384188] ? find_held_lock+0x2c/0x110 [ 2762.384595] ? __fget_files+0x296/0x4c0 [ 2762.385010] ? __fget_light+0xea/0x290 [ 2762.385397] do_readv+0x139/0x300 [ 2762.385739] ? vfs_readv+0x160/0x160 [ 2762.386116] do_syscall_64+0x33/0x40 [ 2762.386479] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2762.386970] RIP: 0033:0x7f24ba810b19 [ 2762.387333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2762.389053] RSP: 002b:00007f24b7d86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2762.389779] RAX: ffffffffffffffda RBX: 00007f24ba923f60 RCX: 00007f24ba810b19 [ 2762.390454] RDX: 100000000000011f RSI: 00000000200003c0 RDI: 0000000000000004 [ 2762.391129] RBP: 00007f24b7d861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2762.391802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2762.392475] R13: 00007ffd8c5cb41f R14: 00007f24b7d86300 R15: 0000000000022000 08:06:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="820000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000cbf46552ff00000000", 0x11, 0x2100}], 0x0, &(0x7f0000000580)={[{@abort}]}) 08:06:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfdef, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) [ 2762.455718] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 08:06:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0xd21e0000, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:06:59 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x1ff) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000440)) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = openat$cgroup_ro(r0, &(0x7f00000006c0)='rdma.current\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000101000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000"]) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x3f, 0x1, 0x3f, 0x7f, 0x0, 0x3, 0x8b918, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffff9, 0x2, @perf_config_ext={0x3, 0x3}, 0x1, 0x2000000, 0xb116, 0x7, 0x3, 0x4, 0x2a, 0x0, 0x4, 0x0, 0x6000}, r4, 0xd, r5, 0x1) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffc, r2, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000180), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="1508d63be1834dd1375ec2a3c3ea62c87babcbaf4516456d4010001b74b1aa8e0b273718d7bdd803c3cc7928b2a9d408720b1f966f0272a5438dbadc09554d5937330017d48fcc2057ee5cfa8a0b4f3b93db58650b00ad617ede2779d1b0bfad09de9d1b956f011fa29fe1769719ad39625a6551a24a8d2b3c6ff4fb0899d943747917268d3f2fdbe85dc46c28ba57d0073445893112377a244c97b11a73f545c48c233372c684e853c551486f995299fb2fddf4c9f8b46ff9b7b6a8bd84f523c8687c203bd6589da71c3b2093e5383754", 0xd1, r2) keyctl$revoke(0x3, 0x0) unshare(0x48020200) 08:06:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) [ 2762.630545] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2762.645109] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:07:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) 08:07:17 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0xf0ffffff, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2780.981862] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2781.013279] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2781.031322] FAULT_INJECTION: forcing a failure. [ 2781.031322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2781.032410] CPU: 1 PID: 21566 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2781.033013] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2781.034012] Call Trace: [ 2781.034203] dump_stack+0x107/0x167 [ 2781.034455] should_fail.cold+0x5/0xa [ 2781.034722] _copy_to_iter+0x264/0x12d0 [ 2781.035006] ? check_stack_object+0x1a/0xb0 [ 2781.035300] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2781.035636] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2781.035981] ? check_stack_object+0x6e/0xb0 [ 2781.036278] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2781.036675] ? __check_object_size+0xae/0x440 [ 2781.036988] tty_read+0x29a/0x5e0 [ 2781.037410] ? do_SAK+0x70/0x70 [ 2781.037731] do_iter_readv_writev+0x57c/0x750 [ 2781.038221] ? new_sync_write+0x660/0x660 [ 2781.038586] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2781.039066] ? do_iter_read+0x218/0x6d0 [ 2781.039416] ? do_iter_read+0x226/0x6d0 [ 2781.039774] do_iter_read+0x28f/0x6d0 [ 2781.040116] ? import_iovec+0x83/0xb0 [ 2781.040463] vfs_readv+0xe5/0x160 [ 2781.040776] ? vfs_iter_read+0xa0/0xa0 [ 2781.041202] ? __fget_files+0x26d/0x4c0 [ 2781.041570] ? lock_downgrade+0x6d0/0x6d0 [ 2781.041953] ? find_held_lock+0x2c/0x110 [ 2781.042348] ? __fget_files+0x296/0x4c0 [ 2781.042727] ? __fget_light+0xea/0x290 [ 2781.043078] do_readv+0x139/0x300 [ 2781.043391] ? vfs_readv+0x160/0x160 [ 2781.043738] do_syscall_64+0x33/0x40 [ 2781.044070] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2781.044517] RIP: 0033:0x7f24ba810b19 [ 2781.044850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2781.049458] RSP: 002b:00007f24b7d86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2781.050952] RAX: ffffffffffffffda RBX: 00007f24ba923f60 RCX: 00007f24ba810b19 08:07:17 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x6, 0xf9, 0x4, 0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xffffffff8100000f}, 0x10, 0x3, 0x0, 0x9, 0x1, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) futex(0x0, 0x2, 0x2, 0x0, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000440)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000005e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20, 0x0, 0x1}, 0x0, 0xfffffffffffffffc, r0, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) lseek(r2, 0x9e46, 0x0) ioctl$TIOCCBRK(r1, 0x5428) openat$vcs(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000540)=0x1) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) r3 = fork() ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000200)={{0x2, 0x7}, 0x100, './file0\x00'}) ptrace(0x10, r3) ptrace(0x4207, r3) 08:07:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000000d) 08:07:17 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) dup3(r0, r0, 0x80000) ftruncate(r1, 0x1000003) lseek(r1, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) write$P9_RREADLINK(r1, &(0x7f00000002c0)=ANY=[], 0x10) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x30000000000) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x894a, &(0x7f0000006900)={'wlan0\x00', @ifru_data=0x0}) dup3(0xffffffffffffffff, r2, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) openat(r4, &(0x7f0000000040)='./file0\x00', 0x0, 0x80) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x69, 0x0, {0x20, 0x4, 0x8}}, 0x14) lsetxattr$security_ima(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x183000, 0x0) 08:07:17 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000004e) 08:07:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) (fail_nth: 8) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x2, [0x7a7, 0xbe8, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) 08:07:17 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0xfa, 0xe1, 0x7, 0x0, 0x0, 0x1, 0x200, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x3, @perf_bp={&(0x7f0000000380)}, 0x0, 0x1, 0x80000000, 0xd, 0xfd1e, 0x7, 0x5, 0x0, 0xffff711a, 0x0, 0x4}, 0x0, 0xf, r1, 0x0) umount2(&(0x7f00000000c0)='./file1\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = openat$incfs(r0, &(0x7f0000000080)='.log\x00', 0x100, 0x0) syz_io_uring_setup(0x792e, &(0x7f0000000200)={0x0, 0x7035, 0x20, 0x0, 0x1de}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) unlinkat(r3, &(0x7f00000001c0)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = open$dir(&(0x7f0000000480)='./file0\x00', 0x200400, 0xc8) symlinkat(&(0x7f0000000440)='./file1\x00', r5, &(0x7f00000004c0)='./file0\x00') sendfile(r2, r4, 0x0, 0x100000001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x24000, 0x0) sendfile(r2, r6, 0x0, 0x80000001) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x4, 0x1, 0x2, 0x2, 0x0, 0x3, 0x40020, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x80, 0x98, 0x5a, 0x9, 0xb7, 0x124, 0x8, 0x0, 0x9}, 0xffffffffffffffff, 0x0, r2, 0x2) 08:07:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf0ffff, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) [ 2781.052364] RDX: 100000000000011f RSI: 00000000200003c0 RDI: 0000000000000004 [ 2781.054487] RBP: 00007f24b7d861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2781.055887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2781.057244] R13: 00007ffd8c5cb41f R14: 00007f24b7d86300 R15: 0000000000022000 08:07:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0xffffe000, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:07:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffff0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) [ 2781.138496] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2781.178562] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2781.198225] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:07:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0xfffff000, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:07:18 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) (fail_nth: 9) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x2, [0x7a7, 0xbe8, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) 08:07:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000000, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) 08:07:18 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x3, 0x0, 0xe7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x4, 0xe3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x82000003) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0xa4000004) inotify_rm_watch(r0, r2) [ 2781.314844] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2781.330948] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:07:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r2, &(0x7f0000000740)=[{&(0x7f0000000140)="43f176e2ed32fc8e59b945cf2ce2f3a5c893b0c9542483bc0b64d1adafdfbfd251cb", 0x22}, {&(0x7f00000001c0)="1e184a7e0bfaf077dd888ff88af51f760f5cce14c82c5239dbc3061c55ea652dfbee0861486caff99931aa7a72d92b38b3ed1c620532fff2705850b6c2a0383be8676156b5efcb7ba4b5180a9d13fb1fa44462824edca0c059", 0x59}, {&(0x7f0000000240)="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", 0xfd}, {&(0x7f0000000340)="45aac75bc129a51895d63c6fa2b63d825988b8de43cc0a7c3acede47a386a2824404", 0x22}, {&(0x7f0000000380)="411433e2d6d7422a6396eed23f6852a56177ba19b3a0e0a5c9bed0466b741aa4cebc8de485eab055437de59c3eb13c59b6b1efbc23dea0b323a101b3a5cd8d7c7be9a559944a22906d5ba2ea7a099f1bea7c374610fa363093019d9fc23c3980d31a34c46762b20e3d16286cd858ae1ab643b379967446253eecc830fa5babd4d71c89f1a1da87d0d3d714", 0x8b}, {&(0x7f0000000440)="9826bc3e65b37522b2607a72d21f9d8b469b104b70f2874a339e2079db235c57f0f6c851a6b0bdecbe3a05224f5b36dd32364bf208507652484b1dfa8035c322e60648c79aa6b2d534603178242386ffcbb218a830c01acd06f0984ea2186520d7b88f3d6e44e80f1733a9d2800000000000000052e8e9c877794d00145b703db242a8a419661fc9479a7a19588e0b7b50ba06b82daae52f4595bed45c17dd8d185f0650ca6a8546438db6416f05dfb7324ecd181c931391a365ae076bf2b6ebcb5473950aff11904def", 0xca}, {&(0x7f0000000540)="924b718f0e11a4f9975e9707ae5e44b9061cb2689db688eea0f2b5e438d3be003dae1c75235189c6765fb79bbd69526cbb338fd28bccfc9247d6e7d5fd6bc417646c18bbd9a7e61c37f7e7b459eccf789c87b014b48148ffbea269675c06f54167cb400e60085906158a81c498063c2e8dffc639bcd16b36382137ffbdffa9381058de608e5936c99ab80bf678aa79a7204be9c7f483f93b30c2f4cd112b9b7f4a522396f4aa9d5de31e76f2f6908e26836bf871341b6bd5784f4140aa65d3fae31df3c86d787ea83fbbc0286ef372a8fe3ba5497bdecce283d24d389baee01906aa9d4f41041fe6a0", 0xe9}, {&(0x7f00000007c0)="f9cb389bf7f4befbfe584953eb715b342907314c6ff10b770d68a778e1d653bab0856b6f29fb9d16f186ccbeac383e3cd16d2e8a247a37563759446c748aa30b27b5b95a3eefea752bd54046e955006bbe5e6b051289c10c4e7471562691f97843580daf926d0b34a655df2c2d322e18475b896f3ad8c031e7cfb50d67215578a4722f6219c0795ac4a4bbd39c8ad1a60384cf6d28e9aa9b10d85a5cd713a908d3951301a5dbf1051cccbfe93fbc6a6b71eb7d9944ac9185d840f3ecc37af692ee8a06bedba143195e45504e1ad0ddb1f718e0ea5d609d2fbd0e24bb4bcb978c5da4e508be0604fa11", 0xe9}], 0x8, 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x10001, 0x0) [ 2781.430804] FAULT_INJECTION: forcing a failure. [ 2781.430804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2781.434432] CPU: 1 PID: 21598 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2781.435899] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2781.438031] Call Trace: [ 2781.438622] dump_stack+0x107/0x167 [ 2781.439403] should_fail.cold+0x5/0xa [ 2781.440237] _copy_to_iter+0x264/0x12d0 [ 2781.441295] ? __lock_acquire+0x1657/0x5b00 [ 2781.442322] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2781.443412] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2781.444530] ? check_stack_object+0x6e/0xb0 [ 2781.445648] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2781.446803] ? __check_object_size+0xae/0x440 [ 2781.447807] tty_read+0x29a/0x5e0 [ 2781.448584] ? do_SAK+0x70/0x70 [ 2781.449456] do_iter_readv_writev+0x57c/0x750 [ 2781.450487] ? new_sync_write+0x660/0x660 [ 2781.451400] ? selinux_file_permission+0x92/0x520 [ 2781.452470] do_iter_read+0x28f/0x6d0 [ 2781.453451] ? import_iovec+0x83/0xb0 [ 2781.454292] vfs_readv+0xe5/0x160 [ 2781.455062] ? vfs_iter_read+0xa0/0xa0 [ 2781.455900] ? __fget_files+0x26d/0x4c0 [ 2781.456761] ? lock_downgrade+0x6d0/0x6d0 [ 2781.457869] ? find_held_lock+0x2c/0x110 [ 2781.458887] ? __fget_files+0x296/0x4c0 [ 2781.459740] ? __fget_light+0xea/0x290 [ 2781.460582] do_readv+0x139/0x300 [ 2781.461442] ? vfs_readv+0x160/0x160 [ 2781.462228] do_syscall_64+0x33/0x40 [ 2781.462989] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2781.463967] RIP: 0033:0x7f24ba810b19 [ 2781.464674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2781.466521] RSP: 002b:00007f24b7d86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2781.467217] RAX: ffffffffffffffda RBX: 00007f24ba923f60 RCX: 00007f24ba810b19 [ 2781.467860] RDX: 100000000000011f RSI: 00000000200003c0 RDI: 0000000000000004 [ 2781.468504] RBP: 00007f24b7d861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2781.469328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2781.470673] R13: 00007ffd8c5cb41f R14: 00007f24b7d86300 R15: 0000000000022000 08:07:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0xffffff7f, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:07:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) [ 2781.520853] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2781.528108] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:07:18 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000004f) [ 2781.635790] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 08:07:38 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r2 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ftruncate(r2, 0x9) read(r0, 0x0, 0x25) pread64(r1, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000500)={0x0, &(0x7f00000004c0)=[{0x6, 0x0, 0x80, 0x7fffffff}]}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000007d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) fsetxattr$security_capability(r4, &(0x7f0000000100), &(0x7f0000000140)=@v3={0x3000000, [{0x4, 0x2}, {0x7fff, 0xa0d}], r5}, 0x18, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x9db, 0x20, 0x5, 0x200}]}) fallocate(r3, 0x18, 0x9, 0x100000000) fallocate(0xffffffffffffffff, 0x5, 0x4, 0x8) accept4(0xffffffffffffffff, &(0x7f0000007a80)=@hci, &(0x7f0000007b00)=0xb7, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000002400)) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@empty, @in=@initdev}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) 08:07:38 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r4 = perf_event_open$cgroup(&(0x7f0000000180)={0x3, 0x80, 0x46, 0x69, 0x20, 0xff, 0x0, 0x117, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc88, 0x4, @perf_config_ext={0x2, 0x1}, 0x0, 0x5, 0x30, 0x7, 0x9, 0x81, 0x9, 0x0, 0x8, 0x0, 0x89}, 0xffffffffffffffff, 0xc, r0, 0x1) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x81, 0x3, 0xca, 0x24, 0x0, 0x710000000000, 0x40, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x6, 0x5}, 0x220c, 0x6, 0x2, 0x5, 0x8, 0x7, 0x1, 0x0, 0x5, 0x0, 0x3}, r3, 0xb, r4, 0x1) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="290300000000000000000500", @ANYBLOB], 0x1c}}, 0x0) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) 08:07:38 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0xffffff9e, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:07:38 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) (fail_nth: 10) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x2, [0x7a7, 0xbe8, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) 08:07:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3000000, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) 08:07:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000050) 08:07:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000000f) 08:07:38 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000080)={0x1, 0x401, 0x2}) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000680)=""/4096, 0xfffffd29}, {&(0x7f0000000380)=""/164, 0xa4}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/4096, 0x1000}], 0x4, 0x7f, 0x7) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)={0x40000000}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) r4 = epoll_create(0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000001c0)=r5) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000003e00)={{r3}, r5, 0xa, @inherit={0x58, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000000200000000000000050000000000000000000024000000001f000000000000ffffffe100003b20e1cedabadd3600ffffffff03000000000000000000010000000000450600"/88]}, @subvolid=0x8}) r6 = add_key$fscrypt_v1(&(0x7f0000000180), 0x0, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x15, r6, 0x0, 0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000001940)=ANY=[@ANYBLOB="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"/646]) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\a\x00'/19]) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) readv(0xffffffffffffffff, &(0x7f0000001300), 0x0) [ 2801.337714] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2801.365716] FAULT_INJECTION: forcing a failure. [ 2801.365716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2801.370585] CPU: 0 PID: 21735 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2801.372640] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2801.373558] Call Trace: [ 2801.374922] dump_stack+0x107/0x167 [ 2801.375966] should_fail.cold+0x5/0xa [ 2801.376958] _copy_to_iter+0x264/0x12d0 [ 2801.378119] ? __lock_acquire+0x1657/0x5b00 [ 2801.379216] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2801.380336] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2801.380571] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2801.381510] ? check_stack_object+0x6e/0xb0 [ 2801.381526] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2801.381541] ? __check_object_size+0xae/0x440 [ 2801.381562] tty_read+0x29a/0x5e0 [ 2801.381587] ? do_SAK+0x70/0x70 [ 2801.393489] do_iter_readv_writev+0x57c/0x750 [ 2801.398624] ? new_sync_write+0x660/0x660 [ 2801.399695] ? selinux_file_permission+0x92/0x520 [ 2801.400835] do_iter_read+0x28f/0x6d0 [ 2801.401749] ? import_iovec+0x83/0xb0 [ 2801.402633] vfs_readv+0xe5/0x160 [ 2801.403441] ? vfs_iter_read+0xa0/0xa0 [ 2801.404492] ? __fget_files+0x26d/0x4c0 [ 2801.406009] ? lock_downgrade+0x6d0/0x6d0 [ 2801.407172] ? find_held_lock+0x2c/0x110 [ 2801.408345] ? __fget_files+0x296/0x4c0 [ 2801.409416] ? __fget_light+0xea/0x290 [ 2801.409830] do_readv+0x139/0x300 [ 2801.410205] ? vfs_readv+0x160/0x160 [ 2801.410620] do_syscall_64+0x33/0x40 [ 2801.410765] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2801.411012] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2801.411030] RIP: 0033:0x7f24ba810b19 [ 2801.412897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2801.417694] RSP: 002b:00007f24b7d86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2801.419946] RAX: ffffffffffffffda RBX: 00007f24ba923f60 RCX: 00007f24ba810b19 [ 2801.421675] RDX: 100000000000011f RSI: 00000000200003c0 RDI: 0000000000000004 [ 2801.423348] RBP: 00007f24b7d861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2801.425068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2801.426990] R13: 00007ffd8c5cb41f R14: 00007f24b7d86300 R15: 0000000000022000 08:07:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000000, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) [ 2801.486956] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 08:07:38 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0xfffffff0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) [ 2801.531972] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 08:07:38 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0x0, r3) sendmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3}}}], 0x20}, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)={0x2e0, 0x9, 0x100, 0x70bd28, 0x25dfdbfe, {0x12}, [@typed={0x8, 0x2c, 0x0, 0x0, @uid=r3}, @nested={0x1f3, 0x13, 0x0, 0x1, [@generic="8b4ef41d67c726e36f73185bf31438eaa2d03f7c797950ebcab73c3c11a7a9", @generic="49b9207b92fd1e8b4682613be2e10ca61cbfe4eef79f95fadda0", @generic="0288e313a194160e568b83b7ac64ba3abd2182b378a5539074905776a52c55002d18670976176d", @generic="c62ddfa5e020492064afc7dc3f08cd806fb7f680b7050d5fce03a6e38eca3ecd46e5d56f37d41c8d8050551f6486d641ff63b2a2dff79aef4651730dd755d1607e33a4fa3ae0525c44095f53ffa31347d8b35f2cb47e4524f76d30be595d1a9d440183e8f184c058ce10c77700fa81c034c77eba68a46ea130da66ba8fcc5c34309d34253a0c55b1e6790722b5115cb6ab76df7b2e018c2364db6275f3edf1822a08c08b8ccb10d7b331ec5625a6599dbd128e454fa8db93ddc6656301927b2deac238c9d05d589dd17dd7dfe5ae656690d21b958841cc4fd5", @generic="0bb44f52e59566f800a4737c952237c591a86e7f246ddc15ef11e4035e4f902fd47d443c03c5cad07a0da035a79dd75cf038dc6869f711a008e92e08fd11fe627bead03bc01f772730de6ac9c2871d3b5f95", @typed={0x8, 0x70, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="88e1066935e266a28d70401c157b30248bbf8a50337cf0cb41c6781315ed789d2f19202eabf2d0f4339034ede4c40fb6b84d71bdcfa41a247a6e5b1f9d7030f636d03124b97d5ce7fc6a039f66cbc2f932f2", @typed={0x8, 0x3a, 0x0, 0x0, @pid=r4}, @generic="5499"]}, @typed={0x8, 0x7a, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x40, 0x0, 0x0, @u32=0x1}, @generic="6f0436bbc13ef8aa5f9ed4e31755b162dab423c23d508833cff46863fc1aa45b3db0d802e67a759e5d15d3dcc1c0ab4d8084acf96a26951910a332bac8a0370fc5872c3f83e980388235e382bcaed297b206bda4b814d9d4dac3f7f95494fd1bff37072720051436c850b181b0e9fc9410638503df35dbb75e687db3eff58e373ee10dd1ed3a4933d5e9ada94a2e515644e9a4fcf38b450c97aa02e3f8c66742d29206fab0451f677dbed1a0fd744752141cb490c1b7860b3e5fa68d4be8"]}, 0x2e0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x21008, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f00000000c0)={@private2}, 0x14) write$binfmt_elf64(r5, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x7, 0x8, 0x8, 0x68, 0x2, 0x3d, 0x5, 0xff, 0x40, 0x324, 0xf8d6, 0x7, 0x38, 0x1, 0x2, 0x586, 0x8}, [{0x60000000, 0x6, 0x1, 0x3, 0x9, 0x4, 0x1f, 0x1}], "cf32a2a884371eb5da9e556c118781178b2aa8ef9b6ce9bb3ab1c59594678e65c922afee7b70eeaa7671ae1843be4b3446ec14456633004cddecb25475c89058b1ee245656e2fa2e89bf811e673115be46f0a5524c01d92452fbd6f3ed9c29", ['\x00', '\x00']}, 0x2d7) r6 = getpgrp(0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x80, 0x5, 0x0, 0xc3, 0x0, 0x4, 0x1c0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7fff, 0x2, @perf_config_ext={0x1000}, 0x0, 0x1, 0x1f, 0x4, 0x57, 0x4, 0x1, 0x0, 0xc0, 0x0, 0x7}, r6, 0x1, 0xffffffffffffffff, 0x3) open_by_handle_at(r5, &(0x7f00000001c0)=@reiserfs_5={0x14, 0x5, {0x2, 0x10000, 0x9, 0x7fff, 0x5}}, 0x2) 08:07:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5000000, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) [ 2801.675726] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2801.699301] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:07:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x1, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) signalfd(r0, &(0x7f0000000380)={[0x800]}, 0x8) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040), 0x4) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0x3, 0x3, 0x101, 0x0, 0xffffffff, 0x400}) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdff7fffffffff, 0xffffffffffffffff, 0x2) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 08:07:38 executing program 5: syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_setup(0x489f, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x420000, 0x3) io_uring_enter(r0, 0x650, 0x9e17, 0x2, &(0x7f00000001c0)={[0xd56d]}, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x894a, &(0x7f0000006900)={'wlan0\x00', @ifru_data=0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x894a, &(0x7f0000006900)={'wlan0\x00', @ifru_data=0x0}) sendfile(r1, r2, &(0x7f0000000140)=0x101, 0x9) io_uring_setup(0x6a19, &(0x7f0000000240)={0x0, 0x9cdd, 0x8, 0x0, 0x1e2}) 08:07:38 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0xffffffff, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:07:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6000000, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) 08:07:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000010) 08:07:38 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0x1000}, {&(0x7f00000002c0)=""/15}, {&(0x7f0000000300)=""/131}], 0x100000000000011f) (fail_nth: 11) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) dup3(0xffffffffffffffff, r3, 0x80000) write(r2, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000000000006) syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="67856f93ef03aaaaaaaaaabb91002b008100330008050104099731f296efc77c2db7ea22fcdb65f7e81d54a63549f315e4b2dd0af59dea0d41a8bf855c71d77d33975eb40000f14359d79585f8ac114aaae3530532089a16c847e3087d3f0fdb31d53450494d1e6f443b4871f3dfa4ee4e7bccced59fcd2ab006ec43a57c6789e9ba0dd6b91e6032241d6e547655a80b6ef54d1e1d100764a7652da7cdc5ffed2a89c08932b91b918634e2eaf954fcfb3ad63e7dbf8b94e47c3f2501052534dab5a0f1344a3bade9ff3bd67214ffbea25380f762b680bf186ff20f7c6f766b60b265d03adc9a37b8b034a36ff77f67457722853d69f8d1a2e5287c5085d321a25a7ca4887272ab147baa18023ebdd453300e8e42870d3cb1b0af0f82c8e56d614f104804f10afd0e2f59432fc8c9fb273adab4900b17eb1e52372254cebc0f4ae0fbc2db92c8b2471bd4690cdfff48f2e5547429c589d3b889637dd6e2a38037215367d91ae5aa3ab4ace46c6a285a9dfefa6908a588c943c93ff440ce89e93a1e6d9f9d9b9040063a971b9d23f7f6c750853bb8e8bb20ec8a8a6d986edb75af8c11367319cb11f5de4cef3b3e7486f218ffd042a9784f8bc040d581ea21e203bb8383ad96838be54645df869f5afd6cef0bd5281a9e058d"], &(0x7f0000000180)={0x0, 0x2, [0x7a7, 0xbe8, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) 08:07:38 executing program 2: modify_ldt$write(0x1, &(0x7f0000000000)={0xfffffffd, 0x1000, 0x1000}, 0x10) modify_ldt$write(0x1, &(0x7f0000000040)={0x6, 0x20000800, 0x4000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080)={0x10001, 0x20000800, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f00000000c0)={0x3, 0x20001000, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000100)={0x9, 0x20000800, 0x2000, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000140)={0x0, 0x20000000, 0x4000}, 0x10) modify_ldt$write(0x1, &(0x7f0000000180)={0x1, 0x1000, 0x400, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f00000001c0)={0x6, 0x20000800, 0x4000, 0x0, 0x3}, 0x10) modify_ldt$write(0x1, &(0x7f0000000200)={0x4, 0x1000, 0x2000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000240)={0x6, 0x1000, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000280)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f00000002c0)={0x6, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000300)={0x1, 0x1000, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000340)={0x80000001, 0x20000000, 0x1000, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000380)={0x40, 0x20001000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f00000003c0)={0x2, 0x100000, 0x0, 0x0, 0x3, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000400)={0x8, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000440)={0x7f, 0x100000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000480)={0x9840, 0x1000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f00000004c0)={0x3, 0x1000, 0x2000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) [ 2801.948819] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2801.967118] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:07:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7000000, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) 08:07:39 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:07:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000051) [ 2802.135841] FAULT_INJECTION: forcing a failure. [ 2802.135841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2802.137073] CPU: 1 PID: 21908 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2802.138691] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2802.140609] Call Trace: [ 2802.141156] dump_stack+0x107/0x167 [ 2802.142229] should_fail.cold+0x5/0xa [ 2802.143146] _copy_to_iter+0x264/0x12d0 [ 2802.144103] ? __lock_acquire+0x1657/0x5b00 [ 2802.145139] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2802.146640] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2802.147824] ? check_stack_object+0x6e/0xb0 [ 2802.148825] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2802.150279] ? __check_object_size+0xae/0x440 [ 2802.151392] tty_read+0x29a/0x5e0 [ 2802.152256] ? do_SAK+0x70/0x70 [ 2802.153075] do_iter_readv_writev+0x57c/0x750 [ 2802.154429] ? new_sync_write+0x660/0x660 [ 2802.155391] ? selinux_file_permission+0x92/0x520 [ 2802.156538] do_iter_read+0x28f/0x6d0 [ 2802.157395] ? import_iovec+0x83/0xb0 [ 2802.157769] vfs_readv+0xe5/0x160 [ 2802.158118] ? vfs_iter_read+0xa0/0xa0 [ 2802.158505] ? __fget_files+0x26d/0x4c0 [ 2802.158906] ? lock_downgrade+0x6d0/0x6d0 [ 2802.159315] ? find_held_lock+0x2c/0x110 [ 2802.159732] ? __fget_files+0x296/0x4c0 [ 2802.160146] ? __fget_light+0xea/0x290 [ 2802.160539] do_readv+0x139/0x300 [ 2802.160889] ? vfs_readv+0x160/0x160 [ 2802.161277] do_syscall_64+0x33/0x40 [ 2802.162472] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2802.163685] RIP: 0033:0x7f24ba810b19 [ 2802.164552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2802.166776] RSP: 002b:00007f24b7d86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2802.167513] RAX: ffffffffffffffda RBX: 00007f24ba923f60 RCX: 00007f24ba810b19 [ 2802.168203] RDX: 100000000000011f RSI: 00000000200003c0 RDI: 0000000000000004 [ 2802.168887] RBP: 00007f24b7d861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2802.170243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2802.171897] R13: 00007ffd8c5cb41f R14: 00007f24b7d86300 R15: 0000000000022000 08:07:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000200)={'HL\x00'}, &(0x7f0000000240)=0x1e) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0)=0xffffffffffffffff) syz_emit_ethernet(0x7e, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x8000, @private0, 0x2549ca58}, 0x1c) [ 2802.262868] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2802.271271] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:07:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8000000, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) 08:07:39 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000000c0)={0x0, "40adbe3eca369fbacefc13ac23b5b1f8"}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000010c0)={0x0, "4e1908311d0e2023097b0963b92ac1f3"}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000020c0)={0x1, 0x4, {0x9, @usage=0x7, r1, 0x6, 0x2, 0x1, 0x1, 0x1, 0x435, @usage=0x100000001, 0x9, 0x9, [0x3, 0x1, 0x100, 0x81, 0x40, 0x8765]}, {0x8, @struct={0x5, 0x4}, 0x0, 0x6, 0x9, 0x4, 0x8000, 0x1, 0x0, @struct={0x800, 0x2}, 0x0, 0x9, [0x2, 0x400, 0x6, 0x9, 0x4, 0xffffffffffffff6a]}, {0x7ff, @struct={0x200, 0x6}, r2, 0x1, 0x6, 0xb661, 0xfff, 0xffffffff, 0x90, @usage=0x1, 0x7fff, 0x7, [0x3ff, 0xffffffff, 0x1, 0xb104, 0x9ea1]}, {0x8, 0x5109784c}}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) signalfd(r3, &(0x7f00000024c0), 0x8) r4 = inotify_init1(0x100000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r5, 0x894a, &(0x7f0000006900)={'wlan0\x00', @ifru_data=0x0}) fcntl$getown(r5, 0x9) fsync(r4) [ 2802.285773] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 08:07:39 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x2, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 08:07:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000011) [ 2802.349916] [ 2802.350472] ====================================================== [ 2802.352032] WARNING: possible circular locking dependency detected [ 2802.362305] 5.10.214 #1 Not tainted [ 2802.362645] ------------------------------------------------------ [ 2802.363215] syz-executor.2/22031 is trying to acquire lock: [ 2802.363733] ffff888019f18b78 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90 [ 2802.364690] [ 2802.364690] but task is already holding lock: [ 2802.365228] ffffffff8561a8c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 2802.367415] [ 2802.367415] which lock already depends on the new lock. [ 2802.367415] [ 2802.368151] [ 2802.368151] the existing dependency chain (in reverse order) is: [ 2802.368832] [ 2802.368832] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 2802.370439] __mutex_lock+0x13d/0x10b0 [ 2802.370844] rfkill_register+0x36/0xa10 [ 2802.371260] hci_register_dev+0x42e/0xc00 [ 2802.371696] __vhci_create_device+0x2c8/0x5c0 [ 2802.372154] vhci_open_timeout+0x38/0x50 [ 2802.372555] process_one_work+0x9a9/0x14b0 [ 2802.372973] worker_thread+0x61d/0x1310 [ 2802.373636] kthread+0x38f/0x470 [ 2802.374581] ret_from_fork+0x22/0x30 [ 2802.375599] [ 2802.375599] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 2802.377176] __mutex_lock+0x13d/0x10b0 [ 2802.378289] vhci_send_frame+0x63/0xa0 [ 2802.379363] hci_send_frame+0x1b9/0x320 [ 2802.380453] hci_tx_work+0x10af/0x1660 [ 2802.381428] process_one_work+0x9a9/0x14b0 [ 2802.381865] worker_thread+0x61d/0x1310 [ 2802.382280] kthread+0x38f/0x470 [ 2802.382642] ret_from_fork+0x22/0x30 [ 2802.383031] [ 2802.383031] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 2802.383763] __flush_work+0x105/0xa90 [ 2802.384165] hci_dev_do_close+0x131/0x1240 [ 2802.384609] hci_unregister_dev+0x149/0x430 [ 2802.385060] vhci_release+0x70/0xf0 [ 2802.385719] __fput+0x285/0x980 [ 2802.386640] task_work_run+0xe2/0x1a0 [ 2802.387690] do_exit+0xb6f/0x2600 [ 2802.388660] do_group_exit+0x125/0x310 [ 2802.389753] get_signal+0x4bc/0x22e0 [ 2802.390757] arch_do_signal_or_restart+0x2b7/0x1990 [ 2802.392086] exit_to_user_mode_prepare+0x10f/0x190 [ 2802.393448] syscall_exit_to_user_mode+0x38/0x1e0 [ 2802.394756] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2802.396142] [ 2802.396142] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 2802.397726] __mutex_lock+0x13d/0x10b0 [ 2802.398795] bg_scan_update+0x82/0x500 [ 2802.399855] process_one_work+0x9a9/0x14b0 [ 2802.401006] worker_thread+0x61d/0x1310 [ 2802.402139] kthread+0x38f/0x470 [ 2802.403083] ret_from_fork+0x22/0x30 [ 2802.404094] [ 2802.404094] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 2802.406183] __lock_acquire+0x29e7/0x5b00 [ 2802.407305] lock_acquire+0x197/0x470 [ 2802.408323] __flush_work+0x105/0xa90 [ 2802.409416] __cancel_work_timer+0x368/0x4c0 [ 2802.410631] hci_request_cancel_all+0x73/0x230 [ 2802.411894] hci_dev_do_close+0xd9/0x1240 [ 2802.413052] hci_rfkill_set_block+0x166/0x1a0 [ 2802.414353] rfkill_set_block+0x1fd/0x540 [ 2802.415512] rfkill_fop_write+0x253/0x4b0 [ 2802.416666] vfs_write+0x29a/0xa70 [ 2802.417705] ksys_write+0x1f6/0x260 [ 2802.418724] do_syscall_64+0x33/0x40 [ 2802.419740] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2802.421111] [ 2802.421111] other info that might help us debug this: [ 2802.421111] [ 2802.423293] Chain exists of: [ 2802.423293] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 2802.423293] [ 2802.424549] Possible unsafe locking scenario: [ 2802.424549] [ 2802.425098] CPU0 CPU1 [ 2802.425539] ---- ---- [ 2802.425931] lock(rfkill_global_mutex); [ 2802.426313] lock(&data->open_mutex); [ 2802.426897] lock(rfkill_global_mutex); [ 2802.427503] lock((work_completion)(&hdev->bg_scan_update)); [ 2802.428057] [ 2802.428057] *** DEADLOCK *** [ 2802.428057] [ 2802.428620] 1 lock held by syz-executor.2/22031: [ 2802.429059] #0: ffffffff8561a8c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 2802.429969] [ 2802.429969] stack backtrace: [ 2802.430391] CPU: 1 PID: 22031 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 2802.431023] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2802.431783] Call Trace: [ 2802.432041] dump_stack+0x107/0x167 [ 2802.432389] check_noncircular+0x263/0x2e0 [ 2802.432783] ? register_lock_class+0xbb/0x17b0 [ 2802.433216] ? print_circular_bug+0x470/0x470 [ 2802.433668] ? find_first_zero_bit+0x94/0xb0 [ 2802.434080] ? alloc_chain_hlocks+0x342/0x5a0 [ 2802.434505] __lock_acquire+0x29e7/0x5b00 [ 2802.434904] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2802.435391] ? SOFTIRQ_verbose+0x10/0x10 [ 2802.435776] ? __lockdep_reset_lock+0x180/0x180 [ 2802.436210] ? mark_lock+0xf5/0x2df0 [ 2802.436561] lock_acquire+0x197/0x470 [ 2802.436920] ? __flush_work+0xdd/0xa90 [ 2802.437290] ? lock_release+0x680/0x680 [ 2802.437690] ? __flush_work+0x78c/0xa90 [ 2802.438063] ? lock_downgrade+0x6d0/0x6d0 [ 2802.438459] __flush_work+0x105/0xa90 [ 2802.438828] ? __flush_work+0xdd/0xa90 [ 2802.439200] ? lock_chain_count+0x20/0x20 [ 2802.439585] ? queue_delayed_work_on+0xe0/0xe0 [ 2802.440011] ? mark_lock+0xf5/0x2df0 [ 2802.440360] ? mark_lock+0xf5/0x2df0 [ 2802.440710] ? lock_chain_count+0x20/0x20 [ 2802.441109] ? perf_trace_lock+0xac/0x490 [ 2802.441531] ? lock_chain_count+0x20/0x20 [ 2802.441923] ? mark_held_locks+0x9e/0xe0 [ 2802.442310] __cancel_work_timer+0x368/0x4c0 [ 2802.442722] ? cancel_delayed_work+0x20/0x20 [ 2802.443114] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2802.443593] ? __cancel_work+0x250/0x2b0 [ 2802.443976] ? trace_hardirqs_on+0x5b/0x180 [ 2802.444380] ? __cancel_work+0x1bb/0x2b0 [ 2802.444767] ? try_to_grab_pending+0xe0/0xe0 [ 2802.445191] hci_request_cancel_all+0x73/0x230 [ 2802.445658] hci_dev_do_close+0xd9/0x1240 [ 2802.446053] ? rfkill_set_block+0x18f/0x540 [ 2802.446459] ? hci_dev_open+0x350/0x350 [ 2802.446834] ? mark_held_locks+0x9e/0xe0 [ 2802.447222] hci_rfkill_set_block+0x166/0x1a0 [ 2802.447642] ? hci_power_off+0x20/0x20 [ 2802.448015] rfkill_set_block+0x1fd/0x540 [ 2802.448414] rfkill_fop_write+0x253/0x4b0 [ 2802.448803] ? rfkill_sync_work+0xa0/0xa0 [ 2802.449195] ? security_file_permission+0x24e/0x570 [ 2802.449691] ? rfkill_sync_work+0xa0/0xa0 [ 2802.450080] vfs_write+0x29a/0xa70 [ 2802.450420] ksys_write+0x1f6/0x260 [ 2802.450766] ? __ia32_sys_read+0xb0/0xb0 [ 2802.451158] do_syscall_64+0x33/0x40 [ 2802.451510] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2802.451995] RIP: 0033:0x7f8245f16b19 [ 2802.452352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2802.454064] RSP: 002b:00007f824348c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2802.454776] RAX: ffffffffffffffda RBX: 00007f8246029f60 RCX: 00007f8245f16b19 [ 2802.455435] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000003 [ 2802.456079] RBP: 00007f8245f70f6d R08: 0000000000000000 R09: 0000000000000000 [ 2802.456726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2802.457417] R13: 00007fff9552266f R14: 00007f824348c300 R15: 0000000000022000 08:07:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x18000000, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="140000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00615fb140e6853288b3476d55eac23661bc496cb888e0929378a331e9d31e4560a0fa0c337da6dc8721284236184e21f2298207e868d5cebdf251116e7db2c48183777414eceb936db6"]) VM DIAGNOSIS: 08:07:39 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff8880088c7c70 RCX=ffffffff817ad8cb RDX=ffff8880088b8000 RSI=ffffffff817ad8f0 RDI=0000000000000005 RBP=ffff88800b641a70 RSP=ffff8880088c7bf0 R8 =0000000000000000 R9 =ffffffff85673a4f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffff8880088c7d08 R14=ffff88804c429a10 R15=ffff88800b641ad8 RIP=ffffffff8140b47d RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f461387c900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd024128260 CR3=0000000008f08000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000ff000000ff00 XMM02=79732f6563696c732e6d65747379732f XMM03=646d65747379732f6563696c732e6d65 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000055f184604c20000055f1846c6b30 XMM06=000055f184603af0000055f18466c2f0 XMM07=00000000000000000000000000000000 XMM08=66656463626139383736353433323130 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000200000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822d05c1 RDI=ffffffff879eb280 RBP=ffffffff879eb240 RSP=ffff88804751f1e0 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000065 R13=0000000000000065 R14=ffffffff879eb240 R15=dffffc0000000000 RIP=ffffffff822d0618 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f824348c700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 ffff888000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055f184628a50 CR3=00000000442a2000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000