ffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r6, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r3, r5, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10000, 0x7ff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:00:55 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:00:55 executing program 4: ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000003c0)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x7, 0xfffffffd, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, @dev={0xfe, 0x80, '\x00', 0xd}, 0x700, 0x10, 0x8, 0x372}}) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000ec0), 0x101000, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x4000, 0x80) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/image_size', 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) sendmmsg(r3, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000f00)="37cf4edf65bada50c597c68d98e50a682e97761aefc7350477c8745758ae95265ed70c89272e34b54f8ac812de24af95fc0f8f41c1afa013f935b677d3496e87ef2cf98e1b727d07f1b2f32ecb7bb57bfc6a615a0d00246cdc37577b3f541202dbe00153fb470d4d60642a26147c138012e52ef264efee3da907e7fd83ba220c3cf812d2defdeefad551da1e36f739a390c2f68a1b148af33ea7c41fb1aebb6dcc5c8342df88cc0bebbd6954d5e752af2e275591681b14664174", 0xba}, {&(0x7f0000000fc0)="7763578979bb9c9f73edbb1dca419ce624704cfdd8ec957f1e2696924827780c7233b702c3a437709d5d9f1bb692f781509c69d76d2503555f6379bebee4ca90dfb6ef752aff319d8b36a4e440334066d0b9e67f7a9ca92b104b6c6f8cc898e1d4462f98076da1c70c050d0cb1bbe6966f08a599ac99480153ec376e802e5b3d214b7817178ecb3dfd5b3b244146d4490c293e02ea57ace064352cfc92013156c262743685567e1212c2ea81da91e27fcecac0c22087ae9adc0df2f5363c81aa4416a4402c80392b5c6ee5d0e24487130e8ba9918f3dda125606914faed4d40ee2eb10c86d51c1056f4fe0e16497307aa06cd55894", 0xf5}, {&(0x7f00000010c0)="5edadb511e319737d5bd16b7598eb48c0b75790299bc7509c3622b13409e223df7bc15d41705d6e638db0355459518dc69c5f34f21cc4624d8a9783ed0ec4dc7bc7eca304e1b2567b673519dcfb47563e6366cb09b8b107f84a325c111e1bb3189b0f1cfafb74c5acb4a6df3969d061e8061fa1c5e7f2811980516d85fdb69bf12c9990ce6b72eef69f708f37472182634cab1f249", 0x95}, {&(0x7f0000001180)="a6d2148ffc84fbd51b0c9411169483c87ac6600d51c9bc66bbb5fbc4c21f9916612a900cad9f464647163ab3f532ea9014f42898cea9aedccf925c7dbe491ba65ada12b4cf6e41e9cb70681a875a18d182957bd68a1e584d8f5df84343dda050c45de87a2ac85fc229db2c1839dfd7848ca3", 0x72}, {&(0x7f0000001200)="e82beba2ac3a3f7c4445134a56cffbe54cf3a47a481f80e99640302cd09f2425127c1f2cf29267af363cce1fdb6cc54bd0b12d665d039a13407df4df4675d5c113cbd593c86a8799a3f10dba65a278f3611d90784d77e0ed7d81", 0x5a}, {&(0x7f0000001280)="2c9e7dad802e1f45cdbc104b9e71cb184845df2b1c254517f34244d78c9a444f07da7d964b061db1e4509fdd397f8cd2cf751977c87789ad8970d714b23c2995473f8e2d21870bc0f0d44457fb53826046dba9fbf4ccb22824888c5b016e5d91c3977a4e66524b5422ec6fdbc85a99ba8dd53116aa01c90700ddac19863cf1d3f129429aab3e450795aa605ba324fac098652d36febd82bb598a45743362b239946dd1a8da7185145c07a91b5ea54f4d65673e088207f995a1707cfdee8929ef96fc7b1e775012601902c571a94ebbd6612e610024d226bd41413b", 0xdb}, {&(0x7f0000001380)="b92fa4d9170dd5207d473f683244ba1d60b59f0a0564a82aaf6e1a88b831", 0x1e}], 0x7}}, {{&(0x7f0000001440)=@xdp={0x2c, 0x1, r1, 0xf}, 0x80, &(0x7f00000014c0), 0x0, &(0x7f0000001e00)=[{0x1010, 0x10f, 0x7ff, "f70886ea3866140e8afb6444bc8ed8c6ca5d0885e7e1336bc445eff2dd709f2a8edbafaef65d25fce79337e04e5759204a5fab38fd8f9f8c91b2c69def53dc78b019752dac448307b46c997373692272e40e781ce56008a39dcb3152a2ae02474a3cdfcc7bf94aff088c2c0f0662edae3e70c74ada18ac3fe4241deb5bcde92fe99dba727e7f1caadf8b948d4246410c18ee2287bfc8523994ac739977e53311ece5519a561360b997a449643ca3666abd0843c07a7aa15cde422be436acec4cba4db4301e01841edcd4097ca1aacea276d0fefba95f784809c946c1a86bf9f230504bd6eaae96cdfe44251d99cc0148fb4c6871257238a7dd92b3158933147fb9bf17697e9cc91bfeb552b3b894b85d8b246ee4eed379558c7fdbaaba924feb92a0f1d1f06e7ad75dd2ff5595566300481f53fc26d64ba27d6f76130dedd507a0797ef006b9a0eb2b027ddfe535320895d65e8c21ef895b944fb0e97b4de7b9beeb2b290035ffe6dc1c58042117c77a10c1c68d56ebd15eb145b5c25745f11bcfc67c873baf5c033a37a67e313677e424b650e297060c77ab4de82551d9c090736a3a76aaab382e02ee452e274d164abbeeae599a33bf7940d4961c5566e50016fc4d4a5525dbfd00033dec7c9cd9234b77cf708aa946f9513f8643100e7b777de8551358b00994a7af1893260faa01743849e1785b2a94bb886e14b4954820c04b5ec88b2737a9512b4e8977b89515a48ce6d5abbfd74d601c6e825792acc633aba2b6245606be0faae09049c497b493bc5060eb7927abb1249cd071915e0cee7125454b3773ad29c25a85027a2a75f21864b30aeb7b871d034e4c4c73102a101cc197f235fd1356f8936d775314b217c670120b34a1c42ccc0f3675c1425655bf70bdea7be8b9f1e925031ab0663c7b7afe7916da3bedb501d596d10eaf28fd99e3fc271a0ec1e345c15c8f734ca59eeb861fd7b24fd5f93440e7dc299460879bbb2a52e532c8066ce39c7f43142471dd4727620164bf211def98b965cbc3c106e94ef0a6542585e6ccc889521b9366a06f15dbaaea9d401b4890795a2096e6c6d29ff5d815c13805ecabb71a000528030cd9422c8316eb7c0f853564054f6259bd05d630deb4216a98102c2535239632a74b159d9e1087566b88fc43b6c804df923a0e814626f0d742359c73da595856e34ab784de5140dcd7e4b917f9e4340982e34fd307793c70b607e105d19c4f7f01af6b6c8a8a9331a34dffc63ea65308986181860cfe962b21a58dd9c28a75a9bb9694351d652868fc33f1efb707b5f96b0533b7c567ef33e0bbcb041644fe5c2604ebb075a210942e3caa772d0b90c9158755d7992cf2523862ffa4a3a4224e2811162443e40ebb2f3ae2715ee3eaee6482d6bf059ef7c89b20ce314aef7911e88054fc1d00736d0c1ea24ae38efea01719c113d8ec8c864970dd8fa5dc85951f6dd2b5525595ce2142119d1b1602754d62fe1d29831929698b210f8851c732c947af1d2a2ff3a7aea91fa89db30bec45fffc1e3146bf9fea9297a6442b014ec10b96391602ae5febf7cbe5939aa5b61e6e71ef2e2f7c8e664f9c4f2c9e711bdf2ea327206896abf20e998ecb0448f1352506712a9a3473c2ed11977bd262a46983daa932be2332fc9336ebe5b0fb9aef07cd08e3472783eeffad1b64aa1f1aad76f1ae3ee36a3e802c2edc2e2761bff3193ae9c4cc9ba402a590be2a44d101dc21bcf69cc5f90288ad2442faf964920b138dfedd35cd34bf49ea48add95ee9677b5c12acbb9fcc5e6d2f7e5948895d0e109b63be014534ca9c91eeef817a85c0eecc10e9d220cd6e259972f02c7740bf7253057d58c1796aa18525c18df3499db06462dd4ba108c123f1edd24957b080baed0343af16c06f37fb3a3c03537b0121a9e6bc7261083063edb83d2bf2d4eeb6e3abfa4e079b0aa211cbebbc9db290609bf5051aac8b149bb3a19f8ef72e20b65e81db42d32ebb1f33cfb16136ef3c4bc2a581b2f19ffbbf30c8607fb2f5df780520cf22956668990711453d06dee4a78cab592323ff67a816a60099b4a1fdfd4af9287b5320466231ff787da6626f5e85c57357fe3ef1026ccf647d4d6a625da7c8f433f11ba71687e7cc6fa320289f49aa63059ec967b039a24f63d3caef9b32227a9cef7f872a7145c358a4b062fac01106cf9673717413bef97f4b900c15c6653ddc2458306eca3d17127aa052d59696e98c14f1b34c12e309ac7b57cb73706901d4133d2990543bdd4c5b4031d5b70a03b61d23de1282dec93ba46a94c33582d248f9aa780df39294c3c11141c16b3500901d29dd1b402de2ed31eb148e7ec5781f43151735ab3bf266c0c175cfd389b1cfe981d7dac7d182bd4e7bef3969f3eb4151dc32936574f361ce730075b11b227e82805d347e9aabebf4244d5696badbd5b2894e03f7434571b493d0a0246a61be26462fe0f0fd03c06fdb8875d0b060a7cac12c039ae7a2c622b7ed3c06d9861866edaede016c97c8099228f5a82cf28b898cc814cc9d4c6e7d8140e04a7106e4db6facb606a06c241897c99ce385dea173991902323e03cb8027b1c90c632b36dfad0654b1c4367ba486b3dfd473ccb6c0d33a9e95bfbd6896e3d327861d25a0a071aa580eae8367a96a50cd38750c49ebe7bf7000716044c0645961d31f54f21567d0117fe3be0c03818494c6e98ec20a88ca624102bad536ce9c78f15c101927043809237d854a17417b62d31638c78f59b9d31504d4d5384f9d991f26664c4981401f4ba3a0e535bc29e320ac6a2a198c236e006956499d8485e84b9cd48761c62501a596d23c9fd5492e2200ad34ede26562afa25f3ab0ac274a1b51625247c6805ccbfa6754bb012ff35dd6fc1b7ecf86b5f047a99ea7ee3ab4a10150158af034dfbbcc3700107b7e8ad972ed590521d2ddb57f1d138788f64f6257dcdcdf659b85d197bc5135e385599101961c5186c38e3b7d33da9bcd25fc8a37796a8028847340e4229132857e054a00b91420289c1b9dd10728170b6411df3e44a2bd5d5bd32ffaf1abd5cd7a1fc711fb784b46d69a4f96f639ac56571b2baf75a2b3bdd5dc464bae352d01420de1f330235750948d4400c9e08a4916326dd7cd55ea6e6b3bb2df3f783fcd13d21bf26f5ff7c18f34b1e06661f7777d9519203d8753f7a8639be2568835b11304aec3bb179d79fcd03c98fd92fd14a51cb8d3cf97b6c4bc2d33315fadb69fe5913e0693b42e7959e6d1bf5b35c7bc77e00f80547e9cdb0304509b339ec2f444d06f7cd7039fd8f42c22003dec93e01ca2f53b3013a03401c2dab93f8def0ffdc6ffc3ffa79d0b69356d735ede08231f8b331819fc090065c5fad3463d6dc3c3ce297cc302f7493c51118d53a0127266c87750e49583ccdea2bb0af51fbfe0a84796bddfb83bd65f8e1132c672d387968782f248db26529a875e86119abf5f352b8ef8663676ed5c6a9b04b345180129c82a0794d19501a8a33bc867734adb164fa77920b93caade6cad1224ffdd982ee6f26fe485c7c7d30e1770ec6ae27c0c437ea8e247101d59e96556b88c57d22a0560bedde31cd6821f4ec2e214d479777833f09a5ff06f98d231080797fd533804b7a453dc356f99a48971a590f2f19f978c79aa6e0bbf4a036ea7e5d02248dd8f6d430439c9c5da99c3f43dddc1dd0f3ea3a2701df50597b0653af3ef39165919186115466d1d68352fd4c819e037177d622f3498cb90b6550da471ed2ba77864cf79924df32b29f81d498d641b90fd403b64aaeab655aa9421d91d7ca7b62f0b9f7399bf1dd75c3125cd83fc5558e02888180e9961e9e0d6059260ad68e45cc0620862e75efa619c4fbe96e6ca970673c8e31bb4fa311c467443f07e7eafecf58dec1cdd16987d0e679ebef9cc58b8f5f8eee830cb9e6222a40da998c0399737f3f44b9504e5f9a034148be68d99df0cf891e23433b163c72017a26d5deaabe44f014685ce5caa4ab171804664102654f726044a9ec4a34b84f0d39d077087b9b8c901fe65b323e6e6c5301a82364c8b53295ba2b2c6951732c0873bf166f9c711733926e2b232cbe2c5e7a98f1ea7981fab1644c0c60339f48b0a90d6571726feb6aed073ce9507f1404234e27078e7e1a67c3126e7584bf95b3521443833f27b6c784b1fb818854e61660d8ca57c2fce9e1b37cb860dc9a483ac8b1f75e41341a115189ac7afdbaa4bcfce712bb3853c260b59309a4b732aa25ea85931607ec4ad789f81d9d4d8516a62b05f27f683b26da458b476278f402d11928063df3be840c90e836525c1a9b6a868f8f664262f5a2ac183614f95a5e859a4e7b76209138c627736dc549f8f878aed487439535e70ba8330adc9575dd6705edf93f718c4dcabcc1271d3bbbb715ab61913b405619b11111bbf9c893c9e5187edac3cad4a310c777835e5e3d914d55bb468df2db8acd22a957b8564d3e95ce4fdc8235e3d73874cb35a6b8dab9a1bfc8176efa4a0a824b990bdd203afd611657dc0ffe62be6df46f601801b403638f7fe5476d795eb896e50b6697ebf4151a023e5be9591e3e5885534bb3d9d6d9d8cc237f346437539e1a8501dbc7f1b39fa75e99082fece74fe85599369bcb7067a3956719be36f972ff42b6df6b26fe70a668f3296f74c2dc23010a74d5dc42966ea618b6753f6da2bf8643c2b530a64114d54b6c72e924188bce5fe9f533bce243bee2b2aed2e415ca95323c8e28006099c356ac73f7b4dd11cadbb30f61bcf3db69889ef06ad0c776a749478c964091befb04ba7f9ac3116f61460d19dc885df21ccb8343e2c664028dcfc06fb7c8233465f4d2e2efe32a18640c536d55430c1f5231c1a8541bd251157a5f07d7f37236d082fa86ea1a68a6cb4a4b8c8dff1939bc94b530f8689920c8c18b3dcc8722a5ef81c884ace126c2183824b43a6ebe0beca7ede40a728a64f596eb0c8a7fd74e4da5df1fdf146adaf3d580efdc1501c6aedd072297b009ae5dda58cc5f1d84bb26d48ec075cbab6e80db0bb58197c73afe3bf01341284f9493dd94cd1095049dccf75cc09690f74f2a73fe67722d8d53c00d9f3ee3aeb722308582841b2e327559c6defd866cdc2357e2b75334530663193b91d35e4d40147433dfc5e07ad50a095d37130cfbc90dd90353e2e71cd011154d77b02236eb47746aa05b9f76c6c9683d5cbc1a1a49c1d7c7c8b8d8669caa780b3ac9ee982624e5097220d46b20f55ec3ce1f6310ed097e4126061d7355036210e91437fb2c249093de0571a67de40d77796841bfd01c7f270f2c7b12426933d25d4341df9a8e7a6e85535a08be9a8e229bb52c8f3db00bae61a4ae4a47fead47efd9922abd76b824107e50e26cddc6ad3fb5909c2f79c66f9e6c3fee8d79f2944ddd891ca0b6d518b70fda9b9a0596e7850e51a9ad92d057a76b96f961380cf16b942434ab7c51064be02b11c4dbecd83d8c1623871cbb67115df472d1d7dc637505f6f95c2eda374dee41a4f97f56429b06a63a70412ee909ac0876e98b22cfc27680afab4f419bc884893821a56c81c060d43ab2a9a75e5fe40881ba85ac1aec3fa02fd4eef40455f0c949006001248f328ecba9e1009808d3edc8468a7dedc438e03a879452c5cdbc56bf3250182c9083e7495a9d7a9dadaa9dcfa88abf90cb5c2eb5c26dec3f86b6e49e46a86e16b54d367be7fe8adddbeaa6561800dc5fcaffd0fee0432a6ab649981071287197cec9f40ac188b0f3b0ae6d7a2c2"}, {0xe8, 0x10d, 0x87, "ae362846cfbbb18eaceafeeb8eef9cce17e989786bd74db9f80dc1ea339cb5421eb6e37beddec013aa88f0faf51d1f618052cd873b8f40ac54c2fc1e4e71433706b893e08ac6b33fac1a267dcf9e5fccf7618eff7bb5655ec3ee5df141eb3a61a410d14a6727f80690777eed5c330033aa2068bf1b30bb0a40f9b5cf32f29d27b124b07045c7b18629c7c533cc1bb678a53cfac19ab92f7ed8fcee02e14d06de95eb2d24fe7b500c124a9485097a6a8b4d926d047ad8fdcb2bac290cf081af94d11549910c81c5ce56678779a35b4f86f2d8148ceb"}, {0xe0, 0x101, 0x7, "ea045c75b76d49a6f3e00be085e945060c3bcfd23e3396aac06b5103f621c8f092244db6e39a0ebe42ff80e463c1f3a7e186d25cbb84f490e6aca593e6917745d16ea2d2315a94929f81ebe8c2a519b60027c335cd506cdb5a3556605c7c36240470a620a9f10f8b99b516b9988548570635ef903209cfa48bd0772593cf5b0e5d76b102e76ef4054a795ec88bf6bc62f4d13b24511a7ee13b49da2f43fdc1f203e4c76d278d9e087d6c786a8185a4087d6fde412d377c1811f6bf89b2d741f99b93f4d4f026c36a9ae17f0000f172e8"}, {0x98, 0x1, 0x836, "9fc603b21ecfadc3cd96de0a0ed7d7c381d580ef1dedbea453bb44bfd154b577bae9ba5b1a82df149e332db5f7f9f3d917500e0ec688c51d96498c34f7898425b24620cc772ff4d4c0fd9ee93400fbdaa0fca3996f1ed661dca7c3812e5ba6c326b95f162b6a3de39cf049634d6a257b936e35ef37d023dff7574490af6ff01b68507d4f822ed5bd"}, {0xc8, 0x101, 0x9, "410adc1269b7d2aff20e7b51e53d4e9e1d063c5d365feebb5e5076ce62b4836b2a2546ff296dbfbbadfd573a48fb27acfe81aab4b7112fdb918cc339d525611c227256b24ea9b7cd4a5d3f6997b9f2c8dc0e3602beccf4eabbc52b1d3c5950360ef1fc21f44fa58b222d883e7142eb2bd48dd7374eeb074901323195fb5cbc9ff9aed2878fc8f388a11f03c4a609b61ffc3114cd5e036c04426d869688819370615f98144479cecdb105b2e5fbd5261d2fa3faf4adc498e6"}, {0x80, 0x10b, 0x4, "5ee4336eacbdc9ca955d0deb5c4f9175afb9b0e3e2a1751ae8b5d44a1e763f51ef40f7291d2afa87b91777f5fb6458394cac8891299d4a259b8ff5da606e5cb91f556c0953918cc5cc9ed890b35b4b655892f504c590f2f18e60b4a631f580a4d99919ba547ea20af609b4f42b"}, {0x50, 0x112, 0xe6f, "fced15ddad2544e081077e0b35c7e22496525c85219219765b40b843660073f9021c014acf11fec635c89c98758c3c50b10bb55f9384a3ff086343abd69c8b51"}], 0x1408}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001500)="c8fb896869e8844a0d60d9f81daea2de7640af1c66fc050e976e452caebe9c6c1056fb95808416392c10495fc28c0bf5546c046a3d38679385b3e5ec470fe496a77ed4febf3aa06cac7e14ae54a3cff03d0ba700058bc8d7a26c218ec1dc3fae626e5d039e2760476e9e2d8e33d9d25ad4ce54955c4ae0f180acf08e4609721fc212c91edbb5d142ae20b4a820803ad3e813292d06f17ac1c5c879788d57f5ba842ff4d1ab", 0xa5}, {&(0x7f00000015c0)="4c3523db60910cab0f177db6aa9de2ef751b85486360b77469ecf828db46e20a", 0x20}, {&(0x7f0000001600)="643d932d2f541a9d67d3d786d1aa510f010a9d90fda5822d2eefaa51e251583750bb1f510c6f35252383fae9ec5a9f043477df84da83cc6cc71ef1a92dd7d34df114fdcfcb597f0db943fb744884e3863a154020f990c5e966e9b1", 0x5b}, {&(0x7f0000001680)="2f2738f58acdd26ece22ef803c4a4156696a9996d07e081649bcaaf66065f0d2f6f5d1181c9cbbcdf56adc47c06dd101a8dbd04e4e52a278ccd39b89a6aacc9c4976d7adbe0d537cc172c908e194e7ddf620c0fe95396a6e194823630e4f93d77c8217ac75ad6d146fd66105315551cebeaf55c5f1ee99", 0x77}, {&(0x7f0000003240)="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", 0x1000}, {&(0x7f0000001700)="db730b73de6211b9870439f7ee29eea84051f134bba71b72f4467072bf648a17df7afc853b8ad32627450d77726290c5e3879c1f713f2e0fc0223dfad24e8996a560f8e6c677973202875bb0bb15e3f73e6d2b94c0f22783b6089c1b3d559c3a45e4a77b1a0b9839a815ec2cb85277f78dd9691b414253f3ba218545c4e0497bf70509ac01b2d20796", 0x89}, {&(0x7f00000017c0)="da28fecb9f7f38d64ab0afa515f8452877399c93920841074eeb42009b687b9bbb27191ffddc851da960a8529351c284bd6386dd1a11c35548143e971a4d87c97690b736f0ca70f5646bca3c3a84ff8e14bbcd1c941a9f36e620a640822878d4f925557ab89f84077fb4cd460d00b709f16d0b21e76ad8e10b64abbaa7b82f754090e8c44b5c3cd3e1c2911d6a716f09a559a935e27a4309ecaf726bdf1de1601047ecb1616dd68ed4f714e3bfadae87a26ee49544604011e8f4ce763711c02a5fa4e2229beff953fc6bc283f0ba979845a10f365b3db2f9ecf1e91924756afe073d", 0xe2}], 0x7, &(0x7f0000001940)=[{0x48, 0x103, 0x7, "f4959714080b6fe5f3eb5d363d3a197d7b5a7405f986b4352771acfb9baaf32bc39af33d29f57a93c4ec5151c02de4897261dbc2eb"}, {0x18, 0x118, 0x7f, "7f11202599be"}, {0x60, 0x107, 0x8, "a8a525809fab0bb9304cd812c37227701a9e1059be6e105855b603df3860b12e6900236b2e9275f923364fd65e5bc74d991cd488293f314ca3a94ad402e245f7e981c805c7e4828908612b190d"}, {0x70, 0x105, 0x5, "9d8a046b2eb0497458720c663b0538d4ff4e3dc05903d75ea711e9ecd965037637e4264701785c3e70600f761a3d9f118688ba04dc323729bc6afb2ebd95a763d8b50d2449872ab185c234494f874c716ea00763de5f94e829639155a999"}], 0x130}}, {{&(0x7f0000001a80)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000004d40)="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", 0x1000}], 0x1, &(0x7f0000005d40)=[{0x1010, 0x111, 0x7, "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"}, {0xf8, 0x111, 0x9, "11f3c5df432eb8376bfcf5a849a38ee7d9d7c59b4546afc3131e1c82dd96147fff9333182c3467122d22515746b9a04edf6021fecc974d716eb237381e29592b658a8f7956d5a362387573d20c241fa212b1a87e4bfd4596abaaa18449cda710828a9e6b7af40d8e9b6f01378dc4d046209047698693f42dc2d8c6f39fb15724bbf186d818ae4f35adccb5ef19e6d63c00df6bb6ffa890ad7dfa126ae111269e583aac22c94d3d7ea47e02becd55abf6b7f8eab5d3425b438c29225093ef8263c93c485495c37429abec7807a27f0aeb86064545ef2388c7b84332da29951bea2788"}], 0x1108}}, {{&(0x7f0000001b40)=@isdn={0x22, 0x1, 0x5, 0x0, 0x3f}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001bc0)="6ff6b0478f0f589f627f7d76402b5b004ad95b058aa166e08ea9f3cbbbccefc102297c28ad67ef3337f37658ffb22bf8", 0x30}, {&(0x7f0000001c00)="d0aa530596b3232d1042014c1db9b1a6f95f0075e3d1f6ce3a8bc2f3832fbce76bc7a717d479d54f38f2dac8b44793dfc0e604ca29d5a5965fb73d5aead20d5fba250a", 0x43}], 0x2, &(0x7f0000004240)=[{0xf8, 0x101, 0x80000000, "041458289dcef59c038bc5fbf37905ba3e0aadae6fd749ed9488e68c1864462f1b9add89ffed78a2c6c894773429920da5f9ede5d7b914965787af543a8ead17ddb1b1732d55e4cd838c6c447c4fa090244adbe946e67966c1bb6b9957c35dfb826004ccd58e19625d175ae5de65f1243833201390f18b708b656714299a80ccb296927db845aafcd23a7160989c6454bd919a1947501f13bebc8827c453c02939d7f737cd17da27233c308144243e009d4bc1127e5e3c415ac7ae191e7df30ac51a2f41144ac6f01e452d4f144ab1f36a936b7611636b96656b5a6540afad4b0bd6cf0b"}, {0x80, 0x118, 0x3, "a45b2b4b79ece8c4b2e294d46e6ad1a193d2513f43c2cf6f9c053e62f2b4d35fe886b09b62c9974f062ebb2ce4f1617e097f1013ae10e7e54b1bf9b9a8889fca0cc57a18e07334aa8ffceb936fa4f9bec8fe889a067b8046bb4c231c58f574cbd5179e71a5de36051bd76c"}, {0xa8, 0x10b, 0x0, "139b6880a892a899372e14fa2af1b14acfa183446f3df93e181114ed85719eb70ef44a3ee0105ecc2284359ff4f2d609e268fa8fc1bdd429d5e4b9e98105c4c434c827b63dc773adca9906195c5fbff01149b551b9581ba8cc87d9dc2cb8513a90be9e373b27bf9d54c6457834fba6cff4cb45cc4eb424ff5bdac04b0af6ebf388a496f266b634c1463a4eb2eb6479ffb18d11d0fd81"}, {0xd8, 0x105, 0x40, "640e8c601faea14ce6d7e8f266efe0b29e525c1ca35accbee8fb936d5997d1dbc9213e5ca1d8cd46b097e58d835f1fd725e3ae003c675fb01190a3ee86099461cc57d6667d04b3e4d2da383c53c62e3f649e891057bcfdafd92bf69942ad2ba21f633230d70a05281484568109e8e00030f06634aa0ce06649aed7b3f09fc272684cd8e77122d126b60dda6a4858cca44bd2ed354bec7a3a61e75168202bedafeb87fc063a24ca650904c46a4caa3d9b8ae222d61f360bc61b671d29354e0974a7cdab9f"}], 0x2f8}}, {{&(0x7f0000001cc0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2}, 0x80, 0xfffffffffffffffc}}, {{&(0x7f0000004540)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x0, 0x17d7, 0x0, 0x0, {0xa, 0x4e22, 0x6, @empty, 0x4}}}, 0x80, &(0x7f00000049c0)=[{&(0x7f00000045c0)="be22cb14c20c5de8eb5e065b683a3d8d7b25969dd6e70f6229b8163c6f31821cc55bcfa95f4091cfd243984e632571179982fbc234016f31549c4b53985129f3da752795da41b74e8dcba9c3a6302182d0a23ecc9767a83676cd3f18d22ae961271e172f0aca16cf015da9740a991cd410f45810e77a36a3a373c990ca3702d9afe482dd95d939a1430baa0274446ef8a0bc01d6c07bec4428a7b8aef30c6a79ae6ff81f682cd9e08b472d51ce6f1001359cbfc3dbc75e8db9345f0a65081ec2b04f236805111bcb823145683fbac57c0cb44041e010080cf6dd4c194b74e53b0f074a4a907ae58679759dfbaac34465313b154269", 0xf5}, {&(0x7f0000006e80)="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", 0x1000}, {&(0x7f00000046c0)="1d6527da6048374aa3c62401430f77e193df7e3e03bf774455e5b4c755ce01a433f925358585c3d5a989c60c11168cc662224728232300a39e48be391967744134dc148c2311f91d0a51d8a57c628cf1f4ea899ebeaf18edfc67e2fa6246b11aa04c70bf468743ebf75da13c8723395d176829c7aaaa3709b0bd879b4580e10b24f364", 0x83}, {&(0x7f0000007e80)="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", 0x1000}, {&(0x7f0000004780)="d847eb381f36fac23eebfa960f25dee207f0883593539a46d464f71f6a175a071a52f558e4d29c2312de8a08b3f82aaa5eb1250d044b4b25d8bbc0f620d9c86c90dd84ef59fb03f9042740488beaafbb443a6e1713d53df94251c8749ddaabbc0f3c7f6e5c7b40baa79b5e8f435ece70ee4a0018e3d7ac437961f5f13280a66869cd4c2709816d36bdd18b06a11785dfd8adb15557aff664e0b3f49b2e2435a4a03bf9a9ac27eb1907f4db167ef182d82945564b1f0bae1f171efda7297673b3e5cfd8fb515bd182ca87696c911a6ea0e16e94b95346060ca7e5d2c5dd07daaea9af", 0xe2}, {&(0x7f0000008e80)="5f99390f87692a7e0b60212be018ded0794acb1d7b5544dbdeff199afc19e506f98f91d23df6166021a89ea3d790b367f865dc55bcac7489af52a6da7e9a9a87034c29e61bf2753240c7404345d25ba684a405a3b6f4830d5429058573a673bc72afb5714c5f816a548db0ff392528a8fe15afe045ddbc5603439271023eb2d2db48c35da2292d7f8eb3dcd0304097fed3d5b3f99a999c365ec24157eeb5e3ab315dbfcea59e6b1bbeef2a92eb0aa9eaff6a4affb94827fadce10c1d270901c782fe104ff26647c49824001b54679a5ec593b36190dd35ac1cbcf5cb79ead5c413c0ed3e534416379f53502a19b8a6d9d3659fb88d3bfd7d8dc27fc86403d66e0544246a5d9df5b255a512ef7644f3d1bacc3e2ce025a85b348db3bf574692a03e035c70092a7813845a340d4909075a3b2b6bb44e4cd01e644d18c073601f3b8a261f95784d61054280fae2f58f61ff32d5ac7e5c0997d335a78a01d9301f3e65b4fb05022543db55114638a7c99d1c6ab693f56428e014c33666f8eb72445ea3c0549adbdcede134e64a82fa37d1066c211c2854c19444da96ce2fc68825699bf7e79283a24c94600921f27dfbb92ef756367b8f9bbe45e42a7f0817da64a4edf86f723f02d311aa9725478b3f1dd7047c4162186704216f55343d9bc3c3169f7f3a4fc02021947a8dab40cb92cdad71563a4e34457696de08bc1e7740c227460922704394dd15026c9a2d7ab95b86656924d75ff9cb1ae8f9454ee920f01bbdd4d43308f6a39ade0db6f816a3659e4f5e1b7b6db053ee86374004e6445a622bbdf6f31dbbddeb8c052e86542db3664297cd04683d2a69dff12aaa169d14c1996be534e88687a23456d36a19b801998931d2765a460122da6eac42518dd096acfb89d1ec7b8901bd62da3e899fd93cc47f16114750669c34dbc1c81d94bed5529608381bcaf4d40b1ada1302212ea90da09a9e8606b0a0be668f9498f0b82bdeacc883da110513d3942ab92d3f8362ba9dd9b550fb58d7543c0928853e11f81fc8d9e38b46e693d54c25647e32c297eb5279d5e85c568057bce59af5af3efe0b3025dfeca0603486099ba728202bc1929109dbb96b8eb9f70f8ac2367c80de8576b9173ea7bd643ee9149ab5847fb5af703664103ea3bf57d3d830e2ec68795e3d9c6ebf84e8f342d66259bd8c1e2ec7ca75832f1b386bad0bcd93892b9bb8aa66012ba25df07f0ef2e1a0ee096fcf8dd798c55991e2bb2fe7162bb1ac583f9ce6a1dba1d35a857d0f7cf64b59e70bc217b0d71ebd99ee4fd5224e9ea9da6463e4158f5ea855a81d2fbeb7587e94f0abff146541b29e2a7c961bb4442160945e08a59cc3cae105b2049e365e360d23e171a12cacbb25c94a398d152b729e26230e38b5913ddd8dbd9fbf035f57447e1a3cf12ea51f8ac129a47cececa39b5d8ed2e5fc7835f1b78978ae6296aedd355541abb57aabe5445f0611b2828cc519ba020349de8d7c39511d5616025353855ac6d8d17e42c82db97326b05d789a1e35e9bff68432d21d4d0313a4c3b09ad9d0988bd1b4361ac6fbfef5da9a7fb46537ea3bb9180c303bd74838474ce5b10122cf3d60246d78d9795440cac1de252ca4610aa1bcfc2bc0c8e6df2dce174aa89db8610f8cf5c1e0bdbd14623ba6bb12c9b80acd93fca826f37e5b777b520f1dfb31e87dcc8811359a47d9d4546d402e5c9033fdebc855d2814f01356c45bbe9c5307f00e3c4ecbc735f46f0c32ecdb91f6b438ea835bde32c257817b405af62a6391f7f05f7da12687f68dc981d2c971423740cf899f496db04b77e0d1a4da9fd28716b0328d5af1d180c47534fd9bbe11ec586c680bfb8d989c03ff105ef7fb793b754443664d1755a45db54144c734e34aa641765d59e79dfd7a4e21f0f8571aebea753dab229da329d085301afa509f6787871146ba1d096a61dfac64046f641c5f424a7c6284a620b6fc4ccc33778dbe67b08e1d1b7c28eeff54e4094d49cdac51bdf5fbc8394a117c2193690a9e53a27209375e803b72017d1ee59d483dd3f3c39e8cb675532c011e5a2170aba83fc5c8bdbbd0820277be8c7dec33ccd05f5568c8ece8485b9977ab2e2c58457cf670b21d33d4a69cbef559249ab3a8fd1cf43614b41230cb84e7317c08f691246bcc97d285aa0f7412636c05b2d0ed8962988b5bf96c4702cf7b8fca06eafabb2a3c43436e52d88b3bb4f6b7e6072bb2d834b7142ec4909f2679febb18f2c128eef48499122c42270355ea432999267af3f625084a226ff42f5cbc3487e7d9d5856ab36dc44913ca1889434b6303605e7b5abf3245759caa7e14928aac0e0fa48fa8aa381a1e01745a0780dc317521dfe51ad65bed10e8b2ae83e4c6ee95fcabe5cd0494eb17d0986a745da72b3106141710bdb56ae3be402acfab150a2be0c6e18f8544619063f9e6b085dca54192d89c15d80f8549681756845a9a603efe02f10961289ba8f4d6b98c449ca2c6d221031769816951e0727df52903905bd0348db9dd65df368168a14c6ee69d0ac64432f3996063a8f3b3f1afb8a2d9b5b6b69c927747e146945c02e2d24415b5775db32a4a7f823a2a1e7faac139a4b1991267011f3a6ffcf762e6b7e54f161f2d34cad6f4d416c342da1d911f7c25f31a78b244b5bea78380103fa73d9de95277bc5c9c2af5fb2f4ae55aed0e78390ec1723ac3c7273e310335467213b2e9940978e004fcedae57256728b7ccc21108ba051a9b6c5ca946f886b028c206c7e6ed0787c04242400da573b24af99db22591a57bae97defc14f0b7ba8caf57891e9b54e330c1dfc0c4251a1a9dacd2a8e8b9108703d6662ca0b580f645e94ea3bd88cbaf52b7571453e23ee835ade805bd6535d3751090dff99d5283eb140e90e899b43851586a1c4499ad79bfa6806748a3061a0ba15530e5bb6b628e2d94e6a696161bf56b642029922dd3be00fe9c6b327dce75378e5428c6e913c8df6bed4dbea6169d15c34ca0c88c4a2823fe35a73398f152b97a8e2647653d7996d25d138c7d113da0af2aee965f9bbf613478d41da1e8afef9958c3ba76aa5194e48f54b199b6e1d7f5fbded039af353d3ca5babce87d749e1f19f08e38bd030af66b4783adfb4f93a67f093b27e37c6d49ee91bc72724b3e168b63d7cdfd05866ca112740cf03ad0dd4498cf6edc4d175b5588c32b0d8d78ebedc2388f219b79ee47cab89e3b6d5fb37715636404db1cc7d490596e98b3e7927ee4fc4ca345dcd9290bc17c46812a8b749e49c8222f002e3a81bf7b33bda5c9fa803e705e0f9c5bd1fa114f1bf21b36ae98fd01ffcd189dd3e4a9871f8d2df70d25005bba284ab3c57e9c358537f6a0d034ab44ee3ccc6fb7cd823c6fe3f2f509ce1969d8b91ec0f90bfb768c9ab31d2371da3914e62c709813da191f888581f5bf3a99426e0386f9f021d0cc332f71c372e23a217b8b3996187728aac61c47f2f331c6e19484434bd2ef77bf6258b4d25cca9bc9dc8f30f975b035f2b0fe3b3a0f297acf110a46ac664e191ead312945c65922ab0b8dbf7b6294bed0c7520f1e47de05e0fffff0ef5f01b32ffa7b274313295136ee6d9af6f1dfd32997ba08fa6fac138cc6e1d4aec1a7d13edaf637a01468ae97ace38f0ebaa13d2ade6026a07555f444d176994cd5d692bc059d668e2faa591e0ad235349b1aa852e25837e76429f347d90bbc4b5cb058d9d6e4425aff53f881680040612aa46faaa5c8d6aa7d873f3ff24b6d585171ba8dc84e1f39a37b83297f3976199c0215723deff402deed3cb7328b13172e29f61e8aeca5bb97dd0e57435c9fe22c6df04603b173aa9a6c05f300d7788754ce8db5c09968e8bb8f8bef1582c9fa8f6bd0da78ecd6db19b1f81560aedc5475f2d17393602919c06eb53a3055832aba0836c8fe3699fcf04cf3844ff00d143d0c4ba0a8bd5dedee717d4b1e2ca5bbac377f27ce098517c15bd66441e4c8d27aafdb12cd3e390225878f9ffa10c0666b341a2c7ce1819b87e265b41e1984a172c7a167fbbba4cf6fe422416c2cdc120ff0d41034e18b28c6aecbe487f92a0ffd294605a2a5cf5d5ac82ece6490e05c94cb491cc1795337474bf74e5e31295c22a6faf0d5214d64e435b95e301075ef07dcb578238248af7823c992b5db0b603aeb2e178d749e9d0fd0dcf9dfd05ef7b0b549734c81f9cacbe397269207121e8e51f3284ca491a855df4a32cf609f4609812e71b8b5a336f2255834fdd68bc5e5f5f86b8d960048a552d6ee41d136e03e8f0259f92555d85469a1233dc74f835c8ac469e86ffa1cef2a7e7f0f8996258b55a711bcf0a0411fb56311cf6168789b23f6e17072dbe1d26d25b2f372de4e92b0a28c10f868483ba056a09a40bd36b48452c75da62747e4ba9d6131dd84f746319868ca0ac9fc9d75c522315d1c2b23b320de8b6c249e5227e5ba4212e02befc052ddbfab903ef97e54f5b0394fa1f475fa1412f929679ff5d3a421ed4fe3fd6fc1d950fbd1c2bad88a8ad4c96d4bc59a88bb059a106849c131c474fb0f967ad33e107fc55bf2b6f328a6059c1bbba8199f10578edce92eb474ff36e2684cc2ee0c98f1134f0f3f850f3c7e2cb8f0c7c41ef6bfd7ff46a2854ed77e63e027d80b78265b8198df35e20a097954f8651a24ad8d36aee0fdb552b0f47fddb96be15cd0d81b5c1a8478e52d7f468810eae4191b67ab25d96bc0ab9478a4895be7e47c0e6fce575df5a3da829651dfc74431642445fc3a1238a6f0da96f62d6b773eeb4d40fdf7a32794e83edd614ef1b1f391d2412617e8b87e1ac0e34ee708c862a2eafed81073f5fa389c279f1af56adbbae3201bf8bdc5c6890e4f1670afbae60e9277059494a159f5b9f1cdb69ec2ab9ed7cd8505bb41a6ed19e6b7a0eb6d4c99bacdac80b2d70715b5c9cd9efafccfc0e8e0b63f22b6bae5c18d46e5e8b076f1265099bac6242525f2d330603e9ae3bdded1ca4e783344e8d34f5cf41bc0cd8d3c4278f877776a7c1804a279d42b02f613059afa1ea8b012ebe9e9c85cb91a53a7ea0f2079acd14c89430b91ec37cde4752d7cacf46063b327ecdfe5de2a7c128ac42d5e6cdb8118d0925f205f41eddce79c05deaff3487ac8c46798cff5d333ce1d6b521266925814185e45a0c7f2035525b0f804824203574e66f7648d17aaa39f31d669086dd12c8044b76fa3fc69846b61b40256532feb8f9a6d59981b7e46f4188430f9662d29a88fc3b7543f38d5f01d3cec796be766ebdf42ade4f4440791c85ef248c76c0f5b43c3dc1f206d783629d12f04feecc007ecadcadabd22ae989c467e2c251feb71c69697dd2671153959b322562a08ca24b070442c0ab5872fdd9c01330bcf73b818ca4fd15b463841dc8960c148ac409cffb2105efe410682daf6ecc5abe8c8e175f57404c2a9740f78ec199861463bb03563debf15ca7d6630cbbc23e562ffa61998d6a5ee8b094a9c1c951f50dff04f063f48274d65f3431daebdd5e5528432295ffdda2a70c0f4cc5c4fc7c9535c93e607b19214d2db6081db8c7d677f72add677d2589623025ec51b4229a40249d119a0af441ffac952b2cfa9a630d5b64d5f61b18afc3fc4333e3abcd7ea40c42fc5fb3af64f8c89c3e7b05471519ac4c83ac1049176c6853db9b1177053885f4e325c8c3eb20b5c4056adc7294d8b145f12e2089695a052ba915a0c44a5336ef1f266417debc8e81addee647c5bd3fa87db5f32efcad2731c3588eda81025b62b58f4279c7b160", 0x1000}, {&(0x7f0000009e80)="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", 0x1000}, {&(0x7f0000004880)="b1e5f3cb22c998f278e52ac60c7c696d3e243d00901abcf559dd99310b092341f4fe266cbb143951f18c4428b2a055785301fcd1aa640aed1a83a80711ab013ff671ff601a67c07859b2922f540ed271e4fc75097b0d251391bf24bf65ec8d13e81a847c9ce6038ce738b6beb815cd93edcffe073145f29f30a5dc67aac07fc6a67aea1512d47817b871122f772ecc5169f1d3e16a0a677a9152c69e7576a5603337", 0xa2}, {&(0x7f0000001d40)="d55f2258202e042a0e0bbd31aa365f77ae41e3a9a06ab9031371265a836fcf", 0x1f}, {&(0x7f0000004940)="ec2c47842ea0a366e7458f7b0cc9d8eaedaa901e4428c8f5401e135df1082457b12af7a020a539c6a8b5abcb5266b7932faf0a2e3cf58f2d08e5fb98eac27b5063641674a27c53fb4c3c8450962e", 0x4e}], 0xa, &(0x7f0000004a80)=[{0x30, 0x117, 0x401, "30389d2cd1e4e435ab0549257f730a845fd40e6b23d05230e21bdac7b7bc0e1a"}], 0x30}}], 0x7, 0x8001) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x100, 0x1000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x400000000000000) 18:00:55 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x8604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x40000, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffe3) 18:00:55 executing program 6: keyctl$update(0x2, 0x0, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffc, r0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000140)=@secondary) timer_gettime(0x0, 0x0) keyctl$reject(0x13, 0x0, 0x7, 0x1636cf00, r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x1c600, 0x0) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = add_key$user(&(0x7f0000000380), &(0x7f0000001400)={'syz', 0x2}, &(0x7f0000001440)="2df0367243ebf09ad4ec25b803bd0d06998c2d87c5c4fbc3fe3d330e1b8fe129e59a30fada60993a8bfd40fea23cb0fd4ad1e6c1517ab6ec82adbcc5ab23600899f3c1416155a12f481e9900bd435101ca8561443a93b831ac395aec73acab90e5109104e579a64598ff642e15d4190a0832fe768eadd68674ea8e7e4d8250acd4755e171a33aec4755b8b60efdafbf36e1950cc2a145098689d03142cfef9b082f71bd2d9c9109cb2801029bd032d7788f1b67db82a6ca7dd5d11dca7d26011440948c852ee9fac4913f80aedb4011b", 0xd0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000001540), &(0x7f0000001580)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$reject(0x13, r0, 0x8, 0xe1e, r2) keyctl$instantiate_iov(0x14, r0, &(0x7f0000000180)=[{&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000040)="563e36389401ed944f83b9b702ee1273a25ad504429b77ff2191003dd05b7d21485ac875db97f0d767324d2ecd634eed743bdcab523743a50112a3d83fe977c128c5eb1d6b6ba4ba85f95eb4c3f1673f4618b9aa51260a442ff8c64caef7636d9f71be548a3a283a940e7a13c89f44ee56a901910dcf9de0880efde498e0a007c939dcc2b6204024bc7b11734eac64cbdc0e86256a6f4ceedf3a4e66d4e54a6bca6e77d7682e09dca1df314197689e5320b460d6ac13abe89b68632d0f2d24c8a3f8001121d406619ff4771c30fdbc780217ea0438cd36e0947afd56d9f9f802ed7d0af0", 0xe4}, {&(0x7f00000002c0)="916bed4aeb90137d5feda38d672853853db29c10fc586b461fd6b2cd0095c0559e98e19e4b2e5ed1229a68f81df4552123dddfe5035b170e6792cce7493da4b8f045e135f9e00640bbfcdeb89c79163d2281daed2ccd0e357745440943dffe4ce5bbfc57a364637214b86618472564bb6afa491897d5f09d4565173efbd3e5c8335d322bafabc2b188e035d7873c9258fa3fd0835c7da2a3aed54831eada9ba0d4190b46967fa6894f", 0xa9}], 0x3, r1) timer_gettime(0x0, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18:01:08 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:01:08 executing program 4: r0 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6d6f64653d307830303017d45e6a8edb8ce88f0bfac0eb87bb303030c36a4bbfa2e107719c3d200515357baf8bf8101726602cfe76f0ac05e7afccd2884782d175a3dc2a05c4a2844b678d49dac7b073cd98695ef0b3aa6b7a9e1eb8b984f2a6da219c76b4195f32e5dd2b3a619eba31a2479228551d1068c7df88bd"]) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x4000, 0x80) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/suspend', 0x1850c0, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x280, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="67c95d000000000000315f3ce85cabe5"]) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x101a80, 0x122) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r5) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) openat(r4, &(0x7f0000000240)='./file0\x00', 0x420003, 0x44) 18:01:08 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) openat(0xffffffffffffffff, 0x0, 0x0, 0x80) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2dea) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) 18:01:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r5, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10000, 0x7ff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:01:08 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:01:08 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:01:08 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x8604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x40000, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffe3) 18:01:08 executing program 7: r0 = syz_io_uring_setup(0x55db, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x0, 0x40000, 0x0, {0x0, r9}}, 0x200) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0xeaf) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x5be8, 0x0, 0x0, 0x0, 0x0) 18:01:09 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) openat(0xffffffffffffffff, 0x0, 0x0, 0x80) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2dea) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) 18:01:09 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x0, 0x40000, 0x0, {0x0, r8}}, 0x200) r9 = perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x9, 0x7f, 0x1, 0x20, 0x0, 0x4, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x2180, 0x3, 0x4, 0x0, 0x2, 0xfffffffe, 0x2ad, 0x0, 0x6, 0x0, 0x100000001}, 0xffffffffffffffff, 0x10, r0, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x4, 0x4, 0x1, {0x0, r8, r9}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/snmp\x00') 18:01:09 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x4000, 0x80) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/image_size', 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x842, 0x0) r2 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x1f5) ftruncate(r2, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x10000000}) writev(r2, &(0x7f0000000480)=[{&(0x7f0000000680)="9d", 0x1}], 0x1) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000040)) 18:01:09 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) 18:01:09 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000140)='./file1\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x0, 0xf31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000000c) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') mknodat(r3, &(0x7f0000000080)='./file2\x00', 0x8000, 0xa7c) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)=ANY=[@ANYBLOB="0100a6f4221651d1c6397ce9dfac886b8b794da4ffbb580018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="200000000000000037a1ab626c653200"]) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x6, r4, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x4) 18:01:09 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) openat(0xffffffffffffffff, 0x0, 0x0, 0x80) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2dea) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) 18:01:21 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) 18:01:21 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) 18:01:21 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x0, 0x40000, 0x0, {0x0, r8}}, 0x200) r9 = perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x9, 0x7f, 0x1, 0x20, 0x0, 0x4, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x2180, 0x3, 0x4, 0x0, 0x2, 0xfffffffe, 0x2ad, 0x0, 0x6, 0x0, 0x100000001}, 0xffffffffffffffff, 0x10, r0, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x4, 0x4, 0x1, {0x0, r8, r9}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/snmp\x00') 18:01:21 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x0, 0x40000, 0x0, {0x0, r8}}, 0x200) r9 = perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x9, 0x7f, 0x1, 0x20, 0x0, 0x4, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x2180, 0x3, 0x4, 0x0, 0x2, 0xfffffffe, 0x2ad, 0x0, 0x6, 0x0, 0x100000001}, 0xffffffffffffffff, 0x10, r0, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x4, 0x4, 0x1, {0x0, r8, r9}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/snmp\x00') 18:01:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r5, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10000, 0x7ff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:01:21 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x6d7cf708bc06516e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x127f, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x3, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/139, 0x8b}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000280)=""/147, 0x93}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) tee(r2, r1, 0x3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x420900, 0x0) stat(&(0x7f0000001700)='./file0/file0\x00', &(0x7f0000001c00)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001b80)={0x0, 0xfffffffffffffffe, 0x4a, 0x8, @buffer={0x0, 0x38, &(0x7f0000000080)=""/56}, &(0x7f00000019c0)="cd5360680c4a5835dcfb604e67ee7f62ba32ab11228c6c235a6d17141be21a11499bc91052c553b71cb0b1db02a4bbe4a5dcba37197763a8474b4d30812bf59e1ac5a5935ada5b7436ec", &(0x7f0000001a40)=""/200, 0x2000, 0x0, 0x1, &(0x7f0000001b40)}) creat(0x0, 0x0) flock(r0, 0x9) syz_open_dev$loop(&(0x7f0000000000), 0x4000, 0x1) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001600)={0x53, 0xfffffffffffffffe, 0x1000, 0x3, @buffer={0x0, 0x1000, &(0x7f0000000600)=""/4096}, &(0x7f0000001e00)="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", &(0x7f00000001c0)=""/192, 0x52d00, 0x18011, 0xffffffffffffffff, &(0x7f0000000140)}) 18:01:21 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) 18:01:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r5, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:01:21 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x0, 0x40000, 0x0, {0x0, r8}}, 0x200) r9 = perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x9, 0x7f, 0x1, 0x20, 0x0, 0x4, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x2180, 0x3, 0x4, 0x0, 0x2, 0xfffffffe, 0x2ad, 0x0, 0x6, 0x0, 0x100000001}, 0xffffffffffffffff, 0x10, r0, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x4, 0x4, 0x1, {0x0, r8, r9}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/snmp\x00') 18:01:21 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) 18:01:21 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) 18:01:21 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) 18:01:21 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x0, 0x40000, 0x0, {0x0, r8}}, 0x200) r9 = perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x9, 0x7f, 0x1, 0x20, 0x0, 0x4, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x2180, 0x3, 0x4, 0x0, 0x2, 0xfffffffe, 0x2ad, 0x0, 0x6, 0x0, 0x100000001}, 0xffffffffffffffff, 0x10, r0, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x4, 0x4, 0x1, {0x0, r8, r9}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/snmp\x00') 18:01:21 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x6d7cf708bc06516e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x127f, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x3, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/139, 0x8b}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000280)=""/147, 0x93}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) tee(r2, r1, 0x3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x420900, 0x0) stat(&(0x7f0000001700)='./file0/file0\x00', &(0x7f0000001c00)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001b80)={0x0, 0xfffffffffffffffe, 0x4a, 0x8, @buffer={0x0, 0x38, &(0x7f0000000080)=""/56}, &(0x7f00000019c0)="cd5360680c4a5835dcfb604e67ee7f62ba32ab11228c6c235a6d17141be21a11499bc91052c553b71cb0b1db02a4bbe4a5dcba37197763a8474b4d30812bf59e1ac5a5935ada5b7436ec", &(0x7f0000001a40)=""/200, 0x2000, 0x0, 0x1, &(0x7f0000001b40)}) creat(0x0, 0x0) flock(r0, 0x9) syz_open_dev$loop(&(0x7f0000000000), 0x4000, 0x1) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001600)={0x53, 0xfffffffffffffffe, 0x1000, 0x3, @buffer={0x0, 0x1000, &(0x7f0000000600)=""/4096}, &(0x7f0000001e00)="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", &(0x7f00000001c0)=""/192, 0x52d00, 0x18011, 0xffffffffffffffff, &(0x7f0000000140)}) 18:01:21 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) unshare(0x48020200) 18:01:22 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x0, 0x40000, 0x0, {0x0, r8}}, 0x200) r9 = perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x9, 0x7f, 0x1, 0x20, 0x0, 0x4, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x2180, 0x3, 0x4, 0x0, 0x2, 0xfffffffe, 0x2ad, 0x0, 0x6, 0x0, 0x100000001}, 0xffffffffffffffff, 0x10, r0, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x4, 0x4, 0x1, {0x0, r8, r9}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/snmp\x00') 18:01:22 executing program 6: ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000340)=""/4096) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x15) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, 0x0) 18:01:22 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x0, 0x40000, 0x0, {0x0, r8}}, 0x200) r9 = perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x9, 0x7f, 0x1, 0x20, 0x0, 0x4, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x2180, 0x3, 0x4, 0x0, 0x2, 0xfffffffe, 0x2ad, 0x0, 0x6, 0x0, 0x100000001}, 0xffffffffffffffff, 0x10, r0, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x4, 0x4, 0x1, {0x0, r8, r9}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/snmp\x00') 18:01:22 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) 18:01:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r5, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:01:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r5, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10000, 0x7ff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:01:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r5, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:01:22 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x0, 0x40000, 0x0, {0x0, r8}}, 0x200) r9 = perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x9, 0x7f, 0x1, 0x20, 0x0, 0x4, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x2180, 0x3, 0x4, 0x0, 0x2, 0xfffffffe, 0x2ad, 0x0, 0x6, 0x0, 0x100000001}, 0xffffffffffffffff, 0x10, r0, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x4, 0x4, 0x1, {0x0, r8, r9}}, 0x0) 18:01:34 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) unshare(0x48020200) 18:01:34 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x0, 0x40000, 0x0, {0x0, r8}}, 0x200) r9 = perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x9, 0x7f, 0x1, 0x20, 0x0, 0x4, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x2180, 0x3, 0x4, 0x0, 0x2, 0xfffffffe, 0x2ad, 0x0, 0x6, 0x0, 0x100000001}, 0xffffffffffffffff, 0x10, r0, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x4, 0x4, 0x1, {0x0, r8, r9}}, 0x0) 18:01:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r5, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10000, 0x7ff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:01:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r5, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:01:34 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) 18:01:34 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x0, 0x40000, 0x0, {0x0, r7}}, 0x200) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x9, 0x7f, 0x1, 0x20, 0x0, 0x4, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x2180, 0x3, 0x4, 0x0, 0x2, 0xfffffffe, 0x2ad, 0x0, 0x6, 0x0, 0x100000001}, 0xffffffffffffffff, 0x10, r0, 0x8) 18:01:34 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) unshare(0x48020200) 18:01:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r4, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r2, r3, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:01:34 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x0, 0x40000, 0x0, {0x0, r7}}, 0x200) 18:01:34 executing program 6: fork() openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4000000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1002, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r2 = fork() ptrace(0x10, r2) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) capset(&(0x7f0000000040)={0x20071026, r2}, &(0x7f0000000080)={0x0, 0x8c, 0x0, 0x2, 0x6, 0x7fffffff}) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000180)={0x444, 0x3f4, 0x400, 0x70bd2d, 0x25dfdbfc, {0x5, 0x0, 0xd, [0x7fffffff, 0x6, 0x7, 0x7, 0x200, 0x7ff, 0x3, 0x4, 0x100, 0x4, 0x1, 0xf2, 0x3, 0x400, 0x0, 0x1000, 0x2, 0x0, 0xff, 0x490d, 0xa8, 0x10001, 0x3ff, 0x10001, 0x800, 0x1, 0x8000, 0x0, 0x780, 0x5, 0x6, 0xc6c0, 0x3, 0x5, 0x3ff, 0x6, 0x1, 0x6, 0x7f, 0x2, 0xf6, 0x3, 0x200, 0xffff, 0x5, 0x0, 0x4, 0x8, 0x80000000, 0xffffffc3, 0xd4, 0x20, 0x7fffffff, 0x3, 0x0, 0x163c3e46, 0x6, 0x10000, 0xc510, 0x4e, 0x1200, 0xd990, 0x3, 0x3], [0xa7, 0xb8000, 0x8, 0x7fffffff, 0x4, 0x3, 0x0, 0x100, 0x8, 0x4d, 0x8, 0xffffff81, 0x9, 0x6a, 0x8000, 0x28, 0x2, 0x8, 0x2, 0x5, 0x80000001, 0x9, 0x4, 0x7fff, 0x3e, 0x1f, 0xfffffff9, 0x1f, 0x5f312ac0, 0x4, 0xffffffff, 0x7ff, 0xf089, 0x8, 0x477f18e8, 0x6, 0x7, 0x40, 0x8, 0x8, 0x81, 0x53a2, 0x0, 0xbc9e, 0x40, 0x7fffffff, 0x1, 0x3, 0x8, 0x4, 0xaf, 0x2, 0x5, 0x8, 0x96ee, 0x2, 0x6, 0x3, 0x7fff, 0x2c2, 0x2, 0x7fffffff, 0x8, 0x7], [0x72e, 0x400, 0xba, 0x7ff, 0xfffffff7, 0x52, 0x8000, 0x4, 0x8, 0x8, 0x59, 0x5, 0xffff7fff, 0x67bbcb27, 0x10001, 0x800, 0x0, 0x1ff, 0x3, 0x1800000, 0x7, 0x0, 0x5, 0x6, 0x6, 0x1, 0x5, 0x2, 0x1, 0x1, 0x4fd961c4, 0x77, 0xdf76, 0x8, 0x10001, 0x7365, 0x6, 0x6, 0x0, 0x1, 0x8, 0x9, 0x5, 0xfffffffa, 0x6, 0x1, 0x7, 0x4, 0x1a, 0x5, 0x8001, 0x55fd, 0xe9, 0x3, 0x3cf, 0x80000000, 0x1, 0x1, 0x10001, 0x7, 0x8000, 0x81, 0xfff, 0xefb], [0x0, 0x49c, 0x4, 0x401, 0x3, 0x6, 0x7fff, 0x0, 0x488000, 0x3, 0x8, 0xf5f8, 0x1000, 0x2, 0x9, 0x100, 0x6, 0x9, 0x3f, 0xe6f, 0x8, 0x0, 0x1, 0x40, 0x5, 0xe0, 0x0, 0x1, 0x7c66, 0x8, 0x20000, 0xfffffff7, 0x20, 0x5, 0x2ff, 0x0, 0x3, 0x6, 0x4, 0x6, 0x10, 0x6, 0x0, 0x0, 0x80000000, 0x4, 0xa2aa, 0x5, 0x8001, 0x8, 0x5, 0x3, 0x1, 0x0, 0x8001, 0x2, 0x5, 0x2, 0x5, 0x4, 0x2, 0x7f, 0x889, 0x9], 0x22, ['\x00', '/dev/vcsu\x00', '/dev/vcsu\x00', '\x00', 'cgroup.type\x00']}, ["", "", "", "", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x810}, 0x8004) 18:01:34 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x0, 0x40000, 0x0, {0x0, r7}}, 0x200) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x9, 0x7f, 0x1, 0x20, 0x0, 0x4, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x2180, 0x3, 0x4, 0x0, 0x2, 0xfffffffe, 0x2ad, 0x0, 0x6, 0x0, 0x100000001}, 0xffffffffffffffff, 0x10, r0, 0x8) [ 272.887644] capability: warning: `syz-executor.6' uses deprecated v2 capabilities in a way that may be insecure 18:01:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r5, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:01:46 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) socket$inet_icmp_raw(0x2, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 18:01:46 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) unshare(0x48020200) 18:01:46 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r3, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r1, r2, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r0, 0x0, 0x0, 0x8000) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10000, 0x7ff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:01:46 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x0, 0x40000, 0x0, {0x0, r7}}, 0x200) 18:01:46 executing program 6: fork() openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4000000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1002, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r2 = fork() ptrace(0x10, r2) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) capset(&(0x7f0000000040)={0x20071026, r2}, &(0x7f0000000080)={0x0, 0x8c, 0x0, 0x2, 0x6, 0x7fffffff}) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000180)={0x444, 0x3f4, 0x400, 0x70bd2d, 0x25dfdbfc, {0x5, 0x0, 0xd, [0x7fffffff, 0x6, 0x7, 0x7, 0x200, 0x7ff, 0x3, 0x4, 0x100, 0x4, 0x1, 0xf2, 0x3, 0x400, 0x0, 0x1000, 0x2, 0x0, 0xff, 0x490d, 0xa8, 0x10001, 0x3ff, 0x10001, 0x800, 0x1, 0x8000, 0x0, 0x780, 0x5, 0x6, 0xc6c0, 0x3, 0x5, 0x3ff, 0x6, 0x1, 0x6, 0x7f, 0x2, 0xf6, 0x3, 0x200, 0xffff, 0x5, 0x0, 0x4, 0x8, 0x80000000, 0xffffffc3, 0xd4, 0x20, 0x7fffffff, 0x3, 0x0, 0x163c3e46, 0x6, 0x10000, 0xc510, 0x4e, 0x1200, 0xd990, 0x3, 0x3], [0xa7, 0xb8000, 0x8, 0x7fffffff, 0x4, 0x3, 0x0, 0x100, 0x8, 0x4d, 0x8, 0xffffff81, 0x9, 0x6a, 0x8000, 0x28, 0x2, 0x8, 0x2, 0x5, 0x80000001, 0x9, 0x4, 0x7fff, 0x3e, 0x1f, 0xfffffff9, 0x1f, 0x5f312ac0, 0x4, 0xffffffff, 0x7ff, 0xf089, 0x8, 0x477f18e8, 0x6, 0x7, 0x40, 0x8, 0x8, 0x81, 0x53a2, 0x0, 0xbc9e, 0x40, 0x7fffffff, 0x1, 0x3, 0x8, 0x4, 0xaf, 0x2, 0x5, 0x8, 0x96ee, 0x2, 0x6, 0x3, 0x7fff, 0x2c2, 0x2, 0x7fffffff, 0x8, 0x7], [0x72e, 0x400, 0xba, 0x7ff, 0xfffffff7, 0x52, 0x8000, 0x4, 0x8, 0x8, 0x59, 0x5, 0xffff7fff, 0x67bbcb27, 0x10001, 0x800, 0x0, 0x1ff, 0x3, 0x1800000, 0x7, 0x0, 0x5, 0x6, 0x6, 0x1, 0x5, 0x2, 0x1, 0x1, 0x4fd961c4, 0x77, 0xdf76, 0x8, 0x10001, 0x7365, 0x6, 0x6, 0x0, 0x1, 0x8, 0x9, 0x5, 0xfffffffa, 0x6, 0x1, 0x7, 0x4, 0x1a, 0x5, 0x8001, 0x55fd, 0xe9, 0x3, 0x3cf, 0x80000000, 0x1, 0x1, 0x10001, 0x7, 0x8000, 0x81, 0xfff, 0xefb], [0x0, 0x49c, 0x4, 0x401, 0x3, 0x6, 0x7fff, 0x0, 0x488000, 0x3, 0x8, 0xf5f8, 0x1000, 0x2, 0x9, 0x100, 0x6, 0x9, 0x3f, 0xe6f, 0x8, 0x0, 0x1, 0x40, 0x5, 0xe0, 0x0, 0x1, 0x7c66, 0x8, 0x20000, 0xfffffff7, 0x20, 0x5, 0x2ff, 0x0, 0x3, 0x6, 0x4, 0x6, 0x10, 0x6, 0x0, 0x0, 0x80000000, 0x4, 0xa2aa, 0x5, 0x8001, 0x8, 0x5, 0x3, 0x1, 0x0, 0x8001, 0x2, 0x5, 0x2, 0x5, 0x4, 0x2, 0x7f, 0x889, 0x9], 0x22, ['\x00', '/dev/vcsu\x00', '/dev/vcsu\x00', '\x00', 'cgroup.type\x00']}, ["", "", "", "", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x810}, 0x8004) 18:01:46 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) unshare(0x48020200) 18:01:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r4, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r2, r3, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:01:46 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) socket$inet_icmp_raw(0x2, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 18:01:46 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) socket$inet_icmp_raw(0x2, 0x3, 0x1) 18:01:46 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) unshare(0x48020200) 18:01:46 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) socket$inet_icmp_raw(0x2, 0x3, 0x1) 18:01:46 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) 18:01:46 executing program 6: fork() openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4000000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1002, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r2 = fork() ptrace(0x10, r2) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) capset(&(0x7f0000000040)={0x20071026, r2}, &(0x7f0000000080)={0x0, 0x8c, 0x0, 0x2, 0x6, 0x7fffffff}) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000180)={0x444, 0x3f4, 0x400, 0x70bd2d, 0x25dfdbfc, {0x5, 0x0, 0xd, [0x7fffffff, 0x6, 0x7, 0x7, 0x200, 0x7ff, 0x3, 0x4, 0x100, 0x4, 0x1, 0xf2, 0x3, 0x400, 0x0, 0x1000, 0x2, 0x0, 0xff, 0x490d, 0xa8, 0x10001, 0x3ff, 0x10001, 0x800, 0x1, 0x8000, 0x0, 0x780, 0x5, 0x6, 0xc6c0, 0x3, 0x5, 0x3ff, 0x6, 0x1, 0x6, 0x7f, 0x2, 0xf6, 0x3, 0x200, 0xffff, 0x5, 0x0, 0x4, 0x8, 0x80000000, 0xffffffc3, 0xd4, 0x20, 0x7fffffff, 0x3, 0x0, 0x163c3e46, 0x6, 0x10000, 0xc510, 0x4e, 0x1200, 0xd990, 0x3, 0x3], [0xa7, 0xb8000, 0x8, 0x7fffffff, 0x4, 0x3, 0x0, 0x100, 0x8, 0x4d, 0x8, 0xffffff81, 0x9, 0x6a, 0x8000, 0x28, 0x2, 0x8, 0x2, 0x5, 0x80000001, 0x9, 0x4, 0x7fff, 0x3e, 0x1f, 0xfffffff9, 0x1f, 0x5f312ac0, 0x4, 0xffffffff, 0x7ff, 0xf089, 0x8, 0x477f18e8, 0x6, 0x7, 0x40, 0x8, 0x8, 0x81, 0x53a2, 0x0, 0xbc9e, 0x40, 0x7fffffff, 0x1, 0x3, 0x8, 0x4, 0xaf, 0x2, 0x5, 0x8, 0x96ee, 0x2, 0x6, 0x3, 0x7fff, 0x2c2, 0x2, 0x7fffffff, 0x8, 0x7], [0x72e, 0x400, 0xba, 0x7ff, 0xfffffff7, 0x52, 0x8000, 0x4, 0x8, 0x8, 0x59, 0x5, 0xffff7fff, 0x67bbcb27, 0x10001, 0x800, 0x0, 0x1ff, 0x3, 0x1800000, 0x7, 0x0, 0x5, 0x6, 0x6, 0x1, 0x5, 0x2, 0x1, 0x1, 0x4fd961c4, 0x77, 0xdf76, 0x8, 0x10001, 0x7365, 0x6, 0x6, 0x0, 0x1, 0x8, 0x9, 0x5, 0xfffffffa, 0x6, 0x1, 0x7, 0x4, 0x1a, 0x5, 0x8001, 0x55fd, 0xe9, 0x3, 0x3cf, 0x80000000, 0x1, 0x1, 0x10001, 0x7, 0x8000, 0x81, 0xfff, 0xefb], [0x0, 0x49c, 0x4, 0x401, 0x3, 0x6, 0x7fff, 0x0, 0x488000, 0x3, 0x8, 0xf5f8, 0x1000, 0x2, 0x9, 0x100, 0x6, 0x9, 0x3f, 0xe6f, 0x8, 0x0, 0x1, 0x40, 0x5, 0xe0, 0x0, 0x1, 0x7c66, 0x8, 0x20000, 0xfffffff7, 0x20, 0x5, 0x2ff, 0x0, 0x3, 0x6, 0x4, 0x6, 0x10, 0x6, 0x0, 0x0, 0x80000000, 0x4, 0xa2aa, 0x5, 0x8001, 0x8, 0x5, 0x3, 0x1, 0x0, 0x8001, 0x2, 0x5, 0x2, 0x5, 0x4, 0x2, 0x7f, 0x889, 0x9], 0x22, ['\x00', '/dev/vcsu\x00', '/dev/vcsu\x00', '\x00', 'cgroup.type\x00']}, ["", "", "", "", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x810}, 0x8004) 18:01:46 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) 18:01:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r4, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r2, r3, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:01:47 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r3, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r1, r2, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r0, 0x0, 0x0, 0x8000) 18:01:47 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 18:01:47 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:01:47 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r3, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r1, r2, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r0, 0x0, 0x0, 0x8000) 18:01:47 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 18:01:59 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r3, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r1, r2, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r0, 0x0, 0x0, 0x8000) 18:01:59 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) unshare(0x48020200) 18:01:59 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r2, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) 18:01:59 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 18:01:59 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) 18:01:59 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:01:59 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:01:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r5, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r3, r4, 0x0, 0x100000001) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:01:59 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:01:59 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 18:01:59 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:02:14 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:02:14 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r2, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) 18:02:14 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 18:02:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r5, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r3, r4, 0x0, 0x100000001) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:02:14 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:02:14 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:02:14 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r2, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:02:14 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:02:14 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) 18:02:14 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 18:02:14 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 18:02:14 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) 18:02:14 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') sendfile(r0, r1, 0x0, 0x100000001) 18:02:14 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r2, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:02:14 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) 18:02:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r5, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r3, r4, 0x0, 0x100000001) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:02:14 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:02:14 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:02:15 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) 18:02:15 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:02:15 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:02:15 executing program 7: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) 18:02:15 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') sendfile(r0, r1, 0x0, 0x100000001) 18:02:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r3, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:02:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r3, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:02:15 executing program 4: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:02:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r3, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:02:15 executing program 7: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) 18:02:15 executing program 4: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:02:27 executing program 7: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) 18:02:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:02:27 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:02:27 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') sendfile(r0, r1, 0x0, 0x100000001) 18:02:27 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') sendfile(r0, r1, 0x0, 0x100000001) 18:02:27 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:02:27 executing program 4: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:02:27 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:02:28 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:02:42 executing program 7: syz_io_uring_setup(0x3862, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) 18:02:42 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:02:42 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:02:42 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:02:42 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') sendfile(r0, r1, 0x0, 0x100000001) 18:02:42 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:02:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:02:42 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) unshare(0x48020200) 18:02:42 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:02:42 executing program 7: syz_io_uring_setup(0x3862, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) 18:02:42 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:02:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:02:56 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:02:56 executing program 7: syz_io_uring_setup(0x3862, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) 18:02:56 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') sendfile(r0, r1, 0x0, 0x100000001) 18:02:56 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:02:56 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:02:56 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:02:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:02:56 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000180)) 18:02:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:02:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:02:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:02:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:02:57 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000180)) 18:02:57 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:02:57 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:02:57 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:02:57 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:02:57 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000180)) 18:02:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:03:09 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) 18:03:09 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:03:09 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r1, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) 18:03:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:03:09 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:03:09 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:03:09 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:03:09 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:03:09 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) 18:03:09 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:03:09 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r1, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) 18:03:24 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) 18:03:24 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) 18:03:24 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:03:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:03:24 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r1, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) 18:03:24 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:03:24 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:03:24 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:03:24 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:03:24 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r2, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:03:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:03:24 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) 18:03:24 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) unshare(0x48020200) 18:03:24 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:03:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:03:24 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) 18:03:24 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) 18:03:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:03:40 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 18:03:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:03:40 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) unshare(0x48020200) 18:03:40 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:03:40 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) 18:03:40 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:03:40 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:03:40 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r1, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) 18:03:40 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x84) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) 18:03:40 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r1, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) 18:03:41 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:03:41 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 18:03:41 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:03:41 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r1, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) 18:03:41 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:03:51 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) 18:03:51 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 18:03:51 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:03:51 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:03:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:03:51 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:03:51 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r2, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:03:51 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:03:51 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) 18:03:51 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 18:03:51 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:03:52 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r2, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:03:52 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 18:03:52 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) 18:04:02 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 18:04:02 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r2, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:04:02 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:04:02 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r1, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) 18:04:02 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:04:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r1, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)) 18:04:02 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:04:02 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:04:02 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:04:02 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 1) 18:04:02 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 421.261951] FAULT_INJECTION: forcing a failure. [ 421.261951] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 421.264908] CPU: 0 PID: 5217 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 421.266559] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 421.268446] Call Trace: [ 421.269058] dump_stack+0x107/0x167 18:04:03 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 421.269892] should_fail.cold+0x5/0xa [ 421.270942] _copy_from_user+0x2e/0x1b0 [ 421.271858] io_uring_setup+0x9b/0x2980 [ 421.272786] ? __mutex_unlock_slowpath+0xe1/0x600 [ 421.273896] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 421.275039] ? wait_for_completion_io+0x270/0x270 [ 421.276149] ? rcu_read_lock_any_held+0x75/0xa0 [ 421.277211] ? vfs_write+0x354/0xb10 [ 421.278062] ? fput_many+0x2f/0x1a0 [ 421.278884] ? ksys_write+0x1a9/0x260 [ 421.279743] ? __ia32_sys_read+0xb0/0xb0 [ 421.280674] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 421.281918] ? syscall_enter_from_user_mode+0x1d/0x50 [ 421.283091] do_syscall_64+0x33/0x40 [ 421.283934] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 421.285100] RIP: 0033:0x7f722f48db19 [ 421.285947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 421.290117] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 421.291820] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 421.293430] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 421.295031] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 421.296621] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 421.298206] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:04:03 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:04:03 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 2) [ 421.472839] FAULT_INJECTION: forcing a failure. [ 421.472839] name failslab, interval 1, probability 0, space 0, times 1 [ 421.475361] CPU: 1 PID: 5223 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 421.476817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 421.478562] Call Trace: [ 421.479120] dump_stack+0x107/0x167 [ 421.479890] should_fail.cold+0x5/0xa [ 421.480705] ? io_uring_setup+0x258/0x2980 [ 421.481610] should_failslab+0x5/0x20 [ 421.482408] kmem_cache_alloc_trace+0x55/0x320 [ 421.483374] io_uring_setup+0x258/0x2980 [ 421.484230] ? __mutex_unlock_slowpath+0xe1/0x600 [ 421.485255] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 421.486321] ? wait_for_completion_io+0x270/0x270 [ 421.487363] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 421.488471] ? syscall_enter_from_user_mode+0x1d/0x50 [ 421.489575] do_syscall_64+0x33/0x40 [ 421.490365] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 421.491452] RIP: 0033:0x7f722f48db19 [ 421.492233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 421.496114] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 421.497734] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 421.499238] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 421.500746] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 421.502266] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 421.503768] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:04:03 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:04:03 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:04:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r1, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)) 18:04:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r2, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:04:03 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) [ 435.574518] FAULT_INJECTION: forcing a failure. [ 435.574518] name failslab, interval 1, probability 0, space 0, times 0 [ 435.577207] CPU: 1 PID: 5246 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 435.578720] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 435.580554] Call Trace: [ 435.581172] dump_stack+0x107/0x167 [ 435.582003] should_fail.cold+0x5/0xa [ 435.582848] ? create_object.isra.0+0x3a/0xa30 [ 435.583850] should_failslab+0x5/0x20 [ 435.584672] kmem_cache_alloc+0x5b/0x310 [ 435.585588] create_object.isra.0+0x3a/0xa30 [ 435.586548] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 435.587673] kmem_cache_alloc_trace+0x151/0x320 [ 435.588704] io_uring_setup+0x258/0x2980 [ 435.589611] ? __mutex_unlock_slowpath+0xe1/0x600 [ 435.590677] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 435.591788] ? wait_for_completion_io+0x270/0x270 [ 435.592863] ? perf_trace_preemptirq_template+0x26d/0x400 [ 435.594062] ? perf_trace_preemptirq_template+0x26d/0x400 [ 435.595253] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 435.596386] ? syscall_enter_from_user_mode+0x1d/0x50 [ 435.597535] do_syscall_64+0x33/0x40 [ 435.598341] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 435.599441] RIP: 0033:0x7f722f48db19 [ 435.600253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 435.604213] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 435.605871] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 435.607412] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 435.608969] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 435.610485] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 435.612018] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:04:17 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 18:04:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r2, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:04:17 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:04:17 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:04:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r1, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)) 18:04:17 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:04:17 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 3) 18:04:17 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:04:17 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:04:17 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:04:17 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 18:04:17 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 4) 18:04:17 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 435.884948] FAULT_INJECTION: forcing a failure. [ 435.884948] name failslab, interval 1, probability 0, space 0, times 0 [ 435.887837] CPU: 1 PID: 5265 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 435.889501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 435.891579] Call Trace: [ 435.892273] dump_stack+0x107/0x167 [ 435.893150] should_fail.cold+0x5/0xa [ 435.894055] ? io_uring_setup+0x33c/0x2980 [ 435.895141] should_failslab+0x5/0x20 [ 435.896035] __kmalloc+0x72/0x390 [ 435.896908] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 435.898230] io_uring_setup+0x33c/0x2980 [ 435.899078] ? __mutex_unlock_slowpath+0xe1/0x600 [ 435.900075] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 435.901139] ? wait_for_completion_io+0x270/0x270 [ 435.902168] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 435.903255] ? syscall_enter_from_user_mode+0x1d/0x50 [ 435.904320] do_syscall_64+0x33/0x40 [ 435.905097] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 435.906147] RIP: 0033:0x7f722f48db19 [ 435.906918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 435.910744] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 435.912328] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 435.913815] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 435.915295] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 435.916769] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 435.918245] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:04:17 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:04:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:04:17 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 18:04:17 executing program 6: r0 = syz_io_uring_setup(0x3862, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:04:17 executing program 6: r0 = syz_io_uring_setup(0x3862, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:04:17 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 18:04:17 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:04:17 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r2, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:04:18 executing program 6: r0 = syz_io_uring_setup(0x3862, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:04:31 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 5) 18:04:31 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:04:31 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 18:04:31 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r2, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:04:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:04:31 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:04:31 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:04:31 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) [ 449.284038] FAULT_INJECTION: forcing a failure. [ 449.284038] name failslab, interval 1, probability 0, space 0, times 0 [ 449.286658] CPU: 0 PID: 5304 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 449.288199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 449.290078] Call Trace: [ 449.290682] dump_stack+0x107/0x167 [ 449.291572] should_fail.cold+0x5/0xa [ 449.292611] ? create_object.isra.0+0x3a/0xa30 [ 449.293691] should_failslab+0x5/0x20 [ 449.294575] kmem_cache_alloc+0x5b/0x310 [ 449.295527] create_object.isra.0+0x3a/0xa30 [ 449.296545] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 449.297740] __kmalloc+0x16e/0x390 [ 449.298575] io_uring_setup+0x33c/0x2980 [ 449.299520] ? __mutex_unlock_slowpath+0xe1/0x600 [ 449.300645] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 449.301826] ? wait_for_completion_io+0x270/0x270 [ 449.302970] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 449.304185] ? syscall_enter_from_user_mode+0x1d/0x50 [ 449.305394] do_syscall_64+0x33/0x40 [ 449.306258] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 449.307447] RIP: 0033:0x7f722f48db19 [ 449.308308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 449.312581] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 449.314351] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 449.316006] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 449.317668] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 449.319326] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 449.320979] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:04:31 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:04:31 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 18:04:31 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r2, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:04:31 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 6) 18:04:31 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 449.539364] FAULT_INJECTION: forcing a failure. [ 449.539364] name failslab, interval 1, probability 0, space 0, times 0 [ 449.542057] CPU: 0 PID: 5317 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 449.543653] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 449.545594] Call Trace: [ 449.546209] dump_stack+0x107/0x167 [ 449.547061] should_fail.cold+0x5/0xa [ 449.547963] ? io_uring_setup+0x40b/0x2980 [ 449.548955] should_failslab+0x5/0x20 [ 449.549860] kmem_cache_alloc_trace+0x55/0x320 [ 449.550933] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 449.552134] io_uring_setup+0x40b/0x2980 [ 449.553101] ? __mutex_unlock_slowpath+0xe1/0x600 [ 449.554241] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 449.555414] ? wait_for_completion_io+0x270/0x270 [ 449.556522] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 449.557849] ? syscall_enter_from_user_mode+0x1d/0x50 [ 449.559136] do_syscall_64+0x33/0x40 [ 449.560013] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 449.561157] RIP: 0033:0x7f722f48db19 [ 449.562030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 449.566299] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 449.568022] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 449.569728] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 449.571338] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 449.573028] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 449.574652] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:04:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r2, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:04:31 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 18:04:31 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:04:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r2, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:04:45 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:04:45 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r1, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000001c0)={0x0, r0}) 18:04:45 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:04:45 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 7) 18:04:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:04:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r1, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)) 18:04:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r2, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:04:45 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 463.609856] FAULT_INJECTION: forcing a failure. [ 463.609856] name failslab, interval 1, probability 0, space 0, times 0 [ 463.612290] CPU: 0 PID: 5347 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 463.613758] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 463.615534] Call Trace: [ 463.616100] dump_stack+0x107/0x167 [ 463.616875] should_fail.cold+0x5/0xa [ 463.617791] ? create_object.isra.0+0x3a/0xa30 [ 463.618910] should_failslab+0x5/0x20 [ 463.619725] kmem_cache_alloc+0x5b/0x310 [ 463.620596] create_object.isra.0+0x3a/0xa30 [ 463.621539] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 463.622621] kmem_cache_alloc_trace+0x151/0x320 [ 463.623617] io_uring_setup+0x40b/0x2980 [ 463.624481] ? __mutex_unlock_slowpath+0xe1/0x600 [ 463.625516] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 463.626587] ? wait_for_completion_io+0x270/0x270 [ 463.627634] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 463.628746] ? syscall_enter_from_user_mode+0x1d/0x50 [ 463.629857] do_syscall_64+0x33/0x40 [ 463.630648] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 463.631735] RIP: 0033:0x7f722f48db19 [ 463.632521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 463.636439] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 463.638066] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 463.639576] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 463.641092] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 463.642622] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 463.644137] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:04:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r2, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:04:45 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:04:45 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 18:04:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r2, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:04:45 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 18:04:45 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 8) 18:04:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r2, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) [ 464.114913] FAULT_INJECTION: forcing a failure. [ 464.114913] name failslab, interval 1, probability 0, space 0, times 0 [ 464.117128] CPU: 0 PID: 5366 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 464.118433] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 464.120006] Call Trace: [ 464.120508] dump_stack+0x107/0x167 [ 464.121197] should_fail.cold+0x5/0xa [ 464.121919] ? create_object.isra.0+0x3a/0xa30 [ 464.122780] should_failslab+0x5/0x20 [ 464.123506] kmem_cache_alloc+0x5b/0x310 [ 464.124278] create_object.isra.0+0x3a/0xa30 [ 464.125108] kmemleak_alloc_percpu+0xa0/0x100 [ 464.125980] pcpu_alloc+0x4e2/0x1240 [ 464.126699] ? io_tctx_exit_cb+0xf0/0xf0 [ 464.127471] percpu_ref_init+0x31/0x3d0 [ 464.128218] io_uring_setup+0x47a/0x2980 [ 464.128989] ? __mutex_unlock_slowpath+0xe1/0x600 [ 464.129916] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 464.130864] ? wait_for_completion_io+0x270/0x270 [ 464.131797] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 464.132785] ? syscall_enter_from_user_mode+0x1d/0x50 [ 464.133767] do_syscall_64+0x33/0x40 [ 464.134470] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 464.135450] RIP: 0033:0x7f722f48db19 [ 464.136152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 464.139621] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 464.141006] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 464.142328] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 464.143625] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 464.144914] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 464.146210] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:04:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) [ 478.036789] FAULT_INJECTION: forcing a failure. [ 478.036789] name failslab, interval 1, probability 0, space 0, times 0 18:04:59 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 18:04:59 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:04:59 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:04:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:04:59 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 9) 18:04:59 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:04:59 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r1, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000001c0)={0x0, r0}) [ 478.039963] CPU: 1 PID: 5380 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 478.041796] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 478.043787] Call Trace: [ 478.044427] dump_stack+0x107/0x167 [ 478.045285] should_fail.cold+0x5/0xa [ 478.046206] ? create_object.isra.0+0x3a/0xa30 [ 478.047325] should_failslab+0x5/0x20 [ 478.048366] kmem_cache_alloc+0x5b/0x310 [ 478.049349] create_object.isra.0+0x3a/0xa30 [ 478.050399] kmemleak_alloc_percpu+0xa0/0x100 [ 478.051473] pcpu_alloc+0x4e2/0x1240 [ 478.052363] ? io_tctx_exit_cb+0xf0/0xf0 [ 478.053301] percpu_ref_init+0x31/0x3d0 [ 478.054275] io_uring_setup+0x47a/0x2980 [ 478.055238] ? __mutex_unlock_slowpath+0xe1/0x600 [ 478.056381] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 478.057592] ? wait_for_completion_io+0x270/0x270 [ 478.058771] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 478.060021] ? syscall_enter_from_user_mode+0x1d/0x50 [ 478.061225] do_syscall_64+0x33/0x40 [ 478.062108] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 478.063299] RIP: 0033:0x7f722f48db19 [ 478.064166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 478.068435] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 478.070215] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 478.071887] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 478.073566] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 478.075237] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 478.076881] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:04:59 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) 18:05:12 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 10) 18:05:12 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:05:12 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) (fail_nth: 1) 18:05:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:05:12 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) 18:05:12 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r1, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000001c0)={0x0, r0}) 18:05:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:05:12 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) [ 490.291456] FAULT_INJECTION: forcing a failure. [ 490.291456] name failslab, interval 1, probability 0, space 0, times 0 [ 490.294280] CPU: 0 PID: 5400 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 490.295904] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 490.297785] Call Trace: [ 490.298384] dump_stack+0x107/0x167 [ 490.299210] should_fail.cold+0x5/0xa [ 490.300083] ? percpu_ref_init+0xd8/0x3d0 [ 490.301035] should_failslab+0x5/0x20 [ 490.301925] kmem_cache_alloc_trace+0x55/0x320 [ 490.302973] ? io_tctx_exit_cb+0xf0/0xf0 [ 490.303899] percpu_ref_init+0xd8/0x3d0 [ 490.304815] io_uring_setup+0x47a/0x2980 [ 490.305751] ? __mutex_unlock_slowpath+0xe1/0x600 [ 490.306853] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 490.308001] ? wait_for_completion_io+0x270/0x270 [ 490.309121] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 490.310322] ? syscall_enter_from_user_mode+0x1d/0x50 [ 490.311499] do_syscall_64+0x33/0x40 [ 490.312347] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 490.313512] RIP: 0033:0x7f722f48db19 [ 490.314373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 490.318549] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 490.320279] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 490.321906] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 490.323527] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 490.325154] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 490.326783] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 490.345543] FAULT_INJECTION: forcing a failure. [ 490.345543] name failslab, interval 1, probability 0, space 0, times 0 [ 490.348716] CPU: 0 PID: 5408 Comm: syz-executor.4 Not tainted 5.10.258 #1 [ 490.350296] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 490.352191] Call Trace: [ 490.352806] dump_stack+0x107/0x167 [ 490.353672] should_fail.cold+0x5/0xa [ 490.354565] ? vm_area_dup+0x78/0x290 [ 490.355433] should_failslab+0x5/0x20 [ 490.356313] kmem_cache_alloc+0x5b/0x310 [ 490.357249] vm_area_dup+0x78/0x290 [ 490.358088] ? perf_swevent_event+0x6c/0x550 [ 490.359109] ? mark_lock+0xf5/0x2df0 [ 490.359957] ? perf_tp_event+0x5ce/0xc00 [ 490.360897] ? lock_chain_count+0x20/0x20 [ 490.361864] ? mark_lock+0xf5/0x2df0 [ 490.362717] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 490.363863] ? lock_chain_count+0x20/0x20 [ 490.364812] ? lock_chain_count+0x20/0x20 [ 490.365776] ? mark_lock+0xf5/0x2df0 [ 490.366624] ? perf_trace_preemptirq_template+0x26d/0x400 [ 490.367877] ? vm_area_alloc+0x110/0x110 [ 490.368827] ? __lock_acquire+0x1657/0x5b00 [ 490.369843] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 490.371054] ? perf_tp_event+0x5ce/0xc00 [ 490.371976] ? vmacache_find+0x55/0x2a0 [ 490.372903] __split_vma+0xa8/0x4e0 [ 490.373753] __do_munmap+0xfae/0x1260 [ 490.374688] ? arch_get_unmapped_area+0x450/0x450 [ 490.375835] ? lock_release+0x680/0x680 [ 490.376736] mmap_region+0x7cc/0x1500 [ 490.377649] do_mmap+0x868/0x1370 [ 490.378445] vm_mmap_pgoff+0x198/0x1f0 [ 490.379356] ? randomize_page+0xb0/0xb0 [ 490.380299] ksys_mmap_pgoff+0x41c/0x560 [ 490.381245] ? find_mergeable_anon_vma+0x250/0x250 [ 490.382398] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 490.383619] ? syscall_enter_from_user_mode+0x1d/0x50 [ 490.384826] do_syscall_64+0x33/0x40 [ 490.385703] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 490.386893] RIP: 0033:0x7f759e56fb19 [ 490.387731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 490.392009] RSP: 002b:00007f759bae5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 490.393785] RAX: ffffffffffffffda RBX: 00007f759e682f60 RCX: 00007f759e56fb19 [ 490.395443] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 490.397101] RBP: 00007f759bae51d0 R08: 0000000000000004 R09: 0000000000000000 [ 490.398770] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 490.400430] R13: 00007ffd92e6b2ef R14: 00007f759bae5300 R15: 0000000000022000 18:05:12 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) 18:05:12 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 11) [ 490.505860] FAULT_INJECTION: forcing a failure. [ 490.505860] name failslab, interval 1, probability 0, space 0, times 0 [ 490.508561] CPU: 0 PID: 5414 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 490.510121] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 490.512035] Call Trace: [ 490.512607] dump_stack+0x107/0x167 [ 490.513397] should_fail.cold+0x5/0xa [ 490.514317] ? create_object.isra.0+0x3a/0xa30 [ 490.515406] should_failslab+0x5/0x20 [ 490.516229] kmem_cache_alloc+0x5b/0x310 [ 490.517119] create_object.isra.0+0x3a/0xa30 [ 490.518073] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 490.519173] kmem_cache_alloc_trace+0x151/0x320 [ 490.520179] ? io_tctx_exit_cb+0xf0/0xf0 [ 490.521052] percpu_ref_init+0xd8/0x3d0 [ 490.521900] io_uring_setup+0x47a/0x2980 [ 490.522788] ? __mutex_unlock_slowpath+0xe1/0x600 [ 490.523831] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 490.524916] ? wait_for_completion_io+0x270/0x270 [ 490.525963] ? perf_trace_preemptirq_template+0x26d/0x400 [ 490.527135] ? perf_trace_preemptirq_template+0x26d/0x400 [ 490.528336] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 490.529462] ? syscall_enter_from_user_mode+0x1d/0x50 [ 490.530549] do_syscall_64+0x33/0x40 [ 490.531348] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 490.532424] RIP: 0033:0x7f722f48db19 [ 490.533219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 490.537179] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 490.538812] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 490.540341] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 490.541875] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 490.543402] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 490.544930] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:05:12 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:05:12 executing program 6: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 18:05:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:05:12 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) (fail_nth: 2) 18:05:12 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 12) [ 490.827874] FAULT_INJECTION: forcing a failure. [ 490.827874] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 490.830752] CPU: 0 PID: 5422 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 490.832380] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 490.834395] Call Trace: [ 490.835038] dump_stack+0x107/0x167 [ 490.835918] should_fail.cold+0x5/0xa [ 490.836752] __alloc_pages_nodemask+0x182/0x600 [ 490.837862] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 490.839329] ? cap_capable+0x1cd/0x230 [ 490.840274] alloc_pages_current+0x187/0x280 [ 490.841334] __get_free_pages+0xc/0xa0 [ 490.842248] io_uring_setup+0xe27/0x2980 [ 490.843130] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 490.844209] ? wait_for_completion_io+0x270/0x270 [ 490.845264] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 490.846393] ? syscall_enter_from_user_mode+0x1d/0x50 [ 490.847502] do_syscall_64+0x33/0x40 [ 490.848307] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 490.849394] RIP: 0033:0x7f722f48db19 [ 490.850189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 490.854140] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 490.855782] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 490.857310] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 490.858846] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 490.860392] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 490.861926] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 490.896010] FAULT_INJECTION: forcing a failure. [ 490.896010] name failslab, interval 1, probability 0, space 0, times 0 [ 490.898538] CPU: 1 PID: 5428 Comm: syz-executor.4 Not tainted 5.10.258 #1 [ 490.899953] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 490.901670] Call Trace: [ 490.902233] dump_stack+0x107/0x167 [ 490.902994] should_fail.cold+0x5/0xa [ 490.903795] ? create_object.isra.0+0x3a/0xa30 [ 490.904977] should_failslab+0x5/0x20 [ 490.905793] kmem_cache_alloc+0x5b/0x310 [ 490.906640] create_object.isra.0+0x3a/0xa30 [ 490.907550] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 490.908873] kmem_cache_alloc+0x159/0x310 [ 490.909772] vm_area_dup+0x78/0x290 [ 490.910718] ? mark_lock+0xf5/0x2df0 [ 490.911562] ? mark_lock+0xf5/0x2df0 [ 490.912533] ? lock_chain_count+0x20/0x20 [ 490.913402] ? lock_chain_count+0x20/0x20 [ 490.914288] ? mark_lock+0xf5/0x2df0 [ 490.915068] ? __lock_acquire+0x1657/0x5b00 [ 490.916198] ? lock_chain_count+0x20/0x20 [ 490.917064] ? mark_lock+0xf5/0x2df0 [ 490.918034] ? vm_area_alloc+0x110/0x110 [ 490.919105] ? __lock_acquire+0x1657/0x5b00 [ 490.920252] ? __lock_acquire+0xbb1/0x5b00 [ 490.921343] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 490.922472] ? vmacache_find+0x55/0x2a0 [ 490.923493] __split_vma+0xa8/0x4e0 [ 490.924307] __do_munmap+0xfae/0x1260 [ 490.925291] ? arch_get_unmapped_area+0x450/0x450 [ 490.926306] ? lock_release+0x680/0x680 [ 490.927143] mmap_region+0x7cc/0x1500 [ 490.927953] do_mmap+0x868/0x1370 [ 490.928682] vm_mmap_pgoff+0x198/0x1f0 [ 490.929504] ? randomize_page+0xb0/0xb0 [ 490.930365] ksys_mmap_pgoff+0x41c/0x560 [ 490.931215] ? find_mergeable_anon_vma+0x250/0x250 [ 490.932237] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 490.933595] ? syscall_enter_from_user_mode+0x1d/0x50 [ 490.934755] do_syscall_64+0x33/0x40 [ 490.935538] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 490.936607] RIP: 0033:0x7f759e56fb19 [ 490.937572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 490.941510] RSP: 002b:00007f759bae5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 490.943495] RAX: ffffffffffffffda RBX: 00007f759e682f60 RCX: 00007f759e56fb19 [ 490.945117] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 490.946604] RBP: 00007f759bae51d0 R08: 0000000000000004 R09: 0000000000000000 [ 490.948103] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 490.949604] R13: 00007ffd92e6b2ef R14: 00007f759bae5300 R15: 0000000000022000 18:05:12 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:05:12 executing program 6: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 18:05:26 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0xc02c2, 0x59) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:05:26 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:05:26 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:05:26 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:05:26 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) (fail_nth: 3) 18:05:26 executing program 6: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 18:05:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) [ 505.191915] FAULT_INJECTION: forcing a failure. [ 505.191915] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 505.193405] CPU: 1 PID: 5449 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 505.194231] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 505.195217] Call Trace: [ 505.195540] dump_stack+0x107/0x167 [ 505.195945] FAULT_INJECTION: forcing a failure. [ 505.195945] name failslab, interval 1, probability 0, space 0, times 0 [ 505.197274] should_fail.cold+0x5/0xa [ 505.197290] __alloc_pages_nodemask+0x182/0x600 [ 505.197303] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 505.197330] ? cap_capable+0x1cd/0x230 [ 505.200034] alloc_pages_current+0x187/0x280 [ 505.200549] __get_free_pages+0xc/0xa0 [ 505.201009] io_uring_setup+0xf9a/0x2980 [ 505.201493] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 505.202094] ? wait_for_completion_io+0x270/0x270 [ 505.202662] ? perf_trace_preemptirq_template+0x26d/0x400 [ 505.203300] ? perf_trace_preemptirq_template+0x26d/0x400 [ 505.203951] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 505.204566] ? syscall_enter_from_user_mode+0x1d/0x50 [ 505.205171] do_syscall_64+0x33/0x40 [ 505.205610] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 505.206216] RIP: 0033:0x7f722f48db19 [ 505.206653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 505.208811] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 505.209709] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 505.210549] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 505.211384] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 505.212220] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 505.213063] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:05:26 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 13) [ 505.213943] CPU: 0 PID: 5442 Comm: syz-executor.4 Not tainted 5.10.258 #1 [ 505.215836] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 505.217954] Call Trace: [ 505.218626] dump_stack+0x107/0x167 [ 505.219549] should_fail.cold+0x5/0xa [ 505.220507] ? vm_area_alloc+0x1c/0x110 [ 505.221508] should_failslab+0x5/0x20 [ 505.222478] kmem_cache_alloc+0x5b/0x310 [ 505.223515] vm_area_alloc+0x1c/0x110 [ 505.224478] mmap_region+0x982/0x1500 [ 505.225455] do_mmap+0x868/0x1370 [ 505.226311] vm_mmap_pgoff+0x198/0x1f0 [ 505.227293] ? randomize_page+0xb0/0xb0 [ 505.228140] ksys_mmap_pgoff+0x41c/0x560 [ 505.228986] ? find_mergeable_anon_vma+0x250/0x250 [ 505.230027] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 505.231138] ? syscall_enter_from_user_mode+0x1d/0x50 [ 505.232212] do_syscall_64+0x33/0x40 [ 505.232997] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 505.234068] RIP: 0033:0x7f759e56fb19 [ 505.234844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 505.238710] RSP: 002b:00007f759bae5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 505.240309] RAX: ffffffffffffffda RBX: 00007f759e682f60 RCX: 00007f759e56fb19 [ 505.241818] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 505.243322] RBP: 00007f759bae51d0 R08: 0000000000000004 R09: 0000000000000000 [ 505.244819] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 505.246322] R13: 00007ffd92e6b2ef R14: 00007f759bae5300 R15: 0000000000022000 18:05:27 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 14) [ 505.254868] FAULT_INJECTION: forcing a failure. [ 505.254868] name failslab, interval 1, probability 0, space 0, times 0 [ 505.256538] CPU: 1 PID: 5453 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 505.257424] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 505.258614] Call Trace: [ 505.258924] dump_stack+0x107/0x167 [ 505.259344] should_fail.cold+0x5/0xa [ 505.259790] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 505.260446] should_failslab+0x5/0x20 [ 505.260901] kmem_cache_alloc_trace+0x55/0x320 [ 505.261447] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 505.262087] io_uring_setup+0x14f6/0x2980 [ 505.262566] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 505.263151] ? wait_for_completion_io+0x270/0x270 [ 505.263706] ? perf_trace_preemptirq_template+0x26d/0x400 [ 505.264342] ? perf_trace_preemptirq_template+0x26d/0x400 [ 505.264985] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 505.265594] ? syscall_enter_from_user_mode+0x1d/0x50 [ 505.266195] do_syscall_64+0x33/0x40 [ 505.266623] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 505.267204] RIP: 0033:0x7f722f48db19 [ 505.267633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 505.269729] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 505.270595] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 505.271404] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 505.272207] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 505.273017] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 505.273832] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:05:27 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) (fail_nth: 4) 18:05:27 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:05:27 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) (fail_nth: 1) [ 505.387726] FAULT_INJECTION: forcing a failure. [ 505.387726] name failslab, interval 1, probability 0, space 0, times 0 [ 505.389235] CPU: 1 PID: 5459 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 505.390033] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 505.391238] Call Trace: [ 505.391640] dump_stack+0x107/0x167 [ 505.392058] should_fail.cold+0x5/0xa [ 505.392498] ? vm_area_dup+0x78/0x290 [ 505.392935] should_failslab+0x5/0x20 [ 505.393373] kmem_cache_alloc+0x5b/0x310 [ 505.393848] vm_area_dup+0x78/0x290 [ 505.394271] ? __lockdep_reset_lock+0x180/0x180 [ 505.394805] ? mark_lock+0xf5/0x2df0 [ 505.395233] ? lock_acquire+0x197/0x470 [ 505.395688] ? lock_chain_count+0x20/0x20 [ 505.396169] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 505.396705] ? lock_downgrade+0x6d0/0x6d0 [ 505.397182] ? lock_chain_count+0x20/0x20 [ 505.397660] ? vm_area_alloc+0x110/0x110 [ 505.398132] ? __lock_acquire+0x1657/0x5b00 [ 505.398638] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 505.399241] ? vmacache_find+0x55/0x2a0 [ 505.399695] __split_vma+0xa8/0x4e0 [ 505.400113] __do_munmap+0xfae/0x1260 [ 505.400546] ? arch_get_unmapped_area+0x450/0x450 [ 505.401099] ? lock_release+0x680/0x680 [ 505.401550] mmap_region+0x7cc/0x1500 [ 505.402004] do_mmap+0x868/0x1370 [ 505.402407] vm_mmap_pgoff+0x198/0x1f0 [ 505.402858] ? randomize_page+0xb0/0xb0 [ 505.403322] ksys_mmap_pgoff+0x41c/0x560 [ 505.403790] ? find_mergeable_anon_vma+0x250/0x250 [ 505.404347] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 505.404948] ? syscall_enter_from_user_mode+0x1d/0x50 [ 505.405537] do_syscall_64+0x33/0x40 [ 505.405972] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 505.406558] RIP: 0033:0x7f4f1acf2b19 [ 505.406984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 505.409102] RSP: 002b:00007f4f18268188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 505.409982] RAX: ffffffffffffffda RBX: 00007f4f1ae05f60 RCX: 00007f4f1acf2b19 [ 505.410798] RDX: 000000000100000e RSI: 0000000000004000 RDI: 0000000020ffc000 [ 505.411617] RBP: 00007f4f182681d0 R08: 0000000000000003 R09: 0000000000000000 [ 505.412431] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 505.413248] R13: 00007ffc63ceb11f R14: 00007f4f18268300 R15: 0000000000022000 [ 505.451427] FAULT_INJECTION: forcing a failure. [ 505.451427] name failslab, interval 1, probability 0, space 0, times 0 [ 505.453068] CPU: 1 PID: 5462 Comm: syz-executor.4 Not tainted 5.10.258 #1 [ 505.454087] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 505.455218] Call Trace: [ 505.455526] dump_stack+0x107/0x167 [ 505.455941] should_fail.cold+0x5/0xa [ 505.456377] ? create_object.isra.0+0x3a/0xa30 [ 505.456899] should_failslab+0x5/0x20 [ 505.457335] kmem_cache_alloc+0x5b/0x310 [ 505.457812] create_object.isra.0+0x3a/0xa30 [ 505.458315] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 505.458891] kmem_cache_alloc+0x159/0x310 [ 505.459368] vm_area_alloc+0x1c/0x110 [ 505.459807] mmap_region+0x982/0x1500 [ 505.460254] do_mmap+0x868/0x1370 [ 505.460657] vm_mmap_pgoff+0x198/0x1f0 [ 505.461108] ? randomize_page+0xb0/0xb0 [ 505.461573] ksys_mmap_pgoff+0x41c/0x560 [ 505.462041] ? find_mergeable_anon_vma+0x250/0x250 [ 505.462612] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 505.463206] ? syscall_enter_from_user_mode+0x1d/0x50 [ 505.463800] do_syscall_64+0x33/0x40 [ 505.464218] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 505.464801] RIP: 0033:0x7f759e56fb19 [ 505.465220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 505.467344] RSP: 002b:00007f759bae5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 505.468205] RAX: ffffffffffffffda RBX: 00007f759e682f60 RCX: 00007f759e56fb19 [ 505.469018] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 505.469824] RBP: 00007f759bae51d0 R08: 0000000000000004 R09: 0000000000000000 [ 505.470628] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 505.471433] R13: 00007ffd92e6b2ef R14: 00007f759bae5300 R15: 0000000000022000 18:05:27 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 15) 18:05:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) [ 505.544668] FAULT_INJECTION: forcing a failure. [ 505.544668] name failslab, interval 1, probability 0, space 0, times 0 [ 505.547135] CPU: 0 PID: 5465 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 505.548562] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 505.550282] Call Trace: [ 505.550838] dump_stack+0x107/0x167 [ 505.551597] should_fail.cold+0x5/0xa [ 505.552399] ? create_object.isra.0+0x3a/0xa30 [ 505.553357] should_failslab+0x5/0x20 [ 505.554164] kmem_cache_alloc+0x5b/0x310 [ 505.555010] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 505.556257] create_object.isra.0+0x3a/0xa30 [ 505.557165] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 505.558229] kmem_cache_alloc_trace+0x151/0x320 [ 505.559206] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 505.560335] io_uring_setup+0x14f6/0x2980 [ 505.561206] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 505.562265] ? wait_for_completion_io+0x270/0x270 [ 505.563282] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 505.564371] ? syscall_enter_from_user_mode+0x1d/0x50 [ 505.565439] do_syscall_64+0x33/0x40 [ 505.566229] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 505.567294] RIP: 0033:0x7f722f48db19 [ 505.568057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 505.571835] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 505.573395] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 505.574867] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 505.576332] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 505.577800] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 505.579258] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:05:41 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) (fail_nth: 2) 18:05:41 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 16) 18:05:41 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) (fail_nth: 5) 18:05:41 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) 18:05:41 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0xc02c2, 0x59) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:05:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:05:41 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:05:41 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) [ 519.277995] FAULT_INJECTION: forcing a failure. [ 519.277995] name failslab, interval 1, probability 0, space 0, times 0 [ 519.279338] CPU: 0 PID: 5474 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 519.280142] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 519.281118] Call Trace: [ 519.281432] dump_stack+0x107/0x167 [ 519.281871] should_fail.cold+0x5/0xa [ 519.282322] ? create_object.isra.0+0x3a/0xa30 [ 519.282859] should_failslab+0x5/0x20 [ 519.283303] kmem_cache_alloc+0x5b/0x310 [ 519.283781] create_object.isra.0+0x3a/0xa30 [ 519.284297] kmemleak_alloc_percpu+0xa0/0x100 [ 519.284822] pcpu_alloc+0x4e2/0x1240 [ 519.285266] ? io_async_queue_proc+0x80/0x80 [ 519.285789] percpu_ref_init+0x31/0x3d0 [ 519.286262] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 519.286892] io_uring_setup+0x14f6/0x2980 [ 519.287379] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 519.287967] ? wait_for_completion_io+0x270/0x270 [ 519.288540] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 519.289151] ? syscall_enter_from_user_mode+0x1d/0x50 [ 519.289756] do_syscall_64+0x33/0x40 [ 519.290202] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 519.290799] RIP: 0033:0x7f722f48db19 [ 519.291237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 519.293379] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 519.294281] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 519.295115] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 519.295947] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 519.296772] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 519.297611] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 519.305203] FAULT_INJECTION: forcing a failure. [ 519.305203] name failslab, interval 1, probability 0, space 0, times 0 [ 519.307856] CPU: 1 PID: 5485 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 519.309415] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 519.311318] Call Trace: [ 519.311921] dump_stack+0x107/0x167 [ 519.312759] should_fail.cold+0x5/0xa [ 519.313635] ? create_object.isra.0+0x3a/0xa30 [ 519.314686] should_failslab+0x5/0x20 [ 519.315557] kmem_cache_alloc+0x5b/0x310 [ 519.316500] create_object.isra.0+0x3a/0xa30 [ 519.317503] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 519.318689] kmem_cache_alloc+0x159/0x310 [ 519.319647] vm_area_dup+0x78/0x290 [ 519.320487] ? __lockdep_reset_lock+0x180/0x180 [ 519.321555] ? mark_lock+0xf5/0x2df0 [ 519.322426] ? lock_acquire+0x197/0x470 [ 519.323338] ? lock_chain_count+0x20/0x20 [ 519.324295] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 519.325361] ? lock_downgrade+0x6d0/0x6d0 [ 519.326334] ? lock_chain_count+0x20/0x20 [ 519.327294] ? vm_area_alloc+0x110/0x110 [ 519.328233] ? __lock_acquire+0x1657/0x5b00 [ 519.329243] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 519.330454] ? vmacache_find+0x55/0x2a0 [ 519.331367] __split_vma+0xa8/0x4e0 [ 519.332206] __do_munmap+0xfae/0x1260 [ 519.333080] ? arch_get_unmapped_area+0x450/0x450 [ 519.334201] ? lock_release+0x680/0x680 [ 519.335115] mmap_region+0x7cc/0x1500 [ 519.336006] do_mmap+0x868/0x1370 [ 519.336817] vm_mmap_pgoff+0x198/0x1f0 [ 519.337717] ? randomize_page+0xb0/0xb0 [ 519.338659] ksys_mmap_pgoff+0x41c/0x560 [ 519.339599] ? find_mergeable_anon_vma+0x250/0x250 [ 519.340733] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 519.341953] ? syscall_enter_from_user_mode+0x1d/0x50 [ 519.343145] do_syscall_64+0x33/0x40 [ 519.344005] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 519.345186] RIP: 0033:0x7f4f1acf2b19 [ 519.346053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 519.350302] RSP: 002b:00007f4f18268188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 519.352055] RAX: ffffffffffffffda RBX: 00007f4f1ae05f60 RCX: 00007f4f1acf2b19 [ 519.353703] RDX: 000000000100000e RSI: 0000000000004000 RDI: 0000000020ffc000 [ 519.355357] RBP: 00007f4f182681d0 R08: 0000000000000003 R09: 0000000000000000 [ 519.357007] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 519.358663] R13: 00007ffc63ceb11f R14: 00007f4f18268300 R15: 0000000000022000 18:05:41 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) 18:05:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:05:41 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 17) 18:05:41 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0xc02c2, 0x59) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) [ 519.424923] FAULT_INJECTION: forcing a failure. [ 519.424923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.426606] CPU: 0 PID: 5484 Comm: syz-executor.4 Not tainted 5.10.258 #1 [ 519.427417] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 519.428391] Call Trace: [ 519.428707] dump_stack+0x107/0x167 [ 519.429141] should_fail.cold+0x5/0xa [ 519.429598] _copy_to_user+0x2e/0x180 [ 519.430063] simple_read_from_buffer+0xcc/0x160 [ 519.430619] proc_fail_nth_read+0x198/0x230 [ 519.431150] ? proc_sessionid_read+0x230/0x230 [ 519.431692] ? security_file_permission+0xb1/0xe0 [ 519.432268] ? proc_sessionid_read+0x230/0x230 [ 519.432811] vfs_read+0x228/0x620 [ 519.433223] ksys_read+0x12d/0x260 [ 519.433640] ? vfs_write+0xb10/0xb10 [ 519.434097] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 519.434725] ? syscall_enter_from_user_mode+0x1d/0x50 [ 519.435349] do_syscall_64+0x33/0x40 [ 519.435791] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 519.436394] RIP: 0033:0x7f759e52269c [ 519.436835] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 519.439030] RSP: 002b:00007f759bae5170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 519.439928] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 00007f759e52269c [ 519.440771] RDX: 000000000000000f RSI: 00007f759bae51e0 RDI: 0000000000000005 [ 519.441618] RBP: 00007f759bae51d0 R08: 0000000000000000 R09: 0000000000000000 [ 519.442473] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 519.443320] R13: 00007ffd92e6b2ef R14: 00007f759bae5300 R15: 0000000000022000 18:05:41 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:05:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:05:41 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) [ 519.501690] FAULT_INJECTION: forcing a failure. [ 519.501690] name failslab, interval 1, probability 0, space 0, times 0 [ 519.503240] CPU: 0 PID: 5493 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 519.504050] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 519.505039] Call Trace: [ 519.505354] dump_stack+0x107/0x167 [ 519.505788] should_fail.cold+0x5/0xa [ 519.506255] ? create_object.isra.0+0x3a/0xa30 [ 519.506793] should_failslab+0x5/0x20 [ 519.507239] kmem_cache_alloc+0x5b/0x310 [ 519.507725] create_object.isra.0+0x3a/0xa30 [ 519.508249] kmemleak_alloc_percpu+0xa0/0x100 [ 519.508778] pcpu_alloc+0x4e2/0x1240 [ 519.509225] ? io_async_queue_proc+0x80/0x80 [ 519.509745] percpu_ref_init+0x31/0x3d0 [ 519.510225] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 519.510869] io_uring_setup+0x14f6/0x2980 [ 519.511366] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 519.511966] ? wait_for_completion_io+0x270/0x270 [ 519.512535] ? perf_trace_preemptirq_template+0x26d/0x400 [ 519.513177] ? perf_trace_preemptirq_template+0x26d/0x400 [ 519.513835] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 519.514468] ? syscall_enter_from_user_mode+0x1d/0x50 [ 519.515081] do_syscall_64+0x33/0x40 [ 519.515524] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 519.516123] RIP: 0033:0x7f722f48db19 [ 519.516565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 519.518744] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 519.519827] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 519.520638] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 519.521452] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 519.522271] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 519.523079] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:05:41 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r1 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:05:56 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r1 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:05:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:05:56 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r1 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:05:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) 18:05:56 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) (fail_nth: 3) 18:05:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 18:05:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x59) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:05:56 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 18) [ 534.381870] FAULT_INJECTION: forcing a failure. [ 534.381870] name failslab, interval 1, probability 0, space 0, times 0 [ 534.384495] CPU: 1 PID: 5522 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 534.386062] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 534.387999] Call Trace: [ 534.388818] dump_stack+0x107/0x167 [ 534.389661] should_fail.cold+0x5/0xa [ 534.390564] ? percpu_ref_init+0xd8/0x3d0 [ 534.391527] should_failslab+0x5/0x20 [ 534.392359] kmem_cache_alloc_trace+0x55/0x320 [ 534.393279] ? io_async_queue_proc+0x80/0x80 [ 534.394164] percpu_ref_init+0xd8/0x3d0 [ 534.394964] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 534.396044] io_uring_setup+0x14f6/0x2980 [ 534.396874] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 534.397879] ? wait_for_completion_io+0x270/0x270 [ 534.398854] ? perf_trace_preemptirq_template+0x26d/0x400 [ 534.399970] ? perf_trace_preemptirq_template+0x26d/0x400 [ 534.401113] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 534.402180] ? syscall_enter_from_user_mode+0x1d/0x50 [ 534.403218] do_syscall_64+0x33/0x40 [ 534.403971] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 534.404991] RIP: 0033:0x7f722f48db19 [ 534.405745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 534.409482] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 534.411029] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 534.412481] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 534.413932] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 534.415365] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 534.416823] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:05:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) [ 534.434078] FAULT_INJECTION: forcing a failure. [ 534.434078] name failslab, interval 1, probability 0, space 0, times 0 [ 534.436443] CPU: 1 PID: 5520 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 534.437805] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 534.439469] Call Trace: [ 534.439994] dump_stack+0x107/0x167 [ 534.440726] should_fail.cold+0x5/0xa [ 534.441494] ? vm_area_alloc+0x1c/0x110 [ 534.442299] should_failslab+0x5/0x20 [ 534.443060] kmem_cache_alloc+0x5b/0x310 [ 534.443889] vm_area_alloc+0x1c/0x110 [ 534.444643] mmap_region+0x982/0x1500 [ 534.445425] do_mmap+0x868/0x1370 [ 534.446138] vm_mmap_pgoff+0x198/0x1f0 [ 534.446926] ? randomize_page+0xb0/0xb0 [ 534.447731] ksys_mmap_pgoff+0x41c/0x560 [ 534.448539] ? find_mergeable_anon_vma+0x250/0x250 [ 534.449514] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 534.450567] ? syscall_enter_from_user_mode+0x1d/0x50 [ 534.451600] do_syscall_64+0x33/0x40 [ 534.452342] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 534.453368] RIP: 0033:0x7f4f1acf2b19 [ 534.454109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 534.457767] RSP: 002b:00007f4f18268188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 534.459306] RAX: ffffffffffffffda RBX: 00007f4f1ae05f60 RCX: 00007f4f1acf2b19 [ 534.460729] RDX: 000000000100000e RSI: 0000000000004000 RDI: 0000000020ffc000 [ 534.462152] RBP: 00007f4f182681d0 R08: 0000000000000003 R09: 0000000000000000 [ 534.463571] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 534.465001] R13: 00007ffc63ceb11f R14: 00007f4f18268300 R15: 0000000000022000 18:05:56 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) (fail_nth: 4) 18:05:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4004, 0x0, 0x13, r0, 0x0) 18:05:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:05:56 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 19) [ 534.585239] FAULT_INJECTION: forcing a failure. [ 534.585239] name failslab, interval 1, probability 0, space 0, times 0 [ 534.587606] CPU: 1 PID: 5529 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 534.588965] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 534.590612] Call Trace: [ 534.591147] dump_stack+0x107/0x167 [ 534.591889] should_fail.cold+0x5/0xa [ 534.592664] ? create_object.isra.0+0x3a/0xa30 [ 534.593572] should_failslab+0x5/0x20 [ 534.594324] kmem_cache_alloc+0x5b/0x310 [ 534.595120] create_object.isra.0+0x3a/0xa30 [ 534.595982] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 534.596984] kmem_cache_alloc+0x159/0x310 [ 534.597803] vm_area_alloc+0x1c/0x110 [ 534.598555] mmap_region+0x982/0x1500 [ 534.599310] do_mmap+0x868/0x1370 [ 534.600005] vm_mmap_pgoff+0x198/0x1f0 [ 534.600771] ? randomize_page+0xb0/0xb0 [ 534.601553] ksys_mmap_pgoff+0x41c/0x560 [ 534.602346] ? find_mergeable_anon_vma+0x250/0x250 [ 534.603308] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 534.604330] ? syscall_enter_from_user_mode+0x1d/0x50 [ 534.605335] do_syscall_64+0x33/0x40 [ 534.606064] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 534.607063] RIP: 0033:0x7f4f1acf2b19 [ 534.607790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 534.611411] RSP: 002b:00007f4f18268188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 534.612888] RAX: ffffffffffffffda RBX: 00007f4f1ae05f60 RCX: 00007f4f1acf2b19 [ 534.614296] RDX: 000000000100000e RSI: 0000000000004000 RDI: 0000000020ffc000 [ 534.615692] RBP: 00007f4f182681d0 R08: 0000000000000003 R09: 0000000000000000 [ 534.617090] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 534.618486] R13: 00007ffc63ceb11f R14: 00007f4f18268300 R15: 0000000000022000 [ 534.667687] FAULT_INJECTION: forcing a failure. [ 534.667687] name failslab, interval 1, probability 0, space 0, times 0 [ 534.670071] CPU: 0 PID: 5536 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 534.671508] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 534.673260] Call Trace: [ 534.673823] dump_stack+0x107/0x167 [ 534.674600] should_fail.cold+0x5/0xa [ 534.675399] ? create_object.isra.0+0x3a/0xa30 [ 534.676364] should_failslab+0x5/0x20 [ 534.677167] kmem_cache_alloc+0x5b/0x310 [ 534.678037] create_object.isra.0+0x3a/0xa30 [ 534.678965] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 534.680040] kmem_cache_alloc_trace+0x151/0x320 [ 534.681033] ? io_async_queue_proc+0x80/0x80 [ 534.681971] percpu_ref_init+0xd8/0x3d0 [ 534.682820] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 534.683971] io_uring_setup+0x14f6/0x2980 [ 534.684853] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 534.685926] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 534.687052] ? io_is_uring_fops+0x40/0x40 [ 534.687942] do_syscall_64+0x33/0x40 [ 534.688731] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 534.689812] RIP: 0033:0x7f722f48db19 [ 534.690610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 534.694527] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 534.696144] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 534.697652] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 534.699176] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 534.700683] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 534.702214] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:05:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x100000, 0x0, 0x13, r0, 0x0) 18:05:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) 18:05:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:06:11 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) (fail_nth: 5) 18:06:11 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 20) 18:06:11 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x0, 0x13, r0, 0x0) 18:06:11 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r1 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:06:11 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) 18:06:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x59) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:06:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 18:06:11 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r1 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) [ 550.108031] FAULT_INJECTION: forcing a failure. [ 550.108031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.110595] CPU: 0 PID: 5559 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 550.112043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 550.113808] Call Trace: [ 550.114383] dump_stack+0x107/0x167 [ 550.115160] should_fail.cold+0x5/0xa [ 550.115968] _copy_to_user+0x2e/0x180 [ 550.116778] io_uring_setup+0x11b5/0x2980 [ 550.117666] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 550.118740] ? wait_for_completion_io+0x270/0x270 [ 550.119760] ? perf_trace_preemptirq_template+0x26d/0x400 [ 550.120919] ? perf_trace_preemptirq_template+0x26d/0x400 [ 550.122100] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 550.123218] ? syscall_enter_from_user_mode+0x1d/0x50 [ 550.123294] FAULT_INJECTION: forcing a failure. [ 550.123294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.124312] do_syscall_64+0x33/0x40 [ 550.124332] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 550.124352] RIP: 0033:0x7f722f48db19 [ 550.129427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 550.133347] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 550.134962] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 550.136461] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 550.137965] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 550.139474] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 550.140977] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 550.142513] CPU: 1 PID: 5561 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 550.143959] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 550.145696] Call Trace: [ 550.146262] dump_stack+0x107/0x167 [ 550.147036] should_fail.cold+0x5/0xa [ 550.147855] _copy_to_user+0x2e/0x180 [ 550.148664] simple_read_from_buffer+0xcc/0x160 [ 550.149654] proc_fail_nth_read+0x198/0x230 [ 550.150573] ? proc_sessionid_read+0x230/0x230 [ 550.151540] ? security_file_permission+0xb1/0xe0 [ 550.152565] ? proc_sessionid_read+0x230/0x230 [ 550.153530] vfs_read+0x228/0x620 [ 550.154269] ksys_read+0x12d/0x260 [ 550.155017] ? vfs_write+0xb10/0xb10 [ 550.155821] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 550.156926] ? syscall_enter_from_user_mode+0x1d/0x50 [ 550.158024] do_syscall_64+0x33/0x40 [ 550.158818] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 550.159905] RIP: 0033:0x7f4f1aca569c [ 550.160676] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 550.164545] RSP: 002b:00007f4f18268170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 550.166138] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 00007f4f1aca569c [ 550.167658] RDX: 000000000000000f RSI: 00007f4f182681e0 RDI: 0000000000000004 [ 550.169152] RBP: 00007f4f182681d0 R08: 0000000000000000 R09: 0000000000000000 [ 550.170653] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 550.172141] R13: 00007ffc63ceb11f R14: 00007f4f18268300 R15: 0000000000022000 18:06:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 18:06:12 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) 18:06:12 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:06:12 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x7ffffffff000, 0x0, 0x13, r0, 0x0) 18:06:12 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 21) [ 550.413848] FAULT_INJECTION: forcing a failure. [ 550.413848] name failslab, interval 1, probability 0, space 0, times 0 [ 550.416236] CPU: 1 PID: 5575 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 550.417682] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 550.419432] Call Trace: [ 550.419985] dump_stack+0x107/0x167 [ 550.420755] should_fail.cold+0x5/0xa [ 550.421566] ? __d_alloc+0x2a/0x990 [ 550.422337] should_failslab+0x5/0x20 [ 550.423138] kmem_cache_alloc+0x5b/0x310 [ 550.423989] __d_alloc+0x2a/0x990 [ 550.424717] ? find_held_lock+0x2c/0x110 [ 550.425574] d_alloc_pseudo+0x19/0x70 [ 550.426380] alloc_file_pseudo+0xce/0x250 [ 550.427239] ? trace_hardirqs_on+0x5b/0x180 [ 550.428145] ? alloc_file+0x5a0/0x5a0 [ 550.428959] anon_inode_getfile+0xc8/0x1f0 [ 550.429845] io_uring_setup+0x138b/0x2980 [ 550.430756] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 550.431810] ? wait_for_completion_io+0x270/0x270 [ 550.432820] ? perf_trace_preemptirq_template+0x26d/0x400 [ 550.433970] ? perf_trace_preemptirq_template+0x26d/0x400 [ 550.435159] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 550.436258] ? syscall_enter_from_user_mode+0x1d/0x50 [ 550.437333] do_syscall_64+0x33/0x40 [ 550.438112] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 550.439191] RIP: 0033:0x7f722f48db19 [ 550.439963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 550.443807] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 550.445397] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 550.446899] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 550.448392] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 550.449888] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 550.451382] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:06:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 18:06:12 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) 18:06:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x59) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:06:12 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4002, 0x100000e, 0x13, r0, 0x0) 18:06:12 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x13, r0, 0x0) 18:06:26 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 22) 18:06:26 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r1 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:06:26 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:06:26 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4004, 0x100000e, 0x13, r0, 0x0) 18:06:26 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x13, r0, 0x0) 18:06:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:06:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) [ 564.400805] FAULT_INJECTION: forcing a failure. [ 564.400805] name failslab, interval 1, probability 0, space 0, times 0 [ 564.403613] CPU: 1 PID: 5607 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 564.405222] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 564.407270] Call Trace: [ 564.407993] dump_stack+0x107/0x167 [ 564.408847] should_fail.cold+0x5/0xa [ 564.409741] ? create_object.isra.0+0x3a/0xa30 [ 564.410843] should_failslab+0x5/0x20 [ 564.411736] kmem_cache_alloc+0x5b/0x310 [ 564.412700] create_object.isra.0+0x3a/0xa30 [ 564.413725] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 564.414943] kmem_cache_alloc+0x159/0x310 [ 564.415913] __d_alloc+0x2a/0x990 [ 564.416726] ? find_held_lock+0x2c/0x110 [ 564.417684] d_alloc_pseudo+0x19/0x70 [ 564.418599] alloc_file_pseudo+0xce/0x250 [ 564.419571] ? trace_hardirqs_on+0x5b/0x180 [ 564.420575] ? alloc_file+0x5a0/0x5a0 [ 564.421485] anon_inode_getfile+0xc8/0x1f0 [ 564.422509] io_uring_setup+0x138b/0x2980 [ 564.423491] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 564.424670] ? wait_for_completion_io+0x270/0x270 [ 564.425791] ? perf_trace_preemptirq_template+0x26d/0x400 [ 564.427092] ? perf_trace_preemptirq_template+0x26d/0x400 [ 564.428405] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 564.429628] ? syscall_enter_from_user_mode+0x1d/0x50 [ 564.430871] do_syscall_64+0x33/0x40 [ 564.431742] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 564.432933] RIP: 0033:0x7f722f48db19 [ 564.433822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 564.438165] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 564.439991] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 564.441660] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 564.443370] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 564.445029] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 564.446746] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:06:26 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x100000, 0x100000e, 0x13, r0, 0x0) 18:06:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) 18:06:26 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 23) 18:06:26 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x100000e, 0x13, r0, 0x0) 18:06:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) [ 564.647170] FAULT_INJECTION: forcing a failure. [ 564.647170] name failslab, interval 1, probability 0, space 0, times 0 [ 564.649577] CPU: 1 PID: 5619 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 564.651051] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 564.652803] Call Trace: [ 564.653363] dump_stack+0x107/0x167 [ 564.654137] should_fail.cold+0x5/0xa [ 564.654975] ? __alloc_file+0x21/0x320 [ 564.655800] should_failslab+0x5/0x20 [ 564.656612] kmem_cache_alloc+0x5b/0x310 [ 564.657479] __alloc_file+0x21/0x320 [ 564.658263] alloc_empty_file+0x6d/0x170 [ 564.659148] alloc_file+0x5e/0x5a0 [ 564.659902] alloc_file_pseudo+0x16a/0x250 [ 564.660794] ? alloc_file+0x5a0/0x5a0 [ 564.661612] anon_inode_getfile+0xc8/0x1f0 [ 564.662536] io_uring_setup+0x138b/0x2980 [ 564.663420] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 564.664487] ? wait_for_completion_io+0x270/0x270 [ 564.665527] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 564.666659] ? syscall_enter_from_user_mode+0x1d/0x50 [ 564.667750] do_syscall_64+0x33/0x40 [ 564.668535] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 564.669612] RIP: 0033:0x7f722f48db19 [ 564.670423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 564.674651] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 564.676470] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 564.678172] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 564.679902] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 564.681607] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 564.683344] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:06:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(0x0, 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:06:26 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x7ffffffff000, 0x100000e, 0x13, r0, 0x0) 18:06:26 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:06:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 1) 18:06:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(0x0, 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) [ 580.356962] FAULT_INJECTION: forcing a failure. [ 580.356962] name failslab, interval 1, probability 0, space 0, times 0 [ 580.360656] CPU: 1 PID: 5640 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 580.362571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 580.364870] Call Trace: [ 580.365614] dump_stack+0x107/0x167 [ 580.366636] should_fail.cold+0x5/0xa [ 580.367696] ? create_object.isra.0+0x3a/0xa30 [ 580.368958] should_failslab+0x5/0x20 18:06:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 18:06:42 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 24) 18:06:42 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x13, r0, 0x0) 18:06:42 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:06:42 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:06:42 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x10, 0x13, r0, 0x0) [ 580.370019] kmem_cache_alloc+0x5b/0x310 [ 580.371529] create_object.isra.0+0x3a/0xa30 [ 580.372748] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 580.374160] kmem_cache_alloc+0x159/0x310 [ 580.375333] __alloc_file+0x21/0x320 [ 580.376355] alloc_empty_file+0x6d/0x170 [ 580.377464] alloc_file+0x5e/0x5a0 [ 580.378442] alloc_file_pseudo+0x16a/0x250 [ 580.379609] ? alloc_file+0x5a0/0x5a0 [ 580.380671] anon_inode_getfile+0xc8/0x1f0 [ 580.381835] io_uring_setup+0x138b/0x2980 [ 580.383005] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 580.384386] ? wait_for_completion_io+0x270/0x270 [ 580.385728] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 580.387173] ? syscall_enter_from_user_mode+0x1d/0x50 [ 580.388587] do_syscall_64+0x33/0x40 [ 580.389607] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 580.391010] RIP: 0033:0x7f722f48db19 [ 580.392028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 580.396997] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 580.399067] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 580.401006] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 580.402913] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 580.404563] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 580.406221] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 580.419000] FAULT_INJECTION: forcing a failure. [ 580.419000] name failslab, interval 1, probability 0, space 0, times 0 [ 580.421664] CPU: 1 PID: 5637 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 580.423271] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 580.425204] Call Trace: [ 580.425839] dump_stack+0x107/0x167 [ 580.426722] should_fail.cold+0x5/0xa [ 580.427641] ? alloc_pipe_info+0x10a/0x590 [ 580.428653] should_failslab+0x5/0x20 [ 580.429576] kmem_cache_alloc_trace+0x55/0x320 [ 580.430698] alloc_pipe_info+0x10a/0x590 [ 580.431678] splice_direct_to_actor+0x774/0x980 [ 580.432786] ? _cond_resched+0x10/0x30 [ 580.433705] ? inode_security+0x107/0x140 [ 580.434709] ? pipe_to_sendpage+0x380/0x380 [ 580.435727] ? avc_policy_seqno+0x9/0x70 [ 580.436689] ? selinux_file_permission+0x92/0x520 [ 580.437814] ? do_splice_to+0x160/0x160 [ 580.438762] ? security_file_permission+0xb1/0xe0 [ 580.440114] do_splice_direct+0x1c4/0x290 [ 580.441091] ? splice_direct_to_actor+0x980/0x980 [ 580.442218] ? avc_policy_seqno+0x9/0x70 [ 580.443195] ? security_file_permission+0xb1/0xe0 [ 580.444326] do_sendfile+0x553/0x11e0 [ 580.445226] ? do_pwritev+0x270/0x270 [ 580.446122] ? wait_for_completion_io+0x270/0x270 [ 580.447267] ? rcu_read_lock_any_held+0x75/0xa0 [ 580.448343] ? vfs_write+0x354/0xb10 [ 580.449234] __x64_sys_sendfile64+0x1d1/0x210 [ 580.450281] ? __ia32_sys_sendfile+0x220/0x220 [ 580.451366] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 580.452524] ? syscall_enter_from_user_mode+0x1d/0x50 [ 580.453615] do_syscall_64+0x33/0x40 [ 580.454592] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 580.455687] RIP: 0033:0x7fab802e1b19 [ 580.456647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 580.460482] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 580.462450] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 580.463969] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 580.465470] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 580.466982] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 580.468478] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 18:06:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 18:06:42 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 25) 18:06:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 2) [ 580.608327] FAULT_INJECTION: forcing a failure. [ 580.608327] name failslab, interval 1, probability 0, space 0, times 0 18:06:42 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x2) [ 580.611273] CPU: 0 PID: 5661 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 580.613114] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 580.615078] Call Trace: [ 580.615709] dump_stack+0x107/0x167 [ 580.616567] should_fail.cold+0x5/0xa [ 580.617462] ? security_file_alloc+0x34/0x170 [ 580.618526] should_failslab+0x5/0x20 [ 580.619435] kmem_cache_alloc+0x5b/0x310 [ 580.620418] security_file_alloc+0x34/0x170 [ 580.621440] __alloc_file+0xb7/0x320 [ 580.622322] alloc_empty_file+0x6d/0x170 [ 580.623288] alloc_file+0x5e/0x5a0 [ 580.624126] alloc_file_pseudo+0x16a/0x250 [ 580.625120] ? alloc_file+0x5a0/0x5a0 [ 580.626031] anon_inode_getfile+0xc8/0x1f0 [ 580.627033] io_uring_setup+0x138b/0x2980 [ 580.628033] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 580.629219] ? wait_for_completion_io+0x270/0x270 [ 580.630271] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 580.631512] ? syscall_enter_from_user_mode+0x1d/0x50 [ 580.632527] do_syscall_64+0x33/0x40 [ 580.633254] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 580.634253] RIP: 0033:0x7f722f48db19 [ 580.634996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 580.638586] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 580.640067] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 580.641450] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 580.642846] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 580.644245] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 580.645639] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 580.657255] FAULT_INJECTION: forcing a failure. [ 580.657255] name failslab, interval 1, probability 0, space 0, times 0 [ 580.659690] CPU: 0 PID: 5660 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 580.661075] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 580.662688] Call Trace: [ 580.663205] dump_stack+0x107/0x167 [ 580.663912] should_fail.cold+0x5/0xa [ 580.664659] ? create_object.isra.0+0x3a/0xa30 [ 580.665544] should_failslab+0x5/0x20 [ 580.666284] kmem_cache_alloc+0x5b/0x310 [ 580.667088] create_object.isra.0+0x3a/0xa30 [ 580.667945] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 580.668943] kmem_cache_alloc_trace+0x151/0x320 [ 580.669835] alloc_pipe_info+0x10a/0x590 [ 580.670797] splice_direct_to_actor+0x774/0x980 [ 580.671861] ? _cond_resched+0x10/0x30 [ 580.672754] ? inode_security+0x107/0x140 [ 580.673708] ? pipe_to_sendpage+0x380/0x380 [ 580.674717] ? avc_policy_seqno+0x9/0x70 [ 580.675649] ? selinux_file_permission+0x92/0x520 [ 580.676755] ? do_splice_to+0x160/0x160 [ 580.677668] ? security_file_permission+0xb1/0xe0 [ 580.678804] do_splice_direct+0x1c4/0x290 [ 580.679608] ? splice_direct_to_actor+0x980/0x980 [ 580.680707] ? avc_policy_seqno+0x9/0x70 [ 580.681503] ? security_file_permission+0xb1/0xe0 [ 580.682633] do_sendfile+0x553/0x11e0 [ 580.683372] ? do_pwritev+0x270/0x270 [ 580.684107] ? wait_for_completion_io+0x270/0x270 [ 580.685046] ? rcu_read_lock_any_held+0x75/0xa0 [ 580.685932] ? vfs_write+0x354/0xb10 [ 580.686675] __x64_sys_sendfile64+0x1d1/0x210 [ 580.687534] ? __ia32_sys_sendfile+0x220/0x220 [ 580.688413] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 580.689421] ? syscall_enter_from_user_mode+0x1d/0x50 [ 580.690424] do_syscall_64+0x33/0x40 [ 580.691153] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 580.692126] RIP: 0033:0x7fab802e1b19 [ 580.692829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 580.696290] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 580.698028] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 580.699650] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 580.701262] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 580.702890] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 580.704507] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 18:06:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 18:06:42 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x60, 0x13, r0, 0x0) 18:06:42 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x4) 18:06:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(0x0, 0x1811c1, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:06:42 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 26) [ 580.957825] FAULT_INJECTION: forcing a failure. [ 580.957825] name failslab, interval 1, probability 0, space 0, times 0 [ 580.959882] CPU: 0 PID: 5675 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 580.961004] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 580.962297] Call Trace: [ 580.962719] dump_stack+0x107/0x167 [ 580.963289] should_fail.cold+0x5/0xa [ 580.963883] ? security_file_alloc+0x34/0x170 [ 580.964583] should_failslab+0x5/0x20 [ 580.965175] kmem_cache_alloc+0x5b/0x310 [ 580.965816] security_file_alloc+0x34/0x170 [ 580.966550] __alloc_file+0xb7/0x320 [ 580.967130] alloc_empty_file+0x6d/0x170 [ 580.967762] alloc_file+0x5e/0x5a0 [ 580.968323] alloc_file_pseudo+0x16a/0x250 [ 580.968983] ? alloc_file+0x5a0/0x5a0 [ 580.969599] anon_inode_getfile+0xc8/0x1f0 [ 580.970260] io_uring_setup+0x138b/0x2980 [ 580.970917] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 580.971708] ? wait_for_completion_io+0x270/0x270 [ 580.972561] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 580.973377] ? syscall_enter_from_user_mode+0x1d/0x50 [ 580.974173] do_syscall_64+0x33/0x40 [ 580.974761] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 580.975552] RIP: 0033:0x7f722f48db19 [ 580.976128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 580.978980] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 580.980153] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 580.981249] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 580.982342] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 580.983442] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 580.984540] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 594.470359] FAULT_INJECTION: forcing a failure. [ 594.470359] name failslab, interval 1, probability 0, space 0, times 0 18:06:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:06:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x13, r0, 0x0) 18:06:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 3) 18:06:56 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:06:56 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x8) 18:06:56 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 27) 18:06:56 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:06:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 1) [ 594.474020] CPU: 0 PID: 5691 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 594.475484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 594.477229] Call Trace: [ 594.477796] dump_stack+0x107/0x167 [ 594.478009] FAULT_INJECTION: forcing a failure. [ 594.478009] name failslab, interval 1, probability 0, space 0, times 0 [ 594.478572] should_fail.cold+0x5/0xa [ 594.478593] ? alloc_pipe_info+0x1e5/0x590 [ 594.478620] should_failslab+0x5/0x20 [ 594.483422] __kmalloc+0x72/0x390 [ 594.484154] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 594.485227] alloc_pipe_info+0x1e5/0x590 [ 594.486091] splice_direct_to_actor+0x774/0x980 [ 594.487096] ? _cond_resched+0x10/0x30 [ 594.487917] ? inode_security+0x107/0x140 [ 594.488788] ? pipe_to_sendpage+0x380/0x380 [ 594.489697] ? avc_policy_seqno+0x9/0x70 [ 594.490554] ? selinux_file_permission+0x92/0x520 [ 594.491580] ? do_splice_to+0x160/0x160 [ 594.492417] ? security_file_permission+0xb1/0xe0 [ 594.493444] do_splice_direct+0x1c4/0x290 [ 594.494318] ? splice_direct_to_actor+0x980/0x980 [ 594.495340] ? avc_policy_seqno+0x9/0x70 [ 594.496204] ? security_file_permission+0xb1/0xe0 [ 594.497231] do_sendfile+0x553/0x11e0 [ 594.498046] ? do_pwritev+0x270/0x270 [ 594.498858] ? wait_for_completion_io+0x270/0x270 [ 594.499895] ? rcu_read_lock_any_held+0x75/0xa0 [ 594.500867] ? vfs_write+0x354/0xb10 [ 594.501654] __x64_sys_sendfile64+0x1d1/0x210 [ 594.502598] ? __ia32_sys_sendfile+0x220/0x220 [ 594.503577] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 594.504680] ? syscall_enter_from_user_mode+0x1d/0x50 [ 594.505766] do_syscall_64+0x33/0x40 [ 594.506551] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 594.507639] RIP: 0033:0x7fab802e1b19 [ 594.508424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 594.512317] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 594.513926] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 594.515441] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 594.516948] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 594.518455] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 594.519973] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 [ 594.521526] CPU: 1 PID: 5695 Comm: syz-executor.1 Not tainted 5.10.258 #1 [ 594.523099] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 594.524854] Call Trace: [ 594.525419] dump_stack+0x107/0x167 [ 594.526413] should_fail.cold+0x5/0xa [ 594.527229] ? alloc_pipe_info+0x10a/0x590 [ 594.528115] should_failslab+0x5/0x20 [ 594.528921] kmem_cache_alloc_trace+0x55/0x320 [ 594.529887] alloc_pipe_info+0x10a/0x590 [ 594.531024] splice_direct_to_actor+0x774/0x980 [ 594.532070] ? _cond_resched+0x10/0x30 [ 594.532897] ? inode_security+0x107/0x140 [ 594.533771] ? pipe_to_sendpage+0x380/0x380 [ 594.534490] FAULT_INJECTION: forcing a failure. [ 594.534490] name failslab, interval 1, probability 0, space 0, times 0 [ 594.534701] ? avc_policy_seqno+0x9/0x70 [ 594.534726] ? selinux_file_permission+0x92/0x520 [ 594.538925] ? do_splice_to+0x160/0x160 [ 594.539769] ? security_file_permission+0xb1/0xe0 [ 594.540796] do_splice_direct+0x1c4/0x290 [ 594.541678] ? splice_direct_to_actor+0x980/0x980 [ 594.542702] ? avc_policy_seqno+0x9/0x70 [ 594.543570] ? security_file_permission+0xb1/0xe0 [ 594.544597] do_sendfile+0x553/0x11e0 [ 594.545414] ? do_pwritev+0x270/0x270 [ 594.546221] ? wait_for_completion_io+0x270/0x270 [ 594.547256] ? rcu_read_lock_any_held+0x75/0xa0 [ 594.548234] ? vfs_write+0x354/0xb10 [ 594.549036] __x64_sys_sendfile64+0x1d1/0x210 [ 594.549987] ? __ia32_sys_sendfile+0x220/0x220 [ 594.550974] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 594.552086] ? syscall_enter_from_user_mode+0x1d/0x50 [ 594.553185] do_syscall_64+0x33/0x40 [ 594.553975] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 594.555063] RIP: 0033:0x7ff83f8c6b19 [ 594.555861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 594.559773] RSP: 002b:00007ff83ce3c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 594.561383] RAX: ffffffffffffffda RBX: 00007ff83f9d9f60 RCX: 00007ff83f8c6b19 [ 594.562898] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 594.564404] RBP: 00007ff83ce3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 594.565916] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 594.567434] R13: 00007ffceba10c2f R14: 00007ff83ce3c300 R15: 0000000000022000 [ 594.568976] CPU: 0 PID: 5692 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 594.570588] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 594.572372] Call Trace: [ 594.572939] dump_stack+0x107/0x167 [ 594.573722] should_fail.cold+0x5/0xa [ 594.574537] ? io_uring_alloc_task_context+0x99/0x6a0 [ 594.575643] should_failslab+0x5/0x20 [ 594.576455] kmem_cache_alloc_trace+0x55/0x320 [ 594.577434] io_uring_alloc_task_context+0x99/0x6a0 [ 594.578498] ? io_import_iovec+0x1120/0x1120 [ 594.579447] ? lock_downgrade+0x6d0/0x6d0 [ 594.580326] ? do_raw_spin_lock+0x121/0x260 [ 594.581243] ? rwlock_bug.part.0+0x90/0x90 [ 594.582152] __io_uring_add_tctx_node+0x2c6/0x520 [ 594.583182] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 594.584299] ? alloc_fd+0x2e7/0x670 [ 594.585083] io_uring_setup+0x1fbb/0x2980 [ 594.585980] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 594.587064] ? wait_for_completion_io+0x270/0x270 [ 594.588111] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 594.589226] ? syscall_enter_from_user_mode+0x1d/0x50 [ 594.590329] do_syscall_64+0x33/0x40 [ 594.591137] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 594.592235] RIP: 0033:0x7f722f48db19 [ 594.593024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 594.596943] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 594.598565] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 594.600093] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 594.601612] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 594.603133] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 594.604651] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:06:56 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x10) 18:06:56 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 28) 18:06:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 4) [ 594.832224] FAULT_INJECTION: forcing a failure. [ 594.832224] name failslab, interval 1, probability 0, space 0, times 0 [ 594.834866] CPU: 0 PID: 5709 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 594.836404] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 594.838191] Call Trace: [ 594.838759] dump_stack+0x107/0x167 [ 594.839598] should_fail.cold+0x5/0xa [ 594.840411] ? create_object.isra.0+0x3a/0xa30 [ 594.841372] should_failslab+0x5/0x20 [ 594.842168] kmem_cache_alloc+0x5b/0x310 [ 594.843043] create_object.isra.0+0x3a/0xa30 [ 594.843968] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 594.845037] kmem_cache_alloc_trace+0x151/0x320 [ 594.846034] io_uring_alloc_task_context+0x99/0x6a0 [ 594.847130] ? io_import_iovec+0x1120/0x1120 [ 594.848100] ? lock_downgrade+0x6d0/0x6d0 [ 594.849018] ? do_raw_spin_lock+0x121/0x260 [ 594.849922] ? rwlock_bug.part.0+0x90/0x90 [ 594.850867] __io_uring_add_tctx_node+0x2c6/0x520 [ 594.851940] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 594.853063] ? alloc_fd+0x2e7/0x670 [ 594.853851] io_uring_setup+0x1fbb/0x2980 [ 594.854755] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 594.855890] ? wait_for_completion_io+0x270/0x270 [ 594.857029] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 594.858204] ? syscall_enter_from_user_mode+0x1d/0x50 [ 594.859413] do_syscall_64+0x33/0x40 [ 594.860226] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 594.861369] RIP: 0033:0x7f722f48db19 [ 594.862218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 594.866385] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 594.868061] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 594.869664] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 594.871300] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 594.872892] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 594.874506] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 594.877211] FAULT_INJECTION: forcing a failure. [ 594.877211] name failslab, interval 1, probability 0, space 0, times 0 [ 594.879836] CPU: 1 PID: 5708 Comm: syz-executor.3 Not tainted 5.10.258 #1 18:06:56 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x60) [ 594.881376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 594.883441] Call Trace: [ 594.884030] dump_stack+0x107/0x167 [ 594.884877] should_fail.cold+0x5/0xa [ 594.885860] ? create_object.isra.0+0x3a/0xa30 [ 594.886933] should_failslab+0x5/0x20 [ 594.887767] kmem_cache_alloc+0x5b/0x310 [ 594.888663] create_object.isra.0+0x3a/0xa30 [ 594.889621] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 594.890744] __kmalloc+0x16e/0x390 [ 594.891533] alloc_pipe_info+0x1e5/0x590 [ 594.892686] splice_direct_to_actor+0x774/0x980 [ 594.893714] ? _cond_resched+0x10/0x30 [ 594.894567] ? inode_security+0x107/0x140 [ 594.895484] ? pipe_to_sendpage+0x380/0x380 [ 594.896428] ? avc_policy_seqno+0x9/0x70 [ 594.897315] ? selinux_file_permission+0x92/0x520 [ 594.898368] ? do_splice_to+0x160/0x160 [ 594.899246] ? security_file_permission+0xb1/0xe0 [ 594.900349] do_splice_direct+0x1c4/0x290 [ 594.901293] ? splice_direct_to_actor+0x980/0x980 [ 594.902356] ? avc_policy_seqno+0x9/0x70 [ 594.903313] ? security_file_permission+0xb1/0xe0 [ 594.904426] do_sendfile+0x553/0x11e0 [ 594.905267] ? do_pwritev+0x270/0x270 [ 594.906105] ? wait_for_completion_io+0x270/0x270 [ 594.907234] ? rcu_read_lock_any_held+0x75/0xa0 [ 594.908270] ? vfs_write+0x354/0xb10 [ 594.909091] __x64_sys_sendfile64+0x1d1/0x210 [ 594.910117] ? __ia32_sys_sendfile+0x220/0x220 [ 594.911185] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 594.912375] ? syscall_enter_from_user_mode+0x1d/0x50 [ 594.913558] do_syscall_64+0x33/0x40 [ 594.914375] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 594.915549] RIP: 0033:0x7fab802e1b19 [ 594.916409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 594.920537] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 594.922270] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 594.923856] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 594.925503] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 594.927073] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 594.928705] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 18:06:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 2) [ 594.998379] FAULT_INJECTION: forcing a failure. [ 594.998379] name failslab, interval 1, probability 0, space 0, times 0 [ 595.001034] CPU: 0 PID: 5713 Comm: syz-executor.1 Not tainted 5.10.258 #1 [ 595.002531] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 595.004351] Call Trace: [ 595.004929] dump_stack+0x107/0x167 [ 595.005731] should_fail.cold+0x5/0xa [ 595.006571] ? create_object.isra.0+0x3a/0xa30 [ 595.007578] should_failslab+0x5/0x20 [ 595.008408] kmem_cache_alloc+0x5b/0x310 [ 595.009302] create_object.isra.0+0x3a/0xa30 [ 595.010257] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 595.011384] kmem_cache_alloc_trace+0x151/0x320 [ 595.012405] alloc_pipe_info+0x10a/0x590 [ 595.013297] splice_direct_to_actor+0x774/0x980 [ 595.014318] ? _cond_resched+0x10/0x30 [ 595.015184] ? inode_security+0x107/0x140 [ 595.016088] ? pipe_to_sendpage+0x380/0x380 [ 595.017030] ? avc_policy_seqno+0x9/0x70 [ 595.017916] ? selinux_file_permission+0x92/0x520 [ 595.018976] ? do_splice_to+0x160/0x160 [ 595.019843] ? security_file_permission+0xb1/0xe0 [ 595.020902] do_splice_direct+0x1c4/0x290 [ 595.021808] ? splice_direct_to_actor+0x980/0x980 [ 595.022866] ? avc_policy_seqno+0x9/0x70 [ 595.023757] ? security_file_permission+0xb1/0xe0 [ 595.024817] do_sendfile+0x553/0x11e0 [ 595.025660] ? do_pwritev+0x270/0x270 [ 595.026490] ? wait_for_completion_io+0x270/0x270 [ 595.027566] ? perf_trace_preemptirq_template+0x26d/0x400 [ 595.028763] ? perf_trace_preemptirq_template+0x26d/0x400 [ 595.029963] ? rcu_read_lock_any_held+0x75/0xa0 [ 595.030992] __x64_sys_sendfile64+0x1d1/0x210 [ 595.031970] ? __ia32_sys_sendfile+0x220/0x220 [ 595.032978] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 595.034122] ? syscall_enter_from_user_mode+0x1d/0x50 [ 595.035262] do_syscall_64+0x33/0x40 [ 595.036076] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 595.037197] RIP: 0033:0x7ff83f8c6b19 [ 595.038008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 595.042022] RSP: 002b:00007ff83ce3c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 595.043699] RAX: ffffffffffffffda RBX: 00007ff83f9d9f60 RCX: 00007ff83f8c6b19 [ 595.045251] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 595.046812] RBP: 00007ff83ce3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 595.048362] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 595.049911] R13: 00007ffceba10c2f R14: 00007ff83ce3c300 R15: 0000000000022000 18:06:56 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 29) [ 595.094102] FAULT_INJECTION: forcing a failure. [ 595.094102] name failslab, interval 1, probability 0, space 0, times 0 [ 595.096906] CPU: 1 PID: 5715 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 595.098685] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 595.100641] Call Trace: [ 595.101222] dump_stack+0x107/0x167 [ 595.102024] should_fail.cold+0x5/0xa [ 595.102873] ? create_object.isra.0+0x3a/0xa30 [ 595.103956] should_failslab+0x5/0x20 [ 595.105011] kmem_cache_alloc+0x5b/0x310 [ 595.105931] create_object.isra.0+0x3a/0xa30 [ 595.107015] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 595.108377] kmem_cache_alloc_trace+0x151/0x320 [ 595.109523] io_uring_alloc_task_context+0x99/0x6a0 [ 595.110753] ? io_import_iovec+0x1120/0x1120 [ 595.111883] ? lock_downgrade+0x6d0/0x6d0 [ 595.112803] ? do_raw_spin_lock+0x121/0x260 [ 595.113932] ? rwlock_bug.part.0+0x90/0x90 [ 595.114946] __io_uring_add_tctx_node+0x2c6/0x520 [ 595.116141] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 595.117507] ? alloc_fd+0x2e7/0x670 [ 595.118310] io_uring_setup+0x1fbb/0x2980 [ 595.119231] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 595.120559] ? wait_for_completion_io+0x270/0x270 [ 595.121626] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 595.122789] ? syscall_enter_from_user_mode+0x1d/0x50 [ 595.124026] do_syscall_64+0x33/0x40 [ 595.124839] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 595.125955] RIP: 0033:0x7f722f48db19 [ 595.126780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 595.131398] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 595.133051] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 595.134599] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 595.136491] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 595.138275] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 595.140068] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:07:12 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x4000) 18:07:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 3) 18:07:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 5) 18:07:12 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:07:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:07:12 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000, 0x13, r0, 0x0) 18:07:12 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:07:12 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 30) [ 610.338903] FAULT_INJECTION: forcing a failure. [ 610.338903] name failslab, interval 1, probability 0, space 0, times 0 [ 610.339898] FAULT_INJECTION: forcing a failure. [ 610.339898] name failslab, interval 1, probability 0, space 0, times 0 [ 610.342004] CPU: 0 PID: 5724 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 610.346026] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 610.348188] Call Trace: [ 610.348868] dump_stack+0x107/0x167 [ 610.349803] should_fail.cold+0x5/0xa [ 610.350777] ? alloc_pipe_info+0x1e5/0x590 [ 610.351873] should_failslab+0x5/0x20 [ 610.352850] __kmalloc+0x72/0x390 [ 610.353735] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 610.355047] alloc_pipe_info+0x1e5/0x590 [ 610.356096] splice_direct_to_actor+0x774/0x980 [ 610.357294] ? _cond_resched+0x10/0x30 [ 610.358285] ? inode_security+0x107/0x140 [ 610.359345] ? pipe_to_sendpage+0x380/0x380 [ 610.360443] ? avc_policy_seqno+0x9/0x70 [ 610.361476] ? selinux_file_permission+0x92/0x520 [ 610.362709] ? do_splice_to+0x160/0x160 [ 610.363662] ? security_file_permission+0xb1/0xe0 [ 610.364709] do_splice_direct+0x1c4/0x290 [ 610.365610] ? splice_direct_to_actor+0x980/0x980 [ 610.366646] ? avc_policy_seqno+0x9/0x70 [ 610.367536] ? security_file_permission+0xb1/0xe0 [ 610.368582] do_sendfile+0x553/0x11e0 [ 610.369412] ? do_pwritev+0x270/0x270 [ 610.370234] ? wait_for_completion_io+0x270/0x270 [ 610.371285] ? rcu_read_lock_any_held+0x75/0xa0 [ 610.372282] ? vfs_write+0x354/0xb10 [ 610.373142] __x64_sys_sendfile64+0x1d1/0x210 [ 610.374293] ? __ia32_sys_sendfile+0x220/0x220 [ 610.375518] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 610.376887] ? syscall_enter_from_user_mode+0x1d/0x50 [ 610.378238] do_syscall_64+0x33/0x40 [ 610.379225] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 610.380561] RIP: 0033:0x7fab802e1b19 [ 610.381531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 610.386325] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 610.388338] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 610.390205] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 610.392091] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 610.393966] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 610.395858] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 [ 610.397763] CPU: 1 PID: 5722 Comm: syz-executor.1 Not tainted 5.10.258 #1 [ 610.399225] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 610.400970] Call Trace: [ 610.401537] dump_stack+0x107/0x167 [ 610.402308] should_fail.cold+0x5/0xa [ 610.403117] ? alloc_pipe_info+0x1e5/0x590 [ 610.404006] should_failslab+0x5/0x20 [ 610.404807] __kmalloc+0x72/0x390 [ 610.405581] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 610.406660] alloc_pipe_info+0x1e5/0x590 [ 610.407527] splice_direct_to_actor+0x774/0x980 [ 610.408510] ? _cond_resched+0x10/0x30 [ 610.409328] ? inode_security+0x107/0x140 [ 610.410199] ? pipe_to_sendpage+0x380/0x380 [ 610.411120] ? avc_policy_seqno+0x9/0x70 [ 610.411968] ? selinux_file_permission+0x92/0x520 [ 610.412975] ? do_splice_to+0x160/0x160 [ 610.413806] ? security_file_permission+0xb1/0xe0 [ 610.414820] do_splice_direct+0x1c4/0x290 [ 610.415669] ? splice_direct_to_actor+0x980/0x980 [ 610.416653] ? avc_policy_seqno+0x9/0x70 [ 610.417489] ? security_file_permission+0xb1/0xe0 [ 610.418474] do_sendfile+0x553/0x11e0 [ 610.419262] ? do_pwritev+0x270/0x270 [ 610.420045] ? wait_for_completion_io+0x270/0x270 [ 610.421028] ? rcu_read_lock_any_held+0x75/0xa0 [ 610.421971] ? vfs_write+0x354/0xb10 [ 610.422735] __x64_sys_sendfile64+0x1d1/0x210 [ 610.423658] ? __ia32_sys_sendfile+0x220/0x220 [ 610.424601] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 610.425671] ? syscall_enter_from_user_mode+0x1d/0x50 [ 610.426722] do_syscall_64+0x33/0x40 [ 610.427488] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 610.428525] RIP: 0033:0x7ff83f8c6b19 [ 610.429287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 610.433039] RSP: 002b:00007ff83ce3c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 610.434590] RAX: ffffffffffffffda RBX: 00007ff83f9d9f60 RCX: 00007ff83f8c6b19 [ 610.436047] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 610.437508] RBP: 00007ff83ce3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 610.438956] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 610.440387] R13: 00007ffceba10c2f R14: 00007ff83ce3c300 R15: 0000000000022000 [ 610.473056] FAULT_INJECTION: forcing a failure. [ 610.473056] name failslab, interval 1, probability 0, space 0, times 0 [ 610.475376] CPU: 0 PID: 5738 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 610.476750] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 610.478394] Call Trace: [ 610.478932] dump_stack+0x107/0x167 [ 610.479656] should_fail.cold+0x5/0xa [ 610.480419] ? create_object.isra.0+0x3a/0xa30 [ 610.481324] should_failslab+0x5/0x20 [ 610.482079] kmem_cache_alloc+0x5b/0x310 [ 610.482904] create_object.isra.0+0x3a/0xa30 [ 610.483783] kmemleak_alloc_percpu+0xa0/0x100 [ 610.484679] pcpu_alloc+0x4e2/0x1240 [ 610.485437] __percpu_counter_init+0x10d/0x2d0 [ 610.486347] io_uring_alloc_task_context+0xcc/0x6a0 [ 610.487356] ? io_import_iovec+0x1120/0x1120 [ 610.488230] ? lock_downgrade+0x6d0/0x6d0 [ 610.489058] ? do_raw_spin_lock+0x121/0x260 [ 610.489919] ? rwlock_bug.part.0+0x90/0x90 [ 610.490758] __io_uring_add_tctx_node+0x2c6/0x520 [ 610.491725] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 610.492748] ? alloc_fd+0x2e7/0x670 [ 610.493469] io_uring_setup+0x1fbb/0x2980 [ 610.494298] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 610.495294] ? wait_for_completion_io+0x270/0x270 [ 610.496254] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 610.497278] ? syscall_enter_from_user_mode+0x1d/0x50 [ 610.498306] do_syscall_64+0x33/0x40 [ 610.499051] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 610.500057] RIP: 0033:0x7f722f48db19 [ 610.500785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 610.504435] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 610.505931] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 610.507332] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 610.508741] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 610.510140] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 610.511556] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:07:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 4) 18:07:12 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x6000) [ 610.559272] FAULT_INJECTION: forcing a failure. [ 610.559272] name failslab, interval 1, probability 0, space 0, times 0 [ 610.561761] CPU: 0 PID: 5745 Comm: syz-executor.1 Not tainted 5.10.258 #1 [ 610.563078] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 610.564659] Call Trace: [ 610.565167] dump_stack+0x107/0x167 [ 610.565864] should_fail.cold+0x5/0xa [ 610.566592] ? create_object.isra.0+0x3a/0xa30 [ 610.567473] should_failslab+0x5/0x20 [ 610.568189] kmem_cache_alloc+0x5b/0x310 [ 610.568973] create_object.isra.0+0x3a/0xa30 [ 610.569808] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 610.570775] __kmalloc_node+0x1ae/0x420 [ 610.571544] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 610.572512] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 610.573461] ? trace_hardirqs_on+0x5b/0x180 [ 610.574270] kmem_cache_alloc_trace+0x169/0x320 [ 610.575156] alloc_pipe_info+0x10a/0x590 [ 610.575931] splice_direct_to_actor+0x774/0x980 [ 610.576813] ? _cond_resched+0x10/0x30 [ 610.577545] ? inode_security+0x107/0x140 [ 610.578318] ? pipe_to_sendpage+0x380/0x380 [ 610.579161] ? avc_policy_seqno+0x9/0x70 [ 610.579917] ? selinux_file_permission+0x92/0x520 [ 610.580828] ? do_splice_to+0x160/0x160 [ 610.581591] ? security_file_permission+0xb1/0xe0 [ 610.582509] do_splice_direct+0x1c4/0x290 [ 610.583289] ? splice_direct_to_actor+0x980/0x980 [ 610.584203] ? avc_policy_seqno+0x9/0x70 [ 610.584979] ? security_file_permission+0xb1/0xe0 [ 610.585891] do_sendfile+0x553/0x11e0 [ 610.586614] ? do_pwritev+0x270/0x270 [ 610.587344] ? wait_for_completion_io+0x270/0x270 [ 610.588269] ? rcu_read_lock_any_held+0x75/0xa0 [ 610.589146] ? vfs_write+0x354/0xb10 [ 610.589861] __x64_sys_sendfile64+0x1d1/0x210 [ 610.590710] ? __ia32_sys_sendfile+0x220/0x220 [ 610.591590] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 610.592585] ? syscall_enter_from_user_mode+0x1d/0x50 [ 610.593568] do_syscall_64+0x33/0x40 [ 610.594276] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 610.595252] RIP: 0033:0x7ff83f8c6b19 [ 610.595950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 610.599410] RSP: 002b:00007ff83ce3c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 610.600853] RAX: ffffffffffffffda RBX: 00007ff83f9d9f60 RCX: 00007ff83f8c6b19 [ 610.602191] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 610.603541] RBP: 00007ff83ce3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 610.604887] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 610.606234] R13: 00007ffceba10c2f R14: 00007ff83ce3c300 R15: 0000000000022000 18:07:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 6) 18:07:12 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x10004) 18:07:12 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 31) 18:07:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) [ 610.796703] FAULT_INJECTION: forcing a failure. [ 610.796703] name failslab, interval 1, probability 0, space 0, times 0 [ 610.798819] CPU: 0 PID: 5754 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 610.799961] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 610.801331] Call Trace: [ 610.801776] dump_stack+0x107/0x167 [ 610.802392] should_fail.cold+0x5/0xa [ 610.803113] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 610.803995] should_failslab+0x5/0x20 [ 610.804629] kmem_cache_alloc_trace+0x55/0x320 [ 610.805387] io_uring_alloc_task_context+0x4a3/0x6a0 [ 610.806224] ? io_import_iovec+0x1120/0x1120 [ 610.806969] ? lock_downgrade+0x6d0/0x6d0 [ 610.807655] ? do_raw_spin_lock+0x121/0x260 [ 610.808364] ? rwlock_bug.part.0+0x90/0x90 [ 610.809065] __io_uring_add_tctx_node+0x2c6/0x520 [ 610.809860] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 610.810719] ? alloc_fd+0x2e7/0x670 [ 610.811334] io_uring_setup+0x1fbb/0x2980 [ 610.812020] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 610.812856] ? wait_for_completion_io+0x270/0x270 [ 610.813668] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 610.814535] ? syscall_enter_from_user_mode+0x1d/0x50 [ 610.815402] do_syscall_64+0x33/0x40 [ 610.816016] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 610.816445] FAULT_INJECTION: forcing a failure. [ 610.816445] name failslab, interval 1, probability 0, space 0, times 0 [ 610.816855] RIP: 0033:0x7f722f48db19 [ 610.820170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 610.823217] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 610.824468] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 610.825629] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 610.826778] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 610.827959] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 610.829135] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 610.830330] CPU: 1 PID: 5755 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 610.832021] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 610.834023] Call Trace: [ 610.834663] dump_stack+0x107/0x167 [ 610.835556] should_fail.cold+0x5/0xa [ 610.836480] ? create_object.isra.0+0x3a/0xa30 [ 610.837592] should_failslab+0x5/0x20 [ 610.838510] kmem_cache_alloc+0x5b/0x310 [ 610.839512] create_object.isra.0+0x3a/0xa30 [ 610.840571] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 610.841791] __kmalloc+0x16e/0x390 [ 610.842661] iter_file_splice_write+0x165/0xc90 [ 610.843809] ? generic_splice_sendpage+0x140/0x140 [ 610.844986] ? pipe_to_user+0x170/0x170 [ 610.845968] ? security_file_permission+0xb1/0xe0 [ 610.847136] ? generic_splice_sendpage+0x140/0x140 [ 610.848316] direct_splice_actor+0x10f/0x170 [ 610.849373] splice_direct_to_actor+0x387/0x980 [ 610.850513] ? pipe_to_sendpage+0x380/0x380 [ 610.851568] ? do_splice_to+0x160/0x160 [ 610.852521] ? security_file_permission+0xb1/0xe0 [ 610.853682] do_splice_direct+0x1c4/0x290 [ 610.854684] ? splice_direct_to_actor+0x980/0x980 [ 610.855824] ? avc_policy_seqno+0x9/0x70 [ 610.856798] ? security_file_permission+0xb1/0xe0 [ 610.857950] do_sendfile+0x553/0x11e0 [ 610.858877] ? do_pwritev+0x270/0x270 [ 610.859803] ? wait_for_completion_io+0x270/0x270 [ 610.860972] ? rcu_read_lock_any_held+0x75/0xa0 [ 610.862066] ? vfs_write+0x354/0xb10 [ 610.862973] __x64_sys_sendfile64+0x1d1/0x210 [ 610.864043] ? __ia32_sys_sendfile+0x220/0x220 [ 610.865133] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 610.866382] ? syscall_enter_from_user_mode+0x1d/0x50 [ 610.867624] do_syscall_64+0x33/0x40 [ 610.868499] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 610.869720] RIP: 0033:0x7fab802e1b19 [ 610.870586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 610.874927] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 610.876727] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 610.878414] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 610.880101] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 610.881779] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 610.883448] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 18:07:12 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:07:12 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x10004, 0x13, r0, 0x0) 18:07:12 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x400000) 18:07:12 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 32) 18:07:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 5) [ 611.061036] FAULT_INJECTION: forcing a failure. [ 611.061036] name failslab, interval 1, probability 0, space 0, times 0 [ 611.063766] CPU: 1 PID: 5766 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 611.065382] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 611.067354] Call Trace: [ 611.067984] dump_stack+0x107/0x167 [ 611.068860] should_fail.cold+0x5/0xa [ 611.069763] ? create_object.isra.0+0x3a/0xa30 [ 611.070841] should_failslab+0x5/0x20 [ 611.071766] kmem_cache_alloc+0x5b/0x310 [ 611.072744] create_object.isra.0+0x3a/0xa30 [ 611.073790] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 611.075006] kmem_cache_alloc_trace+0x151/0x320 [ 611.076121] io_uring_alloc_task_context+0x4a3/0x6a0 [ 611.077331] ? io_import_iovec+0x1120/0x1120 [ 611.078384] ? lock_downgrade+0x6d0/0x6d0 [ 611.079359] ? do_raw_spin_lock+0x121/0x260 [ 611.080375] ? rwlock_bug.part.0+0x90/0x90 [ 611.081368] __io_uring_add_tctx_node+0x2c6/0x520 [ 611.082504] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 611.083757] ? alloc_fd+0x2e7/0x670 [ 611.084635] io_uring_setup+0x1fbb/0x2980 [ 611.085631] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 611.086826] ? wait_for_completion_io+0x270/0x270 [ 611.087981] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 611.089206] ? syscall_enter_from_user_mode+0x1d/0x50 [ 611.090423] do_syscall_64+0x33/0x40 [ 611.091316] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 611.092501] RIP: 0033:0x7f722f48db19 [ 611.093379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 611.097658] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 611.099427] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 611.101077] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 611.102727] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 611.104383] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 611.106040] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 611.116514] FAULT_INJECTION: forcing a failure. [ 611.116514] name failslab, interval 1, probability 0, space 0, times 0 [ 611.118183] CPU: 0 PID: 5768 Comm: syz-executor.1 Not tainted 5.10.258 #1 [ 611.119091] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 611.120183] Call Trace: [ 611.120531] dump_stack+0x107/0x167 [ 611.121017] should_fail.cold+0x5/0xa [ 611.121512] ? alloc_pipe_info+0x1e5/0x590 [ 611.122066] should_failslab+0x5/0x20 [ 611.122563] __kmalloc+0x72/0x390 [ 611.123025] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 611.123681] alloc_pipe_info+0x1e5/0x590 [ 611.124212] splice_direct_to_actor+0x774/0x980 [ 611.124831] ? _cond_resched+0x10/0x30 [ 611.125337] ? inode_security+0x107/0x140 [ 611.125879] ? pipe_to_sendpage+0x380/0x380 [ 611.126440] ? avc_policy_seqno+0x9/0x70 [ 611.126974] ? selinux_file_permission+0x92/0x520 [ 611.127634] ? do_splice_to+0x160/0x160 [ 611.128151] ? security_file_permission+0xb1/0xe0 [ 611.128800] do_splice_direct+0x1c4/0x290 [ 611.129343] ? splice_direct_to_actor+0x980/0x980 [ 611.129968] ? avc_policy_seqno+0x9/0x70 [ 611.130503] ? security_file_permission+0xb1/0xe0 [ 611.131139] do_sendfile+0x553/0x11e0 [ 611.131636] ? do_pwritev+0x270/0x270 [ 611.132137] ? wait_for_completion_io+0x270/0x270 [ 611.132767] ? rcu_read_lock_any_held+0x75/0xa0 [ 611.133354] ? vfs_write+0x354/0xb10 [ 611.133833] __x64_sys_sendfile64+0x1d1/0x210 [ 611.134414] ? __ia32_sys_sendfile+0x220/0x220 [ 611.135035] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 611.135715] ? syscall_enter_from_user_mode+0x1d/0x50 [ 611.136384] do_syscall_64+0x33/0x40 [ 611.136863] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 611.137530] RIP: 0033:0x7ff83f8c6b19 [ 611.138005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 611.140381] RSP: 002b:00007ff83ce3c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 611.141357] RAX: ffffffffffffffda RBX: 00007ff83f9d9f60 RCX: 00007ff83f8c6b19 [ 611.142271] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 611.143213] RBP: 00007ff83ce3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 611.144124] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 611.145029] R13: 00007ffceba10c2f R14: 00007ff83ce3c300 R15: 0000000000022000 18:07:29 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:07:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 7) 18:07:29 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x600000) 18:07:29 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:07:29 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 33) 18:07:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 6) 18:07:29 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x400000, 0x13, r0, 0x0) 18:07:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) [ 627.283520] FAULT_INJECTION: forcing a failure. [ 627.283520] name failslab, interval 1, probability 0, space 0, times 0 [ 627.286055] CPU: 0 PID: 5779 Comm: syz-executor.1 Not tainted 5.10.258 #1 [ 627.287544] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 627.289283] Call Trace: [ 627.289842] dump_stack+0x107/0x167 [ 627.290600] should_fail.cold+0x5/0xa [ 627.291438] ? create_object.isra.0+0x3a/0xa30 [ 627.292377] should_failslab+0x5/0x20 [ 627.293178] kmem_cache_alloc+0x5b/0x310 [ 627.294028] create_object.isra.0+0x3a/0xa30 [ 627.294951] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 627.296038] __kmalloc+0x16e/0x390 [ 627.296788] alloc_pipe_info+0x1e5/0x590 [ 627.297649] splice_direct_to_actor+0x774/0x980 [ 627.298674] ? _cond_resched+0x10/0x30 [ 627.299835] ? inode_security+0x107/0x140 [ 627.301161] ? pipe_to_sendpage+0x380/0x380 [ 627.302551] ? avc_policy_seqno+0x9/0x70 [ 627.303836] ? selinux_file_permission+0x92/0x520 [ 627.305158] ? do_splice_to+0x160/0x160 [ 627.306203] ? security_file_permission+0xb1/0xe0 [ 627.307489] do_splice_direct+0x1c4/0x290 [ 627.308570] ? splice_direct_to_actor+0x980/0x980 [ 627.309824] ? avc_policy_seqno+0x9/0x70 [ 627.310893] ? security_file_permission+0xb1/0xe0 [ 627.312195] do_sendfile+0x553/0x11e0 [ 627.313206] ? do_pwritev+0x270/0x270 [ 627.314089] ? wait_for_completion_io+0x270/0x270 [ 627.315189] ? rcu_read_lock_any_held+0x75/0xa0 [ 627.316403] ? vfs_write+0x354/0xb10 [ 627.317372] __x64_sys_sendfile64+0x1d1/0x210 [ 627.318540] ? __ia32_sys_sendfile+0x220/0x220 [ 627.319754] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 627.320929] ? syscall_enter_from_user_mode+0x1d/0x50 [ 627.322102] do_syscall_64+0x33/0x40 [ 627.322896] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 627.324224] RIP: 0033:0x7ff83f8c6b19 [ 627.325011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 627.328861] RSP: 002b:00007ff83ce3c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 627.330451] RAX: ffffffffffffffda RBX: 00007ff83f9d9f60 RCX: 00007ff83f8c6b19 [ 627.331952] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 627.333445] RBP: 00007ff83ce3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 627.334936] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 627.336430] R13: 00007ffceba10c2f R14: 00007ff83ce3c300 R15: 0000000000022000 [ 627.342381] FAULT_INJECTION: forcing a failure. [ 627.342381] name failslab, interval 1, probability 0, space 0, times 0 [ 627.344752] CPU: 0 PID: 5785 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 627.346201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 627.347947] Call Trace: [ 627.348498] dump_stack+0x107/0x167 [ 627.349268] should_fail.cold+0x5/0xa [ 627.350081] ? io_wq_create+0xeb/0xc00 [ 627.350909] should_failslab+0x5/0x20 [ 627.351714] __kmalloc+0x72/0x390 [ 627.352443] io_wq_create+0xeb/0xc00 [ 627.353233] io_uring_alloc_task_context+0x1f1/0x6a0 [ 627.354291] ? io_import_iovec+0x1120/0x1120 [ 627.355221] ? io_apoll_task_func+0x2d0/0x2d0 [ 627.356162] ? __io_req_find_next+0x300/0x300 [ 627.357092] ? do_raw_spin_lock+0x121/0x260 [ 627.357985] ? rwlock_bug.part.0+0x90/0x90 [ 627.358877] __io_uring_add_tctx_node+0x2c6/0x520 [ 627.359905] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 627.360995] ? alloc_fd+0x2e7/0x670 [ 627.361766] io_uring_setup+0x1fbb/0x2980 [ 627.362636] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 627.363699] ? wait_for_completion_io+0x270/0x270 [ 627.364729] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 627.365822] ? syscall_enter_from_user_mode+0x1d/0x50 [ 627.366899] do_syscall_64+0x33/0x40 [ 627.367689] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 627.368762] RIP: 0033:0x7f722f48db19 [ 627.369539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 627.373418] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 627.375012] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 627.376515] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 627.378007] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 627.379512] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 627.381004] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 627.396420] FAULT_INJECTION: forcing a failure. [ 627.396420] name failslab, interval 1, probability 0, space 0, times 0 [ 627.399052] CPU: 0 PID: 5788 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 627.400484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 627.402600] Call Trace: [ 627.403350] dump_stack+0x107/0x167 [ 627.404346] should_fail.cold+0x5/0xa [ 627.405363] ? jbd2__journal_start+0x190/0x7e0 [ 627.406576] should_failslab+0x5/0x20 [ 627.407618] kmem_cache_alloc+0x5b/0x310 [ 627.408706] jbd2__journal_start+0x190/0x7e0 [ 627.409872] __ext4_journal_start_sb+0x214/0x390 [ 627.411159] ext4_dirty_inode+0xbc/0x130 [ 627.412264] ? ext4_setattr+0x22f0/0x22f0 [ 627.413348] __mark_inode_dirty+0x492/0xd30 [ 627.414502] ? current_time+0xac/0x120 [ 627.415411] generic_update_time+0x21c/0x370 [ 627.416493] ? igrab+0xc0/0xc0 [ 627.417208] file_update_time+0x43a/0x520 [ 627.418122] ? evict_inodes+0x470/0x470 [ 627.418980] ? down_write_killable+0x180/0x180 [ 627.419958] file_modified+0x7d/0xa0 [ 627.420740] ext4_file_write_iter+0x8f8/0x1530 [ 627.421710] ? ext4_file_read_iter+0x4c0/0x4c0 [ 627.422659] ? kasan_save_stack+0x32/0x40 [ 627.423529] ? kasan_save_stack+0x1b/0x40 [ 627.424391] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 627.425467] ? iter_file_splice_write+0x165/0xc90 [ 627.426475] ? direct_splice_actor+0x10f/0x170 [ 627.427436] ? splice_direct_to_actor+0x387/0x980 [ 627.428441] ? do_splice_direct+0x1c4/0x290 [ 627.429337] ? do_sendfile+0x553/0x11e0 [ 627.430165] ? __x64_sys_sendfile64+0x1d1/0x210 [ 627.431140] ? do_syscall_64+0x33/0x40 [ 627.431954] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 627.433072] do_iter_readv_writev+0x476/0x750 [ 627.434003] ? _cond_resched+0x10/0x30 [ 627.434814] ? new_sync_write+0x660/0x660 [ 627.435687] ? avc_policy_seqno+0x9/0x70 [ 627.436536] ? selinux_file_permission+0x92/0x520 [ 627.437544] ? security_file_permission+0xb1/0xe0 [ 627.438558] do_iter_write+0x191/0x700 [ 627.439381] ? trace_hardirqs_on+0x5b/0x180 [ 627.440288] vfs_iter_write+0x70/0xa0 [ 627.441086] iter_file_splice_write+0x726/0xc90 [ 627.442070] ? generic_splice_sendpage+0x140/0x140 [ 627.443121] ? security_file_permission+0xb1/0xe0 [ 627.444139] ? generic_splice_sendpage+0x140/0x140 [ 627.445161] direct_splice_actor+0x10f/0x170 [ 627.446079] splice_direct_to_actor+0x387/0x980 [ 627.447066] ? pipe_to_sendpage+0x380/0x380 [ 627.447969] ? do_splice_to+0x160/0x160 [ 627.448802] ? security_file_permission+0xb1/0xe0 [ 627.449817] do_splice_direct+0x1c4/0x290 [ 627.450685] ? splice_direct_to_actor+0x980/0x980 [ 627.451695] ? avc_policy_seqno+0x9/0x70 [ 627.452548] ? security_file_permission+0xb1/0xe0 [ 627.453563] do_sendfile+0x553/0x11e0 [ 627.454364] ? do_pwritev+0x270/0x270 [ 627.455167] ? wait_for_completion_io+0x270/0x270 [ 627.456173] ? rcu_read_lock_any_held+0x75/0xa0 [ 627.457136] ? vfs_write+0x354/0xb10 [ 627.457916] __x64_sys_sendfile64+0x1d1/0x210 [ 627.458878] ? __ia32_sys_sendfile+0x220/0x220 [ 627.459848] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 627.460943] ? syscall_enter_from_user_mode+0x1d/0x50 [ 627.462021] do_syscall_64+0x33/0x40 [ 627.462799] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 627.463879] RIP: 0033:0x7fab802e1b19 [ 627.464657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 627.468509] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 627.470099] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 627.471596] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 627.473085] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 627.474573] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 627.476070] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 18:07:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:07:29 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x800000) 18:07:29 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 34) 18:07:29 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) [ 627.752647] FAULT_INJECTION: forcing a failure. [ 627.752647] name failslab, interval 1, probability 0, space 0, times 0 [ 627.755528] CPU: 1 PID: 5802 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 627.757219] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 627.759105] Call Trace: [ 627.759736] dump_stack+0x107/0x167 [ 627.760700] should_fail.cold+0x5/0xa [ 627.761522] ? create_object.isra.0+0x3a/0xa30 [ 627.762558] should_failslab+0x5/0x20 [ 627.763370] kmem_cache_alloc+0x5b/0x310 [ 627.764240] create_object.isra.0+0x3a/0xa30 [ 627.765163] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 627.766337] __kmalloc+0x16e/0x390 [ 627.767301] io_wq_create+0xeb/0xc00 [ 627.768180] io_uring_alloc_task_context+0x1f1/0x6a0 [ 627.769333] ? io_import_iovec+0x1120/0x1120 [ 627.770355] ? io_apoll_task_func+0x2d0/0x2d0 [ 627.771508] ? __io_req_find_next+0x300/0x300 [ 627.772536] ? do_raw_spin_lock+0x121/0x260 [ 627.773526] ? rwlock_bug.part.0+0x90/0x90 [ 627.774592] __io_uring_add_tctx_node+0x2c6/0x520 [ 627.775690] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 627.776893] ? alloc_fd+0x2e7/0x670 [ 627.777672] io_uring_setup+0x1fbb/0x2980 [ 627.778558] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 627.779640] ? wait_for_completion_io+0x270/0x270 [ 627.780676] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 627.781945] ? syscall_enter_from_user_mode+0x1d/0x50 [ 627.783213] do_syscall_64+0x33/0x40 [ 627.783998] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 627.785077] RIP: 0033:0x7f722f48db19 [ 627.785856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 627.789863] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 627.791470] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 627.792969] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 627.794469] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 627.795980] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 627.797484] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:07:29 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000, 0x13, r0, 0x0) 18:07:29 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x80ffff) 18:07:29 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x2000000) 18:07:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 7) [ 628.077272] FAULT_INJECTION: forcing a failure. [ 628.077272] name failslab, interval 1, probability 0, space 0, times 0 [ 628.079911] CPU: 0 PID: 5815 Comm: syz-executor.1 Not tainted 5.10.258 #1 [ 628.081212] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 628.082927] Call Trace: [ 628.083454] dump_stack+0x107/0x167 [ 628.084142] should_fail.cold+0x5/0xa [ 628.084869] ? jbd2__journal_start+0x190/0x7e0 [ 628.085739] should_failslab+0x5/0x20 [ 628.086456] kmem_cache_alloc+0x5b/0x310 [ 628.087249] jbd2__journal_start+0x190/0x7e0 [ 628.088082] __ext4_journal_start_sb+0x214/0x390 [ 628.088976] ext4_dirty_inode+0xbc/0x130 [ 628.089734] ? ext4_setattr+0x22f0/0x22f0 [ 628.090518] __mark_inode_dirty+0x492/0xd30 [ 628.091339] ? current_time+0xac/0x120 [ 628.092093] generic_update_time+0x21c/0x370 [ 628.092912] ? igrab+0xc0/0xc0 [ 628.093529] file_update_time+0x43a/0x520 [ 628.094314] ? evict_inodes+0x470/0x470 [ 628.095078] ? down_write_killable+0x180/0x180 [ 628.095966] file_modified+0x7d/0xa0 [ 628.096666] ext4_file_write_iter+0x8f8/0x1530 [ 628.097547] ? ext4_file_read_iter+0x4c0/0x4c0 [ 628.098402] ? kasan_save_stack+0x32/0x40 [ 628.099187] ? kasan_save_stack+0x1b/0x40 [ 628.099976] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 628.100927] ? iter_file_splice_write+0x165/0xc90 [ 628.101840] ? direct_splice_actor+0x10f/0x170 [ 628.102708] ? splice_direct_to_actor+0x387/0x980 [ 628.103618] ? do_splice_direct+0x1c4/0x290 [ 628.104440] ? do_sendfile+0x553/0x11e0 [ 628.105189] ? __x64_sys_sendfile64+0x1d1/0x210 [ 628.106067] ? do_syscall_64+0x33/0x40 [ 628.106795] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 628.107807] do_iter_readv_writev+0x476/0x750 [ 628.108635] ? _cond_resched+0x10/0x30 [ 628.109365] ? new_sync_write+0x660/0x660 [ 628.110138] ? avc_policy_seqno+0x9/0x70 [ 628.110899] ? selinux_file_permission+0x92/0x520 [ 628.111818] ? security_file_permission+0xb1/0xe0 [ 628.112721] do_iter_write+0x191/0x700 [ 628.113465] ? trace_hardirqs_on+0x5b/0x180 [ 628.114279] vfs_iter_write+0x70/0xa0 [ 628.114986] iter_file_splice_write+0x726/0xc90 [ 628.115894] ? generic_splice_sendpage+0x140/0x140 [ 628.116834] ? security_file_permission+0xb1/0xe0 [ 628.117757] ? generic_splice_sendpage+0x140/0x140 [ 628.118930] direct_splice_actor+0x10f/0x170 [ 628.119991] splice_direct_to_actor+0x387/0x980 [ 628.121115] ? pipe_to_sendpage+0x380/0x380 [ 628.122129] ? do_splice_to+0x160/0x160 [ 628.123095] ? security_file_permission+0xb1/0xe0 [ 628.124237] do_splice_direct+0x1c4/0x290 [ 628.125215] ? splice_direct_to_actor+0x980/0x980 [ 628.126341] ? avc_policy_seqno+0x9/0x70 [ 628.127322] ? security_file_permission+0xb1/0xe0 [ 628.128301] do_sendfile+0x553/0x11e0 [ 628.129045] ? do_pwritev+0x270/0x270 [ 628.129743] ? wait_for_completion_io+0x270/0x270 [ 628.130844] ? rcu_read_lock_any_held+0x75/0xa0 [ 628.131930] ? vfs_write+0x354/0xb10 [ 628.132808] __x64_sys_sendfile64+0x1d1/0x210 [ 628.133698] ? __ia32_sys_sendfile+0x220/0x220 [ 628.134572] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 628.135726] ? syscall_enter_from_user_mode+0x1d/0x50 [ 628.136692] do_syscall_64+0x33/0x40 [ 628.137368] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 628.138311] RIP: 0033:0x7ff83f8c6b19 [ 628.138994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 628.142367] RSP: 002b:00007ff83ce3c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 628.143777] RAX: ffffffffffffffda RBX: 00007ff83f9d9f60 RCX: 00007ff83f8c6b19 [ 628.145087] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 628.146381] RBP: 00007ff83ce3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 628.147701] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 628.148996] R13: 00007ffceba10c2f R14: 00007ff83ce3c300 R15: 0000000000022000 18:07:43 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 35) 18:07:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 8) 18:07:43 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:07:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 8) 18:07:43 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x4000000) 18:07:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:07:43 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:07:43 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800000, 0x13, r0, 0x0) [ 642.170782] FAULT_INJECTION: forcing a failure. [ 642.170782] name failslab, interval 1, probability 0, space 0, times 0 [ 642.173675] CPU: 1 PID: 5824 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 642.175077] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 642.176783] Call Trace: [ 642.177335] dump_stack+0x107/0x167 [ 642.178261] should_fail.cold+0x5/0xa [ 642.179057] ? io_wq_create+0x6ef/0xc00 [ 642.180086] should_failslab+0x5/0x20 [ 642.180878] kmem_cache_alloc_node_trace+0x59/0x340 [ 642.181950] io_wq_create+0x6ef/0xc00 [ 642.182777] io_uring_alloc_task_context+0x1f1/0x6a0 [ 642.184106] ? io_import_iovec+0x1120/0x1120 [ 642.185011] ? io_apoll_task_func+0x2d0/0x2d0 [ 642.185916] ? __io_req_find_next+0x300/0x300 [ 642.186852] ? do_raw_spin_lock+0x121/0x260 [ 642.187808] ? rwlock_bug.part.0+0x90/0x90 [ 642.188687] __io_uring_add_tctx_node+0x2c6/0x520 [ 642.189681] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 642.190803] ? alloc_fd+0x2e7/0x670 [ 642.191580] io_uring_setup+0x1fbb/0x2980 [ 642.192447] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 642.193646] ? wait_for_completion_io+0x270/0x270 [ 642.194649] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 642.195734] ? syscall_enter_from_user_mode+0x1d/0x50 [ 642.196790] do_syscall_64+0x33/0x40 [ 642.197566] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 642.198627] RIP: 0033:0x7f722f48db19 [ 642.199408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 642.203189] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 642.205078] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 642.206919] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 642.208675] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 642.210304] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 642.211781] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 642.218472] FAULT_INJECTION: forcing a failure. [ 642.218472] name failslab, interval 1, probability 0, space 0, times 0 [ 642.220933] CPU: 0 PID: 5830 Comm: syz-executor.1 Not tainted 5.10.258 #1 [ 642.222544] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 642.224311] Call Trace: [ 642.224883] dump_stack+0x107/0x167 [ 642.225661] should_fail.cold+0x5/0xa [ 642.226471] ? create_object.isra.0+0x3a/0xa30 [ 642.227459] should_failslab+0x5/0x20 [ 642.228271] kmem_cache_alloc+0x5b/0x310 [ 642.229138] create_object.isra.0+0x3a/0xa30 [ 642.229457] FAULT_INJECTION: forcing a failure. [ 642.229457] name failslab, interval 1, probability 0, space 0, times 0 [ 642.230078] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 642.230116] __kmalloc+0x16e/0x390 [ 642.234390] iter_file_splice_write+0x165/0xc90 [ 642.235398] ? generic_splice_sendpage+0x140/0x140 [ 642.236441] ? pipe_to_user+0x170/0x170 [ 642.237312] ? security_file_permission+0xb1/0xe0 [ 642.238345] ? generic_splice_sendpage+0x140/0x140 [ 642.239393] direct_splice_actor+0x10f/0x170 [ 642.240325] splice_direct_to_actor+0x387/0x980 [ 642.241318] ? pipe_to_sendpage+0x380/0x380 [ 642.242227] ? do_splice_to+0x160/0x160 [ 642.243068] ? security_file_permission+0xb1/0xe0 [ 642.244114] do_splice_direct+0x1c4/0x290 [ 642.244989] ? splice_direct_to_actor+0x980/0x980 [ 642.246017] ? avc_policy_seqno+0x9/0x70 [ 642.246881] ? security_file_permission+0xb1/0xe0 [ 642.247924] do_sendfile+0x553/0x11e0 [ 642.248748] ? do_pwritev+0x270/0x270 [ 642.249563] ? wait_for_completion_io+0x270/0x270 [ 642.250594] ? rcu_read_lock_any_held+0x75/0xa0 [ 642.251586] ? vfs_write+0x354/0xb10 [ 642.252389] __x64_sys_sendfile64+0x1d1/0x210 [ 642.253351] ? __ia32_sys_sendfile+0x220/0x220 [ 642.254322] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 642.255439] ? syscall_enter_from_user_mode+0x1d/0x50 [ 642.256539] do_syscall_64+0x33/0x40 [ 642.257335] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 642.258425] RIP: 0033:0x7ff83f8c6b19 [ 642.259216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 642.263135] RSP: 002b:00007ff83ce3c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 642.264767] RAX: ffffffffffffffda RBX: 00007ff83f9d9f60 RCX: 00007ff83f8c6b19 [ 642.266295] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 642.267813] RBP: 00007ff83ce3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 642.269325] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 642.270837] R13: 00007ffceba10c2f R14: 00007ff83ce3c300 R15: 0000000000022000 [ 642.272390] CPU: 1 PID: 5835 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 642.273824] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 642.275541] Call Trace: [ 642.276075] dump_stack+0x107/0x167 [ 642.276830] should_fail.cold+0x5/0xa [ 642.277613] ? create_object.isra.0+0x3a/0xa30 [ 642.278560] should_failslab+0x5/0x20 [ 642.279344] kmem_cache_alloc+0x5b/0x310 [ 642.280185] create_object.isra.0+0x3a/0xa30 [ 642.281092] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 642.282145] kmem_cache_alloc+0x159/0x310 [ 642.283025] jbd2__journal_start+0x190/0x7e0 [ 642.283974] __ext4_journal_start_sb+0x214/0x390 [ 642.285192] ext4_dirty_inode+0xbc/0x130 [ 642.286240] ? ext4_setattr+0x22f0/0x22f0 [ 642.287331] __mark_inode_dirty+0x492/0xd30 [ 642.288266] ? current_time+0xac/0x120 [ 642.289103] generic_update_time+0x21c/0x370 [ 642.290015] ? igrab+0xc0/0xc0 [ 642.290809] file_update_time+0x43a/0x520 [ 642.291862] ? evict_inodes+0x470/0x470 [ 642.292680] ? down_write_killable+0x180/0x180 [ 642.293674] file_modified+0x7d/0xa0 [ 642.294654] ext4_file_write_iter+0x8f8/0x1530 [ 642.295671] ? ext4_file_read_iter+0x4c0/0x4c0 [ 642.296606] ? kasan_save_stack+0x32/0x40 [ 642.297464] ? kasan_save_stack+0x1b/0x40 [ 642.298474] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 642.299527] ? iter_file_splice_write+0x165/0xc90 [ 642.300613] ? direct_splice_actor+0x10f/0x170 [ 642.301558] ? splice_direct_to_actor+0x387/0x980 [ 642.302559] ? do_splice_direct+0x1c4/0x290 [ 642.303436] ? do_sendfile+0x553/0x11e0 [ 642.304237] ? __x64_sys_sendfile64+0x1d1/0x210 [ 642.305174] ? do_syscall_64+0x33/0x40 [ 642.305972] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 642.307109] do_iter_readv_writev+0x476/0x750 [ 642.308097] ? _cond_resched+0x10/0x30 [ 642.308933] ? new_sync_write+0x660/0x660 [ 642.309838] ? avc_policy_seqno+0x9/0x70 [ 642.310937] ? selinux_file_permission+0x92/0x520 [ 642.311992] ? security_file_permission+0xb1/0xe0 [ 642.313003] do_iter_write+0x191/0x700 [ 642.313810] ? trace_hardirqs_on+0x5b/0x180 [ 642.314931] vfs_iter_write+0x70/0xa0 [ 642.315780] iter_file_splice_write+0x726/0xc90 [ 642.316922] ? generic_splice_sendpage+0x140/0x140 [ 642.318224] ? security_file_permission+0xb1/0xe0 [ 642.319342] ? generic_splice_sendpage+0x140/0x140 [ 642.320355] direct_splice_actor+0x10f/0x170 [ 642.321264] splice_direct_to_actor+0x387/0x980 [ 642.322227] ? pipe_to_sendpage+0x380/0x380 [ 642.323165] ? do_splice_to+0x160/0x160 [ 642.324107] ? security_file_permission+0xb1/0xe0 [ 642.325112] do_splice_direct+0x1c4/0x290 [ 642.325967] ? splice_direct_to_actor+0x980/0x980 [ 642.327107] ? avc_policy_seqno+0x9/0x70 [ 642.327995] ? security_file_permission+0xb1/0xe0 [ 642.329141] do_sendfile+0x553/0x11e0 [ 642.330063] ? do_pwritev+0x270/0x270 [ 642.330843] ? wait_for_completion_io+0x270/0x270 [ 642.331843] ? rcu_read_lock_any_held+0x75/0xa0 [ 642.332800] ? vfs_write+0x354/0xb10 [ 642.333599] __x64_sys_sendfile64+0x1d1/0x210 [ 642.334737] ? __ia32_sys_sendfile+0x220/0x220 [ 642.335755] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 642.336840] ? syscall_enter_from_user_mode+0x1d/0x50 [ 642.337917] do_syscall_64+0x33/0x40 [ 642.338869] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 642.339943] RIP: 0033:0x7fab802e1b19 [ 642.340698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 642.344479] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 642.346121] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 642.347591] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 642.349057] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 642.350508] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 642.351966] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 18:07:44 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x4000100) 18:07:44 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 36) 18:07:44 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x80ffff, 0x13, r0, 0x0) [ 642.593810] FAULT_INJECTION: forcing a failure. [ 642.593810] name failslab, interval 1, probability 0, space 0, times 0 [ 642.596558] CPU: 1 PID: 5846 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 642.598103] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 642.600273] Call Trace: [ 642.600838] dump_stack+0x107/0x167 [ 642.601637] should_fail.cold+0x5/0xa [ 642.602550] ? create_object.isra.0+0x3a/0xa30 [ 642.603526] should_failslab+0x5/0x20 [ 642.604320] kmem_cache_alloc+0x5b/0x310 [ 642.605175] ? io_wq_create+0x114/0xc00 [ 642.606018] create_object.isra.0+0x3a/0xa30 [ 642.606918] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 642.608036] kmem_cache_alloc_node_trace+0x16d/0x340 [ 642.609088] io_wq_create+0x6ef/0xc00 [ 642.609887] io_uring_alloc_task_context+0x1f1/0x6a0 [ 642.610922] ? io_import_iovec+0x1120/0x1120 [ 642.611848] ? io_apoll_task_func+0x2d0/0x2d0 [ 642.612772] ? __io_req_find_next+0x300/0x300 [ 642.613690] ? do_raw_spin_lock+0x121/0x260 [ 642.614576] ? rwlock_bug.part.0+0x90/0x90 [ 642.615473] __io_uring_add_tctx_node+0x2c6/0x520 [ 642.616479] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 642.617554] ? alloc_fd+0x2e7/0x670 [ 642.618307] io_uring_setup+0x1fbb/0x2980 [ 642.619178] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 642.620232] ? wait_for_completion_io+0x270/0x270 [ 642.621234] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 642.622304] ? syscall_enter_from_user_mode+0x1d/0x50 [ 642.623370] do_syscall_64+0x33/0x40 [ 642.624133] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 642.625176] RIP: 0033:0x7f722f48db19 [ 642.625927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 642.629700] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 642.631276] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 642.632731] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 642.634202] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 642.635677] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 642.637122] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:07:44 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x8000000) 18:07:57 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 37) 18:07:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r0, 0x0) 18:07:57 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(0x0, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:07:57 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:07:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:07:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 9) 18:07:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 9) 18:07:57 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x10000000) [ 656.059901] FAULT_INJECTION: forcing a failure. [ 656.059901] name failslab, interval 1, probability 0, space 0, times 0 [ 656.063532] CPU: 1 PID: 5862 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 656.065644] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 656.068235] Call Trace: [ 656.069063] dump_stack+0x107/0x167 [ 656.070178] should_fail.cold+0x5/0xa [ 656.071393] ? __io_uring_add_tctx_node+0x15c/0x520 [ 656.072936] should_failslab+0x5/0x20 [ 656.074119] kmem_cache_alloc_trace+0x55/0x320 [ 656.074472] FAULT_INJECTION: forcing a failure. [ 656.074472] name failslab, interval 1, probability 0, space 0, times 0 [ 656.075564] __io_uring_add_tctx_node+0x15c/0x520 [ 656.075590] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 656.075610] ? alloc_fd+0x2e7/0x670 [ 656.075647] io_uring_setup+0x1fbb/0x2980 [ 656.083450] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 656.085018] ? wait_for_completion_io+0x270/0x270 [ 656.086561] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 656.088196] ? syscall_enter_from_user_mode+0x1d/0x50 [ 656.089815] do_syscall_64+0x33/0x40 [ 656.090988] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 656.092547] RIP: 0033:0x7f722f48db19 [ 656.093266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 656.096811] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 656.098081] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 656.099047] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 656.100276] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 656.101238] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 656.102423] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 656.103427] CPU: 0 PID: 5866 Comm: syz-executor.1 Not tainted 5.10.258 #1 [ 656.105016] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 656.106939] Call Trace: [ 656.107564] dump_stack+0x107/0x167 [ 656.108414] should_fail.cold+0x5/0xa [ 656.109301] ? jbd2__journal_start+0x190/0x7e0 [ 656.110358] should_failslab+0x5/0x20 [ 656.111243] kmem_cache_alloc+0x5b/0x310 [ 656.112198] jbd2__journal_start+0x190/0x7e0 [ 656.113222] __ext4_journal_start_sb+0x214/0x390 [ 656.114325] ext4_dirty_inode+0xbc/0x130 [ 656.115262] ? ext4_setattr+0x22f0/0x22f0 [ 656.116225] __mark_inode_dirty+0x492/0xd30 [ 656.117218] ? current_time+0xac/0x120 [ 656.118124] generic_update_time+0x21c/0x370 [ 656.119140] ? igrab+0xc0/0xc0 [ 656.119897] file_update_time+0x43a/0x520 [ 656.120857] ? evict_inodes+0x470/0x470 [ 656.121779] ? down_write_killable+0x180/0x180 [ 656.122392] FAULT_INJECTION: forcing a failure. [ 656.122392] name failslab, interval 1, probability 0, space 0, times 0 [ 656.122843] file_modified+0x7d/0xa0 [ 656.125424] ext4_file_write_iter+0x8f8/0x1530 [ 656.126503] ? ext4_file_read_iter+0x4c0/0x4c0 [ 656.127563] ? kasan_save_stack+0x32/0x40 [ 656.128516] ? kasan_save_stack+0x1b/0x40 [ 656.129471] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 656.130642] ? iter_file_splice_write+0x165/0xc90 [ 656.131761] ? direct_splice_actor+0x10f/0x170 [ 656.132813] ? splice_direct_to_actor+0x387/0x980 [ 656.133924] ? do_splice_direct+0x1c4/0x290 [ 656.134916] ? do_sendfile+0x553/0x11e0 [ 656.135842] ? __x64_sys_sendfile64+0x1d1/0x210 [ 656.136914] ? do_syscall_64+0x33/0x40 [ 656.137814] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 656.139054] do_iter_readv_writev+0x476/0x750 [ 656.140113] ? _cond_resched+0x10/0x30 [ 656.141039] ? new_sync_write+0x660/0x660 [ 656.142007] ? avc_policy_seqno+0x9/0x70 [ 656.142958] ? selinux_file_permission+0x92/0x520 [ 656.144126] ? security_file_permission+0xb1/0xe0 [ 656.145262] do_iter_write+0x191/0x700 [ 656.146174] ? trace_hardirqs_on+0x5b/0x180 [ 656.147211] vfs_iter_write+0x70/0xa0 [ 656.148115] iter_file_splice_write+0x726/0xc90 [ 656.149206] ? generic_splice_sendpage+0x140/0x140 [ 656.150376] ? security_file_permission+0xb1/0xe0 [ 656.151535] ? generic_splice_sendpage+0x140/0x140 [ 656.152710] direct_splice_actor+0x10f/0x170 [ 656.153749] splice_direct_to_actor+0x387/0x980 [ 656.154861] ? pipe_to_sendpage+0x380/0x380 [ 656.155888] ? do_splice_to+0x160/0x160 [ 656.156808] ? security_file_permission+0xb1/0xe0 [ 656.157964] do_splice_direct+0x1c4/0x290 [ 656.158943] ? splice_direct_to_actor+0x980/0x980 [ 656.160086] ? avc_policy_seqno+0x9/0x70 [ 656.161066] ? security_file_permission+0xb1/0xe0 [ 656.162216] do_sendfile+0x553/0x11e0 [ 656.163126] ? do_pwritev+0x270/0x270 [ 656.164034] ? wait_for_completion_io+0x270/0x270 [ 656.165184] ? rcu_read_lock_any_held+0x75/0xa0 [ 656.166277] ? vfs_write+0x354/0xb10 [ 656.167170] __x64_sys_sendfile64+0x1d1/0x210 [ 656.168238] ? __ia32_sys_sendfile+0x220/0x220 [ 656.169334] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 656.170574] ? syscall_enter_from_user_mode+0x1d/0x50 [ 656.171804] do_syscall_64+0x33/0x40 [ 656.172686] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 656.173889] RIP: 0033:0x7ff83f8c6b19 [ 656.174771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 656.179140] RSP: 002b:00007ff83ce3c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 656.180970] RAX: ffffffffffffffda RBX: 00007ff83f9d9f60 RCX: 00007ff83f8c6b19 [ 656.182671] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 656.184359] RBP: 00007ff83ce3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 656.186052] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 656.187748] R13: 00007ffceba10c2f R14: 00007ff83ce3c300 R15: 0000000000022000 [ 656.189478] CPU: 1 PID: 5869 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 656.190406] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 656.191538] Call Trace: [ 656.191896] dump_stack+0x107/0x167 [ 656.192402] should_fail.cold+0x5/0xa [ 656.192922] ? jbd2__journal_start+0x190/0x7e0 [ 656.193537] should_failslab+0x5/0x20 [ 656.194046] kmem_cache_alloc+0x5b/0x310 [ 656.194596] jbd2__journal_start+0x190/0x7e0 [ 656.195199] __ext4_journal_start_sb+0x214/0x390 [ 656.195998] ext4_dirty_inode+0xbc/0x130 [ 656.196548] ? ext4_setattr+0x22f0/0x22f0 [ 656.197217] __mark_inode_dirty+0x492/0xd30 [ 656.197801] ? current_time+0xac/0x120 [ 656.198436] generic_update_time+0x21c/0x370 [ 656.199075] ? igrab+0xc0/0xc0 [ 656.199607] file_update_time+0x43a/0x520 [ 656.200297] ? evict_inodes+0x470/0x470 [ 656.200938] ? down_write_killable+0x180/0x180 [ 656.201695] file_modified+0x7d/0xa0 [ 656.202301] ext4_file_write_iter+0x8f8/0x1530 [ 656.203060] ? ext4_file_read_iter+0x4c0/0x4c0 [ 656.203807] ? kasan_save_stack+0x32/0x40 [ 656.204487] ? kasan_save_stack+0x1b/0x40 [ 656.205166] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 656.205991] ? iter_file_splice_write+0x165/0xc90 [ 656.206781] ? direct_splice_actor+0x10f/0x170 [ 656.207533] ? splice_direct_to_actor+0x387/0x980 [ 656.208411] ? do_splice_direct+0x1c4/0x290 [ 656.209186] ? do_sendfile+0x553/0x11e0 [ 656.209835] ? __x64_sys_sendfile64+0x1d1/0x210 [ 656.210596] ? do_syscall_64+0x33/0x40 [ 656.211129] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 656.212013] do_iter_readv_writev+0x476/0x750 [ 656.212820] ? _cond_resched+0x10/0x30 [ 656.213508] ? new_sync_write+0x660/0x660 [ 656.214191] ? avc_policy_seqno+0x9/0x70 [ 656.214860] ? selinux_file_permission+0x92/0x520 [ 656.215671] ? security_file_permission+0xb1/0xe0 [ 656.216466] do_iter_write+0x191/0x700 [ 656.217101] ? trace_hardirqs_on+0x5b/0x180 [ 656.217818] vfs_iter_write+0x70/0xa0 [ 656.218444] iter_file_splice_write+0x726/0xc90 [ 656.219225] ? generic_splice_sendpage+0x140/0x140 [ 656.220057] ? security_file_permission+0xb1/0xe0 [ 656.220846] ? generic_splice_sendpage+0x140/0x140 [ 656.221650] direct_splice_actor+0x10f/0x170 [ 656.222239] splice_direct_to_actor+0x387/0x980 [ 656.223002] ? pipe_to_sendpage+0x380/0x380 [ 656.223719] ? do_splice_to+0x160/0x160 [ 656.224360] ? security_file_permission+0xb1/0xe0 [ 656.225152] do_splice_direct+0x1c4/0x290 [ 656.225835] ? splice_direct_to_actor+0x980/0x980 [ 656.226624] ? avc_policy_seqno+0x9/0x70 [ 656.227305] ? security_file_permission+0xb1/0xe0 [ 656.227972] do_sendfile+0x553/0x11e0 [ 656.228605] ? do_pwritev+0x270/0x270 [ 656.229229] ? wait_for_completion_io+0x270/0x270 [ 656.230026] ? rcu_read_lock_any_held+0x75/0xa0 [ 656.230782] ? vfs_write+0x354/0xb10 [ 656.231405] __x64_sys_sendfile64+0x1d1/0x210 [ 656.232143] ? __ia32_sys_sendfile+0x220/0x220 [ 656.232903] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 656.233747] ? syscall_enter_from_user_mode+0x1d/0x50 [ 656.234584] do_syscall_64+0x33/0x40 [ 656.235189] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 656.235926] RIP: 0033:0x7fab802e1b19 [ 656.236538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 656.239524] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 656.240760] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 656.241906] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 656.243069] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 656.244226] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 656.245383] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 18:07:58 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 38) 18:07:58 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000000, 0x13, r0, 0x0) 18:07:58 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x40000000) [ 656.393395] FAULT_INJECTION: forcing a failure. [ 656.393395] name failslab, interval 1, probability 0, space 0, times 0 [ 656.395900] CPU: 0 PID: 5877 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 656.397375] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 656.399166] Call Trace: [ 656.399746] dump_stack+0x107/0x167 [ 656.400530] should_fail.cold+0x5/0xa [ 656.401348] ? create_object.isra.0+0x3a/0xa30 [ 656.402326] should_failslab+0x5/0x20 [ 656.403144] kmem_cache_alloc+0x5b/0x310 [ 656.404032] create_object.isra.0+0x3a/0xa30 [ 656.404972] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 656.406064] kmem_cache_alloc_trace+0x151/0x320 18:07:58 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x45e00fff) [ 656.407131] __io_uring_add_tctx_node+0x15c/0x520 [ 656.408361] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 656.409494] ? alloc_fd+0x2e7/0x670 [ 656.410300] io_uring_setup+0x1fbb/0x2980 [ 656.411206] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 656.412313] ? wait_for_completion_io+0x270/0x270 [ 656.413385] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 656.414518] ? syscall_enter_from_user_mode+0x1d/0x50 [ 656.415644] do_syscall_64+0x33/0x40 [ 656.416455] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 656.417559] RIP: 0033:0x7f722f48db19 [ 656.418360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 656.422290] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 656.423930] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 656.425448] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 656.426966] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 656.428520] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 656.430055] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:07:58 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(0x0, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:07:58 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000100, 0x13, r0, 0x0) 18:07:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:07:58 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 39) 18:07:58 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x45e03fff) [ 656.692044] FAULT_INJECTION: forcing a failure. [ 656.692044] name failslab, interval 1, probability 0, space 0, times 0 [ 656.693490] CPU: 1 PID: 5892 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 656.694235] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 656.695195] Call Trace: [ 656.695505] dump_stack+0x107/0x167 [ 656.695905] should_fail.cold+0x5/0xa [ 656.696327] ? xas_alloc+0x336/0x440 [ 656.696759] should_failslab+0x5/0x20 [ 656.697180] kmem_cache_alloc+0x5b/0x310 [ 656.697627] ? stack_trace_consume_entry+0x160/0x160 [ 656.698177] xas_alloc+0x336/0x440 [ 656.698586] xas_create+0x34a/0x10d0 [ 656.698992] ? kernel_text_address+0xf2/0x120 [ 656.699522] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 656.700092] xas_store+0x8c/0x1c40 [ 656.700517] __xa_store+0x164/0x2d0 [ 656.700936] ? xa_delete_node+0x280/0x280 [ 656.701426] ? trace_hardirqs_on+0x5b/0x180 [ 656.701922] xa_store+0x31/0x50 [ 656.702303] __io_uring_add_tctx_node+0x1cf/0x520 [ 656.702854] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 656.703461] ? alloc_fd+0x2e7/0x670 [ 656.703884] io_uring_setup+0x1fbb/0x2980 [ 656.704371] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 656.704956] ? wait_for_completion_io+0x270/0x270 [ 656.705520] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 656.706121] ? syscall_enter_from_user_mode+0x1d/0x50 [ 656.706719] do_syscall_64+0x33/0x40 [ 656.707145] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 656.707739] RIP: 0033:0x7f722f48db19 [ 656.708163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 656.710274] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 656.711139] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 656.711958] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 656.712771] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 656.713772] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 656.714600] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:07:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 10) 18:07:58 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x45f03fff) [ 656.781055] FAULT_INJECTION: forcing a failure. [ 656.781055] name failslab, interval 1, probability 0, space 0, times 0 [ 656.782374] CPU: 1 PID: 5898 Comm: syz-executor.1 Not tainted 5.10.258 #1 [ 656.783155] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 656.784125] Call Trace: [ 656.784436] dump_stack+0x107/0x167 [ 656.784861] should_fail.cold+0x5/0xa [ 656.785308] ? create_object.isra.0+0x3a/0xa30 [ 656.785847] should_failslab+0x5/0x20 [ 656.786278] kmem_cache_alloc+0x5b/0x310 [ 656.786751] create_object.isra.0+0x3a/0xa30 [ 656.787258] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 656.787819] kmem_cache_alloc+0x159/0x310 [ 656.788301] jbd2__journal_start+0x190/0x7e0 [ 656.788814] __ext4_journal_start_sb+0x214/0x390 [ 656.789359] ext4_dirty_inode+0xbc/0x130 [ 656.789828] ? ext4_setattr+0x22f0/0x22f0 [ 656.790312] __mark_inode_dirty+0x492/0xd30 [ 656.790842] ? current_time+0xac/0x120 [ 656.791479] generic_update_time+0x21c/0x370 [ 656.791981] ? igrab+0xc0/0xc0 [ 656.792356] file_update_time+0x43a/0x520 [ 656.792838] ? evict_inodes+0x470/0x470 [ 656.793307] ? down_write_killable+0x180/0x180 [ 656.793847] file_modified+0x7d/0xa0 [ 656.794280] ext4_file_write_iter+0x8f8/0x1530 [ 656.794826] ? ext4_file_read_iter+0x4c0/0x4c0 [ 656.795352] ? kasan_save_stack+0x32/0x40 [ 656.795844] ? kasan_save_stack+0x1b/0x40 [ 656.796324] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 656.796879] ? iter_file_splice_write+0x165/0xc90 [ 656.797430] ? direct_splice_actor+0x10f/0x170 [ 656.797956] ? splice_direct_to_actor+0x387/0x980 [ 656.798515] ? do_splice_direct+0x1c4/0x290 [ 656.799007] ? do_sendfile+0x553/0x11e0 [ 656.799481] ? __x64_sys_sendfile64+0x1d1/0x210 [ 656.800019] ? do_syscall_64+0x33/0x40 [ 656.800469] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 656.801057] do_iter_readv_writev+0x476/0x750 [ 656.801573] ? _cond_resched+0x10/0x30 [ 656.802004] ? new_sync_write+0x660/0x660 [ 656.802490] ? avc_policy_seqno+0x9/0x70 [ 656.802943] ? selinux_file_permission+0x92/0x520 [ 656.803505] ? security_file_permission+0xb1/0xe0 [ 656.804040] do_iter_write+0x191/0x700 [ 656.804497] ? trace_hardirqs_on+0x5b/0x180 [ 656.804996] vfs_iter_write+0x70/0xa0 [ 656.805447] iter_file_splice_write+0x726/0xc90 [ 656.806000] ? generic_splice_sendpage+0x140/0x140 [ 656.806561] ? security_file_permission+0xb1/0xe0 [ 656.807116] ? generic_splice_sendpage+0x140/0x140 [ 656.807666] direct_splice_actor+0x10f/0x170 [ 656.808157] splice_direct_to_actor+0x387/0x980 [ 656.808707] ? pipe_to_sendpage+0x380/0x380 [ 656.809184] ? do_splice_to+0x160/0x160 [ 656.809651] ? security_file_permission+0xb1/0xe0 [ 656.810195] do_splice_direct+0x1c4/0x290 [ 656.810692] ? splice_direct_to_actor+0x980/0x980 [ 656.811220] ? avc_policy_seqno+0x9/0x70 [ 656.811707] ? security_file_permission+0xb1/0xe0 [ 656.812260] do_sendfile+0x553/0x11e0 [ 656.812704] ? do_pwritev+0x270/0x270 [ 656.813144] ? wait_for_completion_io+0x270/0x270 [ 656.813701] ? rcu_read_lock_any_held+0x75/0xa0 [ 656.814236] ? vfs_write+0x354/0xb10 [ 656.814661] __x64_sys_sendfile64+0x1d1/0x210 [ 656.815181] ? __ia32_sys_sendfile+0x220/0x220 [ 656.815698] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 656.816311] ? syscall_enter_from_user_mode+0x1d/0x50 [ 656.816881] do_syscall_64+0x33/0x40 [ 656.817316] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 656.817881] RIP: 0033:0x7ff83f8c6b19 [ 656.818316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 656.820350] RSP: 002b:00007ff83ce3c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 656.821240] RAX: ffffffffffffffda RBX: 00007ff83f9d9f60 RCX: 00007ff83f8c6b19 [ 656.822062] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 656.822890] RBP: 00007ff83ce3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 656.823716] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 656.824534] R13: 00007ffceba10c2f R14: 00007ff83ce3c300 R15: 0000000000022000 18:07:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 11) 18:07:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 10) 18:07:58 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8000000, 0x13, r0, 0x0) 18:07:58 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff0fe045) [ 657.018970] FAULT_INJECTION: forcing a failure. [ 657.018970] name failslab, interval 1, probability 0, space 0, times 0 [ 657.020404] CPU: 1 PID: 5909 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 657.021204] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 657.022162] Call Trace: [ 657.022474] dump_stack+0x107/0x167 [ 657.022902] should_fail.cold+0x5/0xa [ 657.023349] ? create_object.isra.0+0x3a/0xa30 [ 657.023878] should_failslab+0x5/0x20 [ 657.024320] kmem_cache_alloc+0x5b/0x310 [ 657.024788] create_object.isra.0+0x3a/0xa30 [ 657.025288] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 657.025870] kmem_cache_alloc+0x159/0x310 [ 657.026349] xas_alloc+0x336/0x440 [ 657.026758] xas_create+0x34a/0x10d0 [ 657.027189] ? kernel_text_address+0xf2/0x120 [ 657.027712] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 657.028308] xas_store+0x8c/0x1c40 [ 657.028723] __xa_store+0x164/0x2d0 [ 657.029139] ? xa_delete_node+0x280/0x280 [ 657.029620] ? trace_hardirqs_on+0x5b/0x180 [ 657.030118] xa_store+0x31/0x50 [ 657.030505] __io_uring_add_tctx_node+0x1cf/0x520 [ 657.031057] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 657.031682] ? alloc_fd+0x2e7/0x670 [ 657.032112] io_uring_setup+0x1fbb/0x2980 [ 657.032602] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 657.033183] ? wait_for_completion_io+0x270/0x270 [ 657.033748] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 657.034355] ? syscall_enter_from_user_mode+0x1d/0x50 [ 657.034948] do_syscall_64+0x33/0x40 [ 657.035382] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 657.035971] RIP: 0033:0x7f722f48db19 [ 657.036393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 657.038499] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 657.038804] FAULT_INJECTION: forcing a failure. [ 657.038804] name failslab, interval 1, probability 0, space 0, times 0 [ 657.039381] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 657.039416] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 657.039432] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 657.044093] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 657.044913] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:07:58 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 40) 18:07:58 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) [ 657.045756] CPU: 0 PID: 5911 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 657.047286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 657.048973] Call Trace: [ 657.049521] dump_stack+0x107/0x167 [ 657.050263] should_fail.cold+0x5/0xa [ 657.051034] ? create_object.isra.0+0x3a/0xa30 [ 657.051965] should_failslab+0x5/0x20 [ 657.052734] kmem_cache_alloc+0x5b/0x310 [ 657.053570] create_object.isra.0+0x3a/0xa30 [ 657.054463] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 657.055500] kmem_cache_alloc+0x159/0x310 [ 657.056351] jbd2__journal_start+0x190/0x7e0 [ 657.057249] __ext4_journal_start_sb+0x214/0x390 [ 657.058214] ext4_file_write_iter+0xee9/0x1530 [ 657.059148] ? ext4_file_read_iter+0x4c0/0x4c0 [ 657.060063] ? kasan_save_stack+0x32/0x40 [ 657.060900] ? kasan_save_stack+0x1b/0x40 [ 657.061733] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 657.062752] ? iter_file_splice_write+0x165/0xc90 [ 657.063726] ? direct_splice_actor+0x10f/0x170 [ 657.064634] ? splice_direct_to_actor+0x387/0x980 [ 657.065595] ? do_splice_direct+0x1c4/0x290 [ 657.066443] ? do_sendfile+0x553/0x11e0 [ 657.067233] ? __x64_sys_sendfile64+0x1d1/0x210 [ 657.068182] ? do_syscall_64+0x33/0x40 [ 657.068959] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 657.070055] do_iter_readv_writev+0x476/0x750 [ 657.070950] ? _cond_resched+0x10/0x30 [ 657.071745] ? new_sync_write+0x660/0x660 [ 657.072583] ? avc_policy_seqno+0x9/0x70 [ 657.073396] ? selinux_file_permission+0x92/0x520 [ 657.074373] ? security_file_permission+0xb1/0xe0 [ 657.075377] do_iter_write+0x191/0x700 [ 657.076170] ? trace_hardirqs_on+0x5b/0x180 [ 657.077048] vfs_iter_write+0x70/0xa0 [ 657.077812] iter_file_splice_write+0x726/0xc90 [ 657.078768] ? generic_splice_sendpage+0x140/0x140 [ 657.079793] ? security_file_permission+0xb1/0xe0 [ 657.080765] ? generic_splice_sendpage+0x140/0x140 [ 657.081748] direct_splice_actor+0x10f/0x170 [ 657.082627] splice_direct_to_actor+0x387/0x980 [ 657.083576] ? pipe_to_sendpage+0x380/0x380 [ 657.084450] ? do_splice_to+0x160/0x160 [ 657.085242] ? security_file_permission+0xb1/0xe0 [ 657.086221] do_splice_direct+0x1c4/0x290 [ 657.087058] ? splice_direct_to_actor+0x980/0x980 [ 657.088018] ? avc_policy_seqno+0x9/0x70 [ 657.088841] ? security_file_permission+0xb1/0xe0 [ 657.089814] do_sendfile+0x553/0x11e0 [ 657.090574] ? do_pwritev+0x270/0x270 [ 657.091325] ? wait_for_completion_io+0x270/0x270 [ 657.092301] ? rcu_read_lock_any_held+0x75/0xa0 [ 657.093211] ? vfs_write+0x354/0xb10 [ 657.093950] __x64_sys_sendfile64+0x1d1/0x210 [ 657.094836] ? __ia32_sys_sendfile+0x220/0x220 [ 657.095759] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 657.096804] ? syscall_enter_from_user_mode+0x1d/0x50 [ 657.097835] do_syscall_64+0x33/0x40 [ 657.098580] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 657.099598] RIP: 0033:0x7fab802e1b19 [ 657.100342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 657.104006] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 657.105532] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 657.106938] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 657.108368] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 657.109774] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 657.111180] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 18:07:58 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 41) [ 657.151542] FAULT_INJECTION: forcing a failure. [ 657.151542] name failslab, interval 1, probability 0, space 0, times 0 [ 657.151791] FAULT_INJECTION: forcing a failure. [ 657.151791] name failslab, interval 1, probability 0, space 0, times 0 [ 657.152997] CPU: 1 PID: 5916 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 657.153004] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 657.153008] Call Trace: [ 657.153026] dump_stack+0x107/0x167 [ 657.153040] should_fail.cold+0x5/0xa [ 657.153055] ? xas_alloc+0x336/0x440 [ 657.153068] should_failslab+0x5/0x20 [ 657.153084] kmem_cache_alloc+0x5b/0x310 [ 657.153103] xas_alloc+0x336/0x440 [ 657.159997] xas_create+0x34a/0x10d0 [ 657.160444] ? kernel_text_address+0xf2/0x120 [ 657.160987] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 657.161628] xas_store+0x8c/0x1c40 [ 657.162033] __xa_store+0x164/0x2d0 [ 657.162467] ? xa_delete_node+0x280/0x280 [ 657.162961] ? trace_hardirqs_on+0x5b/0x180 [ 657.163489] xa_store+0x31/0x50 [ 657.163884] __io_uring_add_tctx_node+0x1cf/0x520 [ 657.164451] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 657.165072] ? alloc_fd+0x2e7/0x670 [ 657.165523] io_uring_setup+0x1fbb/0x2980 [ 657.166022] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 657.166621] ? wait_for_completion_io+0x270/0x270 [ 657.167169] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 657.167805] ? syscall_enter_from_user_mode+0x1d/0x50 [ 657.168427] do_syscall_64+0x33/0x40 [ 657.168874] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 657.169479] RIP: 0033:0x7f722f48db19 [ 657.169896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 657.172096] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 657.173003] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 657.173843] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 657.174638] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 657.175490] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 657.176331] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 657.177215] CPU: 0 PID: 5917 Comm: syz-executor.1 Not tainted 5.10.258 #1 [ 657.178528] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 657.180104] Call Trace: [ 657.180617] dump_stack+0x107/0x167 [ 657.181308] should_fail.cold+0x5/0xa [ 657.182024] ? __iomap_dio_rw+0x1ee/0x1110 [ 657.182818] should_failslab+0x5/0x20 [ 657.183547] kmem_cache_alloc_trace+0x55/0x320 [ 657.184421] __iomap_dio_rw+0x1ee/0x1110 [ 657.185202] ? jbd2_journal_stop+0x188/0xdc0 [ 657.186029] ? iomap_dio_bio_actor+0xe30/0xe30 [ 657.186889] ? ext4_orphan_add+0x253/0x9e0 [ 657.187701] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 657.188621] ? ext4_empty_dir+0xae0/0xae0 [ 657.189389] ? jbd2__journal_start+0xf3/0x7e0 [ 657.190245] iomap_dio_rw+0x31/0x90 [ 657.190932] ext4_file_write_iter+0xe0e/0x1530 [ 657.191815] ? ext4_file_read_iter+0x4c0/0x4c0 [ 657.192676] ? kasan_save_stack+0x32/0x40 [ 657.193442] ? kasan_save_stack+0x1b/0x40 [ 657.194215] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 657.195158] ? iter_file_splice_write+0x165/0xc90 [ 657.196063] ? direct_splice_actor+0x10f/0x170 [ 657.196911] ? splice_direct_to_actor+0x387/0x980 [ 657.197809] ? do_splice_direct+0x1c4/0x290 [ 657.198602] ? do_sendfile+0x553/0x11e0 [ 657.199339] ? __x64_sys_sendfile64+0x1d1/0x210 [ 657.200214] ? do_syscall_64+0x33/0x40 [ 657.200933] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 657.201929] do_iter_readv_writev+0x476/0x750 [ 657.202755] ? _cond_resched+0x10/0x30 [ 657.203486] ? new_sync_write+0x660/0x660 [ 657.204250] ? avc_policy_seqno+0x9/0x70 [ 657.205001] ? selinux_file_permission+0x92/0x520 [ 657.205901] ? security_file_permission+0xb1/0xe0 [ 657.206812] do_iter_write+0x191/0x700 [ 657.207555] ? trace_hardirqs_on+0x5b/0x180 [ 657.208362] vfs_iter_write+0x70/0xa0 [ 657.209071] iter_file_splice_write+0x726/0xc90 [ 657.209946] ? generic_splice_sendpage+0x140/0x140 [ 657.210877] ? security_file_permission+0xb1/0xe0 [ 657.211778] ? generic_splice_sendpage+0x140/0x140 [ 657.212686] direct_splice_actor+0x10f/0x170 [ 657.213506] splice_direct_to_actor+0x387/0x980 [ 657.214368] ? pipe_to_sendpage+0x380/0x380 [ 657.215169] ? do_splice_to+0x160/0x160 [ 657.215909] ? security_file_permission+0xb1/0xe0 [ 657.216811] do_splice_direct+0x1c4/0x290 [ 657.217580] ? splice_direct_to_actor+0x980/0x980 [ 657.218461] ? avc_policy_seqno+0x9/0x70 [ 657.219220] ? security_file_permission+0xb1/0xe0 [ 657.220120] do_sendfile+0x553/0x11e0 [ 657.220828] ? do_pwritev+0x270/0x270 [ 657.221528] ? wait_for_completion_io+0x270/0x270 [ 657.222417] ? rcu_read_lock_any_held+0x75/0xa0 [ 657.223282] ? vfs_write+0x354/0xb10 [ 657.223989] __x64_sys_sendfile64+0x1d1/0x210 [ 657.224810] ? __ia32_sys_sendfile+0x220/0x220 [ 657.225650] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 657.226613] ? syscall_enter_from_user_mode+0x1d/0x50 [ 657.227574] do_syscall_64+0x33/0x40 [ 657.228269] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 657.229209] RIP: 0033:0x7ff83f8c6b19 [ 657.229889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 657.233246] RSP: 002b:00007ff83ce3c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 657.234635] RAX: ffffffffffffffda RBX: 00007ff83f9d9f60 RCX: 00007ff83f8c6b19 [ 657.235923] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 657.237211] RBP: 00007ff83ce3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 657.238521] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 657.239816] R13: 00007ffceba10c2f R14: 00007ff83ce3c300 R15: 0000000000022000 18:08:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 12) 18:08:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 11) 18:08:11 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 42) 18:08:11 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x10000000, 0x13, r0, 0x0) 18:08:11 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff3fe045) [ 669.866323] FAULT_INJECTION: forcing a failure. [ 669.866323] name failslab, interval 1, probability 0, space 0, times 0 [ 669.867761] CPU: 0 PID: 5926 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 669.868605] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 669.869632] Call Trace: [ 669.869971] dump_stack+0x107/0x167 [ 669.870427] should_fail.cold+0x5/0xa [ 669.870900] ? jbd2__journal_start+0x190/0x7e0 [ 669.871471] should_failslab+0x5/0x20 [ 669.871952] kmem_cache_alloc+0x5b/0x310 [ 669.872456] jbd2__journal_start+0x190/0x7e0 [ 669.873001] __ext4_journal_start_sb+0x214/0x390 [ 669.873596] ext4_file_write_iter+0xee9/0x1530 [ 669.874167] ? ext4_file_read_iter+0x4c0/0x4c0 [ 669.874727] ? kasan_save_stack+0x32/0x40 [ 669.875257] ? kasan_save_stack+0x1b/0x40 [ 669.875795] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 669.876453] ? iter_file_splice_write+0x165/0xc90 [ 669.877082] ? direct_splice_actor+0x10f/0x170 [ 669.877666] ? splice_direct_to_actor+0x387/0x980 [ 669.878302] ? do_splice_direct+0x1c4/0x290 [ 669.878844] ? do_sendfile+0x553/0x11e0 [ 669.879334] ? __x64_sys_sendfile64+0x1d1/0x210 [ 669.879937] ? do_syscall_64+0x33/0x40 [ 669.880441] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 669.881119] do_iter_readv_writev+0x476/0x750 [ 669.881709] ? _cond_resched+0x10/0x30 [ 669.882226] ? new_sync_write+0x660/0x660 [ 669.882750] ? avc_policy_seqno+0x9/0x70 [ 669.883268] ? selinux_file_permission+0x92/0x520 [ 669.883899] ? security_file_permission+0xb1/0xe0 [ 669.884510] do_iter_write+0x191/0x700 [ 669.884988] ? trace_hardirqs_on+0x5b/0x180 [ 669.885530] vfs_iter_write+0x70/0xa0 [ 669.886006] iter_file_splice_write+0x726/0xc90 [ 669.886585] ? generic_splice_sendpage+0x140/0x140 [ 669.887196] ? security_file_permission+0xb1/0xe0 [ 669.887799] ? generic_splice_sendpage+0x140/0x140 [ 669.888397] direct_splice_actor+0x10f/0x170 [ 669.888944] splice_direct_to_actor+0x387/0x980 [ 669.889531] ? pipe_to_sendpage+0x380/0x380 [ 669.890057] ? do_splice_to+0x160/0x160 [ 669.890540] ? security_file_permission+0xb1/0xe0 [ 669.891155] do_splice_direct+0x1c4/0x290 [ 669.891668] ? splice_direct_to_actor+0x980/0x980 [ 669.892265] ? avc_policy_seqno+0x9/0x70 [ 669.892771] ? security_file_permission+0xb1/0xe0 [ 669.893358] do_sendfile+0x553/0x11e0 [ 669.893823] ? do_pwritev+0x270/0x270 [ 669.894284] ? wait_for_completion_io+0x270/0x270 [ 669.894865] ? rcu_read_lock_any_held+0x75/0xa0 [ 669.895438] ? vfs_write+0x354/0xb10 [ 669.895924] __x64_sys_sendfile64+0x1d1/0x210 [ 669.896491] ? __ia32_sys_sendfile+0x220/0x220 [ 669.897072] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 669.897736] ? syscall_enter_from_user_mode+0x1d/0x50 [ 669.898392] do_syscall_64+0x33/0x40 [ 669.898865] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 669.899530] RIP: 0033:0x7fab802e1b19 [ 669.900001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 669.902358] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 669.903332] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 669.904251] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 669.905163] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 669.906076] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 669.906987] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 18:08:11 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:08:11 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(0x0, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:08:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) [ 669.948939] FAULT_INJECTION: forcing a failure. 18:08:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 12) [ 669.948939] name failslab, interval 1, probability 0, space 0, times 0 [ 669.951966] CPU: 1 PID: 5934 Comm: syz-executor.1 Not tainted 5.10.258 #1 [ 669.953634] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 669.955689] Call Trace: [ 669.956355] dump_stack+0x107/0x167 [ 669.957272] should_fail.cold+0x5/0xa [ 669.958225] ? create_object.isra.0+0x3a/0xa30 [ 669.959362] should_failslab+0x5/0x20 [ 669.960321] kmem_cache_alloc+0x5b/0x310 [ 669.961340] create_object.isra.0+0x3a/0xa30 [ 669.962435] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 669.963717] kmem_cache_alloc+0x159/0x310 [ 669.964763] jbd2__journal_start+0x190/0x7e0 [ 669.965795] FAULT_INJECTION: forcing a failure. [ 669.965795] name failslab, interval 1, probability 0, space 0, times 0 [ 669.965867] __ext4_journal_start_sb+0x214/0x390 [ 669.968388] ext4_file_write_iter+0xee9/0x1530 [ 669.969543] ? ext4_file_read_iter+0x4c0/0x4c0 [ 669.970672] ? kasan_save_stack+0x32/0x40 [ 669.971688] ? kasan_save_stack+0x1b/0x40 [ 669.972709] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 669.973968] ? iter_file_splice_write+0x165/0xc90 [ 669.975163] ? direct_splice_actor+0x10f/0x170 [ 669.976307] ? splice_direct_to_actor+0x387/0x980 [ 669.977502] ? do_splice_direct+0x1c4/0x290 [ 669.978566] ? do_sendfile+0x553/0x11e0 [ 669.979565] ? __x64_sys_sendfile64+0x1d1/0x210 [ 669.980725] ? do_syscall_64+0x33/0x40 [ 669.981695] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 669.983025] do_iter_readv_writev+0x476/0x750 [ 669.984156] ? _cond_resched+0x10/0x30 [ 669.985127] ? new_sync_write+0x660/0x660 [ 669.986157] ? avc_policy_seqno+0x9/0x70 [ 669.987162] ? selinux_file_permission+0x92/0x520 [ 669.988382] ? security_file_permission+0xb1/0xe0 [ 669.989596] do_iter_write+0x191/0x700 [ 669.990568] ? trace_hardirqs_on+0x5b/0x180 [ 669.991663] vfs_iter_write+0x70/0xa0 [ 669.992613] iter_file_splice_write+0x726/0xc90 [ 669.993788] ? generic_splice_sendpage+0x140/0x140 [ 669.995025] ? security_file_permission+0xb1/0xe0 [ 669.996239] ? generic_splice_sendpage+0x140/0x140 [ 669.997459] direct_splice_actor+0x10f/0x170 [ 669.998559] splice_direct_to_actor+0x387/0x980 [ 669.999735] ? pipe_to_sendpage+0x380/0x380 [ 670.000815] ? do_splice_to+0x160/0x160 [ 670.001804] ? security_file_permission+0xb1/0xe0 [ 670.003011] do_splice_direct+0x1c4/0x290 [ 670.004057] ? splice_direct_to_actor+0x980/0x980 [ 670.005253] ? avc_policy_seqno+0x9/0x70 [ 670.006265] ? security_file_permission+0xb1/0xe0 [ 670.007473] do_sendfile+0x553/0x11e0 [ 670.008446] ? do_pwritev+0x270/0x270 [ 670.009399] ? wait_for_completion_io+0x270/0x270 [ 670.010606] ? rcu_read_lock_any_held+0x75/0xa0 [ 670.011766] ? vfs_write+0x354/0xb10 [ 670.012701] __x64_sys_sendfile64+0x1d1/0x210 [ 670.013814] ? __ia32_sys_sendfile+0x220/0x220 [ 670.014956] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 670.016273] ? syscall_enter_from_user_mode+0x1d/0x50 [ 670.017560] do_syscall_64+0x33/0x40 [ 670.018487] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 670.019776] RIP: 0033:0x7ff83f8c6b19 [ 670.020680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 670.025212] RSP: 002b:00007ff83ce3c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 670.027095] RAX: ffffffffffffffda RBX: 00007ff83f9d9f60 RCX: 00007ff83f8c6b19 [ 670.028879] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 670.030616] RBP: 00007ff83ce3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 670.032377] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 670.034144] R13: 00007ffceba10c2f R14: 00007ff83ce3c300 R15: 0000000000022000 [ 670.035950] CPU: 0 PID: 5940 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 670.036795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 670.037787] Call Trace: [ 670.038112] dump_stack+0x107/0x167 [ 670.038550] should_fail.cold+0x5/0xa [ 670.039012] ? create_object.isra.0+0x3a/0xa30 [ 670.039638] should_failslab+0x5/0x20 [ 670.040255] kmem_cache_alloc+0x5b/0x310 [ 670.040744] create_object.isra.0+0x3a/0xa30 [ 670.041276] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 670.041891] kmem_cache_alloc_trace+0x151/0x320 [ 670.042457] __iomap_dio_rw+0x1ee/0x1110 [ 670.042952] ? jbd2_journal_stop+0x188/0xdc0 [ 670.043475] ? iomap_dio_bio_actor+0xe30/0xe30 [ 670.044030] ? ext4_orphan_add+0x253/0x9e0 [ 670.044536] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 670.045120] ? ext4_empty_dir+0xae0/0xae0 [ 670.045612] ? jbd2__journal_start+0xf3/0x7e0 [ 670.046149] iomap_dio_rw+0x31/0x90 [ 670.046582] ext4_file_write_iter+0xe0e/0x1530 [ 670.047134] ? ext4_file_read_iter+0x4c0/0x4c0 [ 670.047685] ? kasan_save_stack+0x32/0x40 [ 670.048177] ? kasan_save_stack+0x1b/0x40 [ 670.048673] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 670.049288] ? iter_file_splice_write+0x165/0xc90 [ 670.049865] ? direct_splice_actor+0x10f/0x170 [ 670.050405] ? splice_direct_to_actor+0x387/0x980 [ 670.050985] ? do_splice_direct+0x1c4/0x290 [ 670.051492] ? do_sendfile+0x553/0x11e0 [ 670.051653] FAULT_INJECTION: forcing a failure. [ 670.051653] name failslab, interval 1, probability 0, space 0, times 0 [ 670.051968] ? __x64_sys_sendfile64+0x1d1/0x210 [ 670.051980] ? do_syscall_64+0x33/0x40 [ 670.051991] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 670.052012] do_iter_readv_writev+0x476/0x750 [ 670.056790] ? _cond_resched+0x10/0x30 [ 670.057259] ? new_sync_write+0x660/0x660 [ 670.057747] ? avc_policy_seqno+0x9/0x70 [ 670.058225] ? selinux_file_permission+0x92/0x520 [ 670.058799] ? security_file_permission+0xb1/0xe0 [ 670.059376] do_iter_write+0x191/0x700 [ 670.059850] ? trace_hardirqs_on+0x5b/0x180 [ 670.060367] vfs_iter_write+0x70/0xa0 [ 670.060816] iter_file_splice_write+0x726/0xc90 [ 670.061371] ? generic_splice_sendpage+0x140/0x140 [ 670.061956] ? security_file_permission+0xb1/0xe0 [ 670.062526] ? generic_splice_sendpage+0x140/0x140 [ 670.063099] direct_splice_actor+0x10f/0x170 [ 670.063627] splice_direct_to_actor+0x387/0x980 [ 670.064180] ? pipe_to_sendpage+0x380/0x380 [ 670.064687] ? do_splice_to+0x160/0x160 [ 670.065152] ? security_file_permission+0xb1/0xe0 [ 670.065724] do_splice_direct+0x1c4/0x290 [ 670.066211] ? splice_direct_to_actor+0x980/0x980 [ 670.066778] ? avc_policy_seqno+0x9/0x70 [ 670.067257] ? security_file_permission+0xb1/0xe0 [ 670.067835] do_sendfile+0x553/0x11e0 [ 670.068291] ? do_pwritev+0x270/0x270 [ 670.068737] ? wait_for_completion_io+0x270/0x270 [ 670.069293] ? rcu_read_lock_any_held+0x75/0xa0 [ 670.069817] ? vfs_write+0x354/0xb10 [ 670.070247] __x64_sys_sendfile64+0x1d1/0x210 [ 670.070759] ? __ia32_sys_sendfile+0x220/0x220 [ 670.071285] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 670.071894] ? syscall_enter_from_user_mode+0x1d/0x50 [ 670.072481] do_syscall_64+0x33/0x40 [ 670.072907] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 670.073496] RIP: 0033:0x7fab802e1b19 [ 670.073929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 670.076048] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 670.076924] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 670.077733] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 670.078548] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 670.079360] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 670.080183] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 [ 670.081027] CPU: 1 PID: 5938 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 670.082452] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 670.084173] Call Trace: [ 670.084737] dump_stack+0x107/0x167 [ 670.085506] should_fail.cold+0x5/0xa [ 670.086302] ? create_object.isra.0+0x3a/0xa30 [ 670.087256] should_failslab+0x5/0x20 [ 670.088060] kmem_cache_alloc+0x5b/0x310 [ 670.088912] ? mark_held_locks+0x9e/0xe0 [ 670.089765] create_object.isra.0+0x3a/0xa30 [ 670.090905] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 670.092018] kmem_cache_alloc+0x159/0x310 [ 670.093091] xas_alloc+0x336/0x440 [ 670.093870] xas_create+0x34a/0x10d0 [ 670.094853] ? kernel_text_address+0xf2/0x120 [ 670.095857] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 670.097211] xas_store+0x8c/0x1c40 [ 670.098044] __xa_store+0x164/0x2d0 [ 670.098997] ? xa_delete_node+0x280/0x280 [ 670.099909] ? trace_hardirqs_on+0x5b/0x180 [ 670.100843] xa_store+0x31/0x50 [ 670.101562] __io_uring_add_tctx_node+0x1cf/0x520 [ 670.102599] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 670.103718] ? alloc_fd+0x2e7/0x670 [ 670.104523] io_uring_setup+0x1fbb/0x2980 [ 670.105417] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 670.106500] ? wait_for_completion_io+0x270/0x270 [ 670.107563] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 670.108685] ? syscall_enter_from_user_mode+0x1d/0x50 [ 670.109791] do_syscall_64+0x33/0x40 [ 670.110599] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 670.111708] RIP: 0033:0x7f722f48db19 [ 670.112502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 670.116425] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 670.118050] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 670.119568] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 670.121076] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 670.122591] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 670.124126] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:08:24 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 13) 18:08:24 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff3ff045) 18:08:24 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:08:24 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 43) 18:08:24 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:08:24 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x40000000, 0x13, r0, 0x0) 18:08:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:08:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 13) [ 682.356109] FAULT_INJECTION: forcing a failure. [ 682.356109] name failslab, interval 1, probability 0, space 0, times 0 [ 682.359131] CPU: 0 PID: 5949 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 682.360914] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 682.363074] Call Trace: [ 682.363772] dump_stack+0x107/0x167 [ 682.364722] should_fail.cold+0x5/0xa [ 682.365711] ? __iomap_dio_rw+0x1ee/0x1110 [ 682.366804] should_failslab+0x5/0x20 [ 682.367800] kmem_cache_alloc_trace+0x55/0x320 [ 682.368987] __iomap_dio_rw+0x1ee/0x1110 [ 682.370053] ? jbd2_journal_stop+0x188/0xdc0 [ 682.371189] ? iomap_dio_bio_actor+0xe30/0xe30 [ 682.372379] ? ext4_orphan_add+0x253/0x9e0 [ 682.373471] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 682.374743] ? ext4_empty_dir+0xae0/0xae0 [ 682.375828] ? jbd2__journal_start+0xf3/0x7e0 [ 682.376996] iomap_dio_rw+0x31/0x90 [ 682.377942] ext4_file_write_iter+0xe0e/0x1530 [ 682.379145] ? ext4_file_read_iter+0x4c0/0x4c0 [ 682.380331] ? kasan_save_stack+0x32/0x40 [ 682.381397] ? kasan_save_stack+0x1b/0x40 [ 682.382498] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 682.383868] ? iter_file_splice_write+0x165/0xc90 [ 682.385109] ? direct_splice_actor+0x10f/0x170 [ 682.385177] FAULT_INJECTION: forcing a failure. [ 682.385177] name failslab, interval 1, probability 0, space 0, times 0 [ 682.386280] ? splice_direct_to_actor+0x387/0x980 [ 682.386300] ? do_splice_direct+0x1c4/0x290 [ 682.386319] ? do_sendfile+0x553/0x11e0 [ 682.390937] ? __x64_sys_sendfile64+0x1d1/0x210 [ 682.392141] ? do_syscall_64+0x33/0x40 [ 682.393145] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 682.394528] do_iter_readv_writev+0x476/0x750 [ 682.395690] ? _cond_resched+0x10/0x30 [ 682.396623] ? new_sync_write+0x660/0x660 [ 682.397580] ? avc_policy_seqno+0x9/0x70 [ 682.398520] ? selinux_file_permission+0x92/0x520 [ 682.399649] ? security_file_permission+0xb1/0xe0 [ 682.400778] do_iter_write+0x191/0x700 [ 682.401685] ? trace_hardirqs_on+0x5b/0x180 [ 682.402693] vfs_iter_write+0x70/0xa0 [ 682.403577] iter_file_splice_write+0x726/0xc90 [ 682.404680] ? generic_splice_sendpage+0x140/0x140 [ 682.405838] ? security_file_permission+0xb1/0xe0 [ 682.406957] ? generic_splice_sendpage+0x140/0x140 [ 682.408103] direct_splice_actor+0x10f/0x170 [ 682.409125] splice_direct_to_actor+0x387/0x980 [ 682.410207] ? pipe_to_sendpage+0x380/0x380 [ 682.411211] ? do_splice_to+0x160/0x160 [ 682.412139] ? security_file_permission+0xb1/0xe0 [ 682.413265] do_splice_direct+0x1c4/0x290 [ 682.414224] ? splice_direct_to_actor+0x980/0x980 [ 682.415336] ? avc_policy_seqno+0x9/0x70 [ 682.416289] ? security_file_permission+0xb1/0xe0 [ 682.417412] do_sendfile+0x553/0x11e0 [ 682.418305] ? do_pwritev+0x270/0x270 [ 682.419187] ? wait_for_completion_io+0x270/0x270 [ 682.420311] ? perf_trace_preemptirq_template+0x26d/0x400 [ 682.421579] ? perf_trace_preemptirq_template+0x26d/0x400 [ 682.422849] ? rcu_read_lock_any_held+0x75/0xa0 [ 682.423937] __x64_sys_sendfile64+0x1d1/0x210 [ 682.424971] ? __ia32_sys_sendfile+0x220/0x220 [ 682.426034] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 682.427247] ? syscall_enter_from_user_mode+0x1d/0x50 [ 682.428451] do_syscall_64+0x33/0x40 [ 682.429312] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 682.430495] RIP: 0033:0x7fab802e1b19 [ 682.431353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 682.435626] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 682.437403] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 682.439054] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 682.440710] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 682.442359] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 682.444017] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 [ 682.445693] CPU: 1 PID: 5958 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 682.446517] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 682.447519] Call Trace: [ 682.447844] dump_stack+0x107/0x167 [ 682.448277] should_fail.cold+0x5/0xa [ 682.448732] ? xas_alloc+0x336/0x440 [ 682.449234] should_failslab+0x5/0x20 [ 682.449762] kmem_cache_alloc+0x5b/0x310 [ 682.450254] xas_alloc+0x336/0x440 [ 682.450679] xas_create+0x34a/0x10d0 [ 682.451127] ? kernel_text_address+0xf2/0x120 [ 682.451685] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 682.452312] xas_store+0x8c/0x1c40 [ 682.452744] __xa_store+0x164/0x2d0 [ 682.453176] ? xa_delete_node+0x280/0x280 [ 682.453672] ? trace_hardirqs_on+0x5b/0x180 [ 682.454189] xa_store+0x31/0x50 [ 682.454583] __io_uring_add_tctx_node+0x1cf/0x520 [ 682.455156] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 682.455184] FAULT_INJECTION: forcing a failure. [ 682.455184] name failslab, interval 1, probability 0, space 0, times 0 [ 682.455783] ? alloc_fd+0x2e7/0x670 [ 682.455800] io_uring_setup+0x1fbb/0x2980 [ 682.455819] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 682.459852] ? wait_for_completion_io+0x270/0x270 [ 682.460440] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 682.461061] ? syscall_enter_from_user_mode+0x1d/0x50 [ 682.461678] do_syscall_64+0x33/0x40 [ 682.462123] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 682.462729] RIP: 0033:0x7f722f48db19 [ 682.463167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 682.465352] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 682.466253] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 682.467097] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 682.467955] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 682.468799] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 682.469644] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 682.470516] CPU: 0 PID: 5960 Comm: syz-executor.1 Not tainted 5.10.258 #1 [ 682.472115] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 682.474040] Call Trace: [ 682.474651] dump_stack+0x107/0x167 [ 682.475497] should_fail.cold+0x5/0xa [ 682.476389] ? __iomap_dio_rw+0x1ee/0x1110 [ 682.477365] should_failslab+0x5/0x20 [ 682.478244] kmem_cache_alloc_trace+0x55/0x320 [ 682.479314] __iomap_dio_rw+0x1ee/0x1110 [ 682.480278] ? jbd2_journal_stop+0x188/0xdc0 [ 682.481294] ? iomap_dio_bio_actor+0xe30/0xe30 [ 682.482350] ? ext4_orphan_add+0x253/0x9e0 [ 682.483326] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 682.484468] ? ext4_empty_dir+0xae0/0xae0 [ 682.485424] ? jbd2__journal_start+0xf3/0x7e0 [ 682.486466] iomap_dio_rw+0x31/0x90 [ 682.487312] ext4_file_write_iter+0xe0e/0x1530 [ 682.488392] ? ext4_file_read_iter+0x4c0/0x4c0 [ 682.489444] ? kasan_save_stack+0x32/0x40 [ 682.490395] ? kasan_save_stack+0x1b/0x40 [ 682.491348] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 682.492525] ? iter_file_splice_write+0x165/0xc90 [ 682.493634] ? direct_splice_actor+0x10f/0x170 [ 682.494686] ? splice_direct_to_actor+0x387/0x980 [ 682.495807] ? do_splice_direct+0x1c4/0x290 [ 682.496801] ? do_sendfile+0x553/0x11e0 [ 682.497718] ? __x64_sys_sendfile64+0x1d1/0x210 [ 682.498789] ? do_syscall_64+0x33/0x40 [ 682.499694] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 682.500937] do_iter_readv_writev+0x476/0x750 [ 682.501970] ? _cond_resched+0x10/0x30 [ 682.502868] ? new_sync_write+0x660/0x660 [ 682.503835] ? avc_policy_seqno+0x9/0x70 [ 682.504775] ? selinux_file_permission+0x92/0x520 [ 682.505891] ? security_file_permission+0xb1/0xe0 [ 682.507019] do_iter_write+0x191/0x700 [ 682.507928] ? trace_hardirqs_on+0x5b/0x180 [ 682.508932] vfs_iter_write+0x70/0xa0 [ 682.509813] iter_file_splice_write+0x726/0xc90 [ 682.510909] ? generic_splice_sendpage+0x140/0x140 [ 682.512074] ? security_file_permission+0xb1/0xe0 [ 682.513200] ? generic_splice_sendpage+0x140/0x140 [ 682.514335] direct_splice_actor+0x10f/0x170 [ 682.515354] splice_direct_to_actor+0x387/0x980 [ 682.516439] ? pipe_to_sendpage+0x380/0x380 [ 682.517420] ? do_splice_to+0x160/0x160 [ 682.518318] ? security_file_permission+0xb1/0xe0 [ 682.519420] do_splice_direct+0x1c4/0x290 [ 682.520371] ? splice_direct_to_actor+0x980/0x980 [ 682.521461] ? avc_policy_seqno+0x9/0x70 [ 682.522387] ? security_file_permission+0xb1/0xe0 [ 682.523485] do_sendfile+0x553/0x11e0 [ 682.524362] ? do_pwritev+0x270/0x270 [ 682.525225] ? wait_for_completion_io+0x270/0x270 [ 682.526314] ? perf_trace_preemptirq_template+0x26d/0x400 [ 682.527557] ? perf_trace_preemptirq_template+0x26d/0x400 [ 682.528810] ? rcu_read_lock_any_held+0x75/0xa0 [ 682.529868] __x64_sys_sendfile64+0x1d1/0x210 [ 682.530882] ? __ia32_sys_sendfile+0x220/0x220 [ 682.531923] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 682.533105] ? syscall_enter_from_user_mode+0x1d/0x50 [ 682.534271] do_syscall_64+0x33/0x40 [ 682.535118] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 682.536282] RIP: 0033:0x7ff83f8c6b19 [ 682.537120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 682.541286] RSP: 002b:00007ff83ce3c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 682.543015] RAX: ffffffffffffffda RBX: 00007ff83f9d9f60 RCX: 00007ff83f8c6b19 [ 682.544628] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 682.546235] RBP: 00007ff83ce3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 682.547858] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 682.549478] R13: 00007ffceba10c2f R14: 00007ff83ce3c300 R15: 0000000000022000 [ 682.574164] FAULT_INJECTION: forcing a failure. [ 682.574164] name failslab, interval 1, probability 0, space 0, times 0 [ 682.575497] CPU: 1 PID: 5969 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 682.576299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 682.577269] Call Trace: [ 682.577581] dump_stack+0x107/0x167 18:08:24 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 14) 18:08:24 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) [ 682.578177] should_fail.cold+0x5/0xa [ 682.578679] ? create_object.isra.0+0x3a/0xa30 [ 682.579212] should_failslab+0x5/0x20 [ 682.579675] kmem_cache_alloc+0x5b/0x310 [ 682.580159] create_object.isra.0+0x3a/0xa30 [ 682.580664] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 682.581260] kmem_cache_alloc_trace+0x151/0x320 [ 682.581799] __iomap_dio_rw+0x1ee/0x1110 [ 682.582276] ? jbd2_journal_stop+0x188/0xdc0 [ 682.582781] ? iomap_dio_bio_actor+0xe30/0xe30 [ 682.583320] ? ext4_orphan_add+0x253/0x9e0 [ 682.583824] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 682.584402] ? ext4_empty_dir+0xae0/0xae0 [ 682.584882] ? jbd2__journal_start+0xf3/0x7e0 [ 682.585398] iomap_dio_rw+0x31/0x90 [ 682.585826] ext4_file_write_iter+0xe0e/0x1530 18:08:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) [ 682.586362] ? ext4_file_read_iter+0x4c0/0x4c0 [ 682.587033] ? kasan_save_stack+0x32/0x40 [ 682.587514] ? kasan_save_stack+0x1b/0x40 [ 682.588002] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 682.588587] ? iter_file_splice_write+0x165/0xc90 [ 682.589143] ? direct_splice_actor+0x10f/0x170 [ 682.589666] ? splice_direct_to_actor+0x387/0x980 [ 682.590223] ? do_splice_direct+0x1c4/0x290 [ 682.590723] ? do_sendfile+0x553/0x11e0 [ 682.591181] ? __x64_sys_sendfile64+0x1d1/0x210 [ 682.591729] ? do_syscall_64+0x33/0x40 [ 682.592174] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 682.592807] do_iter_readv_writev+0x476/0x750 [ 682.593333] ? _cond_resched+0x10/0x30 [ 682.593786] ? new_sync_write+0x660/0x660 [ 682.594264] ? avc_policy_seqno+0x9/0x70 [ 682.594735] ? selinux_file_permission+0x92/0x520 [ 682.595291] ? security_file_permission+0xb1/0xe0 [ 682.595853] do_iter_write+0x191/0x700 [ 682.596298] ? trace_hardirqs_on+0x5b/0x180 [ 682.596795] vfs_iter_write+0x70/0xa0 [ 682.597232] iter_file_splice_write+0x726/0xc90 [ 682.597772] ? generic_splice_sendpage+0x140/0x140 [ 682.598345] ? security_file_permission+0xb1/0xe0 [ 682.598902] ? generic_splice_sendpage+0x140/0x140 [ 682.599465] direct_splice_actor+0x10f/0x170 [ 682.599978] splice_direct_to_actor+0x387/0x980 [ 682.600511] ? pipe_to_sendpage+0x380/0x380 [ 682.601007] ? do_splice_to+0x160/0x160 [ 682.601458] ? security_file_permission+0xb1/0xe0 [ 682.602017] do_splice_direct+0x1c4/0x290 [ 682.602493] ? splice_direct_to_actor+0x980/0x980 [ 682.603040] ? avc_policy_seqno+0x9/0x70 [ 682.603505] ? security_file_permission+0xb1/0xe0 [ 682.604066] do_sendfile+0x553/0x11e0 [ 682.604505] ? do_pwritev+0x270/0x270 [ 682.604938] ? wait_for_completion_io+0x270/0x270 [ 682.605490] ? rcu_read_lock_any_held+0x75/0xa0 [ 682.606029] ? vfs_write+0x354/0xb10 [ 682.606461] __x64_sys_sendfile64+0x1d1/0x210 [ 682.606976] ? __ia32_sys_sendfile+0x220/0x220 18:08:24 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xffff8000) [ 682.607501] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 682.608240] ? syscall_enter_from_user_mode+0x1d/0x50 [ 682.608841] do_syscall_64+0x33/0x40 [ 682.609269] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 682.609855] RIP: 0033:0x7fab802e1b19 [ 682.610285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 682.612407] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 682.613279] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 682.614094] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 682.614916] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 682.615745] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 682.616566] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 18:08:24 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 44) 18:08:24 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:08:24 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x46000fff, 0x13, r0, 0x0) 18:08:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) [ 682.727152] FAULT_INJECTION: forcing a failure. [ 682.727152] name failslab, interval 1, probability 0, space 0, times 0 [ 682.729843] CPU: 0 PID: 5977 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 682.731388] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 682.733276] Call Trace: [ 682.733876] dump_stack+0x107/0x167 [ 682.734703] should_fail.cold+0x5/0xa [ 682.735570] ? create_object.isra.0+0x3a/0xa30 [ 682.736620] should_failslab+0x5/0x20 [ 682.737481] kmem_cache_alloc+0x5b/0x310 [ 682.738410] ? mark_held_locks+0x9e/0xe0 [ 682.739333] create_object.isra.0+0x3a/0xa30 [ 682.740333] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 682.741489] kmem_cache_alloc+0x159/0x310 [ 682.742435] xas_alloc+0x336/0x440 [ 682.743242] xas_create+0x34a/0x10d0 [ 682.744099] ? kernel_text_address+0xf2/0x120 [ 682.745117] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 682.746304] xas_store+0x8c/0x1c40 [ 682.747125] __xa_store+0x164/0x2d0 [ 682.747958] ? xa_delete_node+0x280/0x280 [ 682.748906] ? trace_hardirqs_on+0x5b/0x180 [ 682.749892] xa_store+0x31/0x50 [ 682.750644] __io_uring_add_tctx_node+0x1cf/0x520 [ 682.751741] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 682.752925] ? alloc_fd+0x2e7/0x670 [ 682.753756] io_uring_setup+0x1fbb/0x2980 [ 682.754704] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 682.755855] ? wait_for_completion_io+0x270/0x270 [ 682.756965] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 682.758151] ? syscall_enter_from_user_mode+0x1d/0x50 [ 682.759321] do_syscall_64+0x33/0x40 [ 682.760173] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 682.761327] RIP: 0033:0x7f722f48db19 [ 682.762170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 682.766374] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 682.768123] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 682.769753] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 682.771342] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 682.772949] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 682.774570] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:08:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 15) 18:08:42 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x800000000) 18:08:42 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:08:42 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x46003fff, 0x13, r0, 0x0) 18:08:42 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:08:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:08:42 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 45) 18:08:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 14) [ 700.969069] FAULT_INJECTION: forcing a failure. [ 700.969069] name failslab, interval 1, probability 0, space 0, times 0 [ 700.971573] CPU: 1 PID: 6000 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 700.973053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 700.974823] Call Trace: [ 700.975402] dump_stack+0x107/0x167 [ 700.976195] should_fail.cold+0x5/0xa [ 700.977008] ? jbd2__journal_start+0x190/0x7e0 [ 700.977985] should_failslab+0x5/0x20 [ 700.978802] kmem_cache_alloc+0x5b/0x310 [ 700.979671] ? __kernel_text_address+0x9/0x40 [ 700.980645] jbd2__journal_start+0x190/0x7e0 [ 700.981593] __ext4_journal_start_sb+0x214/0x390 [ 700.982611] ext4_iomap_begin+0x485/0x700 [ 700.983511] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 700.984571] ? kasan_save_stack+0x1b/0x40 [ 700.985458] ? ext4_file_write_iter+0xe0e/0x1530 [ 700.986477] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 700.987830] ? splice_direct_to_actor+0x387/0x980 [ 700.988867] ? do_splice_direct+0x1c4/0x290 [ 700.989786] ? do_sendfile+0x553/0x11e0 [ 700.990634] ? __x64_sys_sendfile64+0x1d1/0x210 [ 700.991627] ? do_syscall_64+0x33/0x40 [ 700.992473] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 700.993619] iomap_apply+0x164/0x810 [ 700.994415] ? iomap_dio_rw+0x90/0x90 [ 700.995236] ? trace_event_raw_event_iomap_class+0x560/0x560 [ 700.996489] ? mark_held_locks+0x9e/0xe0 [ 700.997373] ? filemap_check_errors+0xa5/0x150 [ 700.998354] __iomap_dio_rw+0x6cd/0x1110 [ 700.999215] ? iomap_dio_rw+0x90/0x90 [ 701.000059] ? iomap_dio_bio_actor+0xe30/0xe30 [ 701.001037] ? ext4_orphan_add+0x253/0x9e0 [ 701.001946] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 701.003004] ? ext4_empty_dir+0xae0/0xae0 [ 701.003896] ? jbd2__journal_start+0xf3/0x7e0 [ 701.004864] iomap_dio_rw+0x31/0x90 [ 701.005650] ext4_file_write_iter+0xe0e/0x1530 [ 701.006647] ? ext4_file_read_iter+0x4c0/0x4c0 [ 701.007619] ? kasan_save_stack+0x32/0x40 [ 701.008512] ? kasan_save_stack+0x1b/0x40 [ 701.009546] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 701.010656] ? iter_file_splice_write+0x165/0xc90 [ 701.011688] ? direct_splice_actor+0x10f/0x170 [ 701.012678] ? splice_direct_to_actor+0x387/0x980 [ 701.013708] ? do_splice_direct+0x1c4/0x290 [ 701.014624] ? do_sendfile+0x553/0x11e0 [ 701.015511] ? __x64_sys_sendfile64+0x1d1/0x210 [ 701.016700] ? do_syscall_64+0x33/0x40 [ 701.017540] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 701.018695] do_iter_readv_writev+0x476/0x750 [ 701.019660] ? _cond_resched+0x10/0x30 [ 701.020510] ? new_sync_write+0x660/0x660 [ 701.021398] ? avc_policy_seqno+0x9/0x70 [ 701.022266] ? selinux_file_permission+0x92/0x520 [ 701.023301] ? security_file_permission+0xb1/0xe0 [ 701.024359] do_iter_write+0x191/0x700 [ 701.025196] ? trace_hardirqs_on+0x5b/0x180 [ 701.026128] vfs_iter_write+0x70/0xa0 [ 701.026947] iter_file_splice_write+0x726/0xc90 [ 701.027974] ? generic_splice_sendpage+0x140/0x140 [ 701.029042] ? security_file_permission+0xb1/0xe0 [ 701.030084] ? generic_splice_sendpage+0x140/0x140 [ 701.031142] direct_splice_actor+0x10f/0x170 [ 701.032109] splice_direct_to_actor+0x387/0x980 [ 701.033166] ? pipe_to_sendpage+0x380/0x380 [ 701.034277] ? do_splice_to+0x160/0x160 [ 701.035131] ? security_file_permission+0xb1/0xe0 [ 701.036191] do_splice_direct+0x1c4/0x290 [ 701.037081] ? splice_direct_to_actor+0x980/0x980 [ 701.038108] ? avc_policy_seqno+0x9/0x70 [ 701.038986] ? security_file_permission+0xb1/0xe0 [ 701.040032] do_sendfile+0x553/0x11e0 [ 701.040855] ? do_pwritev+0x270/0x270 [ 701.041673] ? wait_for_completion_io+0x270/0x270 [ 701.042702] ? perf_trace_preemptirq_template+0x26d/0x400 [ 701.043880] ? perf_trace_preemptirq_template+0x26d/0x400 [ 701.045054] ? rcu_read_lock_any_held+0x75/0xa0 [ 701.046054] __x64_sys_sendfile64+0x1d1/0x210 [ 701.047014] ? __ia32_sys_sendfile+0x220/0x220 [ 701.048180] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 701.049381] ? syscall_enter_from_user_mode+0x1d/0x50 [ 701.050495] do_syscall_64+0x33/0x40 [ 701.051292] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 701.052404] RIP: 0033:0x7fab802e1b19 [ 701.053202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 701.057172] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 701.059011] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 701.060554] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 701.062332] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 701.063872] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 701.065394] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 [ 701.078327] FAULT_INJECTION: forcing a failure. [ 701.078327] name failslab, interval 1, probability 0, space 0, times 0 [ 701.080881] CPU: 0 PID: 6006 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 701.082352] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 701.084149] Call Trace: [ 701.084723] dump_stack+0x107/0x167 [ 701.085513] should_fail.cold+0x5/0xa [ 701.086336] ? xas_alloc+0x336/0x440 [ 701.087148] should_failslab+0x5/0x20 [ 701.087978] kmem_cache_alloc+0x5b/0x310 [ 701.088855] xas_alloc+0x336/0x440 [ 701.089631] xas_create+0x34a/0x10d0 [ 701.090456] ? kernel_text_address+0xf2/0x120 [ 701.091424] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 701.092570] xas_store+0x8c/0x1c40 [ 701.093349] __xa_store+0x164/0x2d0 [ 701.094132] ? xa_delete_node+0x280/0x280 [ 701.095031] ? trace_hardirqs_on+0x5b/0x180 [ 701.095986] xa_store+0x31/0x50 [ 701.096698] __io_uring_add_tctx_node+0x1cf/0x520 [ 701.097737] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 701.098862] ? alloc_fd+0x2e7/0x670 [ 701.099656] io_uring_setup+0x1fbb/0x2980 [ 701.100561] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 701.101646] ? wait_for_completion_io+0x270/0x270 [ 701.102713] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 701.103839] ? syscall_enter_from_user_mode+0x1d/0x50 [ 701.104959] do_syscall_64+0x33/0x40 [ 701.105763] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 701.106862] RIP: 0033:0x7f722f48db19 [ 701.107657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 701.111613] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 701.113250] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 701.114786] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 701.116320] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 701.117848] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 701.119380] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 701.129455] FAULT_INJECTION: forcing a failure. [ 701.129455] name failslab, interval 1, probability 0, space 0, times 0 [ 701.131903] CPU: 0 PID: 6009 Comm: syz-executor.1 Not tainted 5.10.258 #1 [ 701.133380] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 701.135171] Call Trace: [ 701.135739] dump_stack+0x107/0x167 [ 701.136540] should_fail.cold+0x5/0xa [ 701.137367] ? create_object.isra.0+0x3a/0xa30 [ 701.138357] should_failslab+0x5/0x20 [ 701.139177] kmem_cache_alloc+0x5b/0x310 [ 701.140067] create_object.isra.0+0x3a/0xa30 [ 701.141008] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 701.142104] kmem_cache_alloc_trace+0x151/0x320 [ 701.143112] __iomap_dio_rw+0x1ee/0x1110 [ 701.144006] ? jbd2_journal_stop+0x188/0xdc0 [ 701.144954] ? iomap_dio_bio_actor+0xe30/0xe30 [ 701.145936] ? ext4_orphan_add+0x253/0x9e0 [ 701.146847] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 701.147913] ? ext4_empty_dir+0xae0/0xae0 [ 701.148800] ? jbd2__journal_start+0xf3/0x7e0 [ 701.149772] iomap_dio_rw+0x31/0x90 [ 701.150563] ext4_file_write_iter+0xe0e/0x1530 [ 701.151558] ? ext4_file_read_iter+0x4c0/0x4c0 [ 701.152542] ? kasan_save_stack+0x32/0x40 [ 701.153428] ? kasan_save_stack+0x1b/0x40 [ 701.154313] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 701.155402] ? iter_file_splice_write+0x165/0xc90 [ 701.156446] ? direct_splice_actor+0x10f/0x170 [ 701.157423] ? splice_direct_to_actor+0x387/0x980 [ 701.158457] ? do_splice_direct+0x1c4/0x290 [ 701.159374] ? do_sendfile+0x553/0x11e0 [ 701.160232] ? __x64_sys_sendfile64+0x1d1/0x210 [ 701.161230] ? do_syscall_64+0x33/0x40 [ 701.162067] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 701.163219] do_iter_readv_writev+0x476/0x750 [ 701.164186] ? _cond_resched+0x10/0x30 [ 701.165023] ? new_sync_write+0x660/0x660 [ 701.165911] ? avc_policy_seqno+0x9/0x70 [ 701.166782] ? selinux_file_permission+0x92/0x520 [ 701.167818] ? security_file_permission+0xb1/0xe0 [ 701.168868] do_iter_write+0x191/0x700 [ 701.169715] ? trace_hardirqs_on+0x5b/0x180 [ 701.170648] vfs_iter_write+0x70/0xa0 [ 701.171470] iter_file_splice_write+0x726/0xc90 [ 701.172493] ? generic_splice_sendpage+0x140/0x140 [ 701.173571] ? security_file_permission+0xb1/0xe0 [ 701.174611] ? generic_splice_sendpage+0x140/0x140 [ 701.175670] direct_splice_actor+0x10f/0x170 [ 701.176629] splice_direct_to_actor+0x387/0x980 [ 701.177636] ? pipe_to_sendpage+0x380/0x380 [ 701.178571] ? do_splice_to+0x160/0x160 [ 701.179424] ? security_file_permission+0xb1/0xe0 [ 701.180480] do_splice_direct+0x1c4/0x290 [ 701.181373] ? splice_direct_to_actor+0x980/0x980 [ 701.182410] ? avc_policy_seqno+0x9/0x70 [ 701.183291] ? security_file_permission+0xb1/0xe0 [ 701.184342] do_sendfile+0x553/0x11e0 [ 701.185174] ? do_pwritev+0x270/0x270 [ 701.186006] ? wait_for_completion_io+0x270/0x270 [ 701.187048] ? rcu_read_lock_any_held+0x75/0xa0 [ 701.188052] ? vfs_write+0x354/0xb10 [ 701.188857] __x64_sys_sendfile64+0x1d1/0x210 [ 701.189816] ? __ia32_sys_sendfile+0x220/0x220 [ 701.190804] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 701.191937] ? syscall_enter_from_user_mode+0x1d/0x50 [ 701.193049] do_syscall_64+0x33/0x40 [ 701.193853] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 701.194955] RIP: 0033:0x7ff83f8c6b19 [ 701.195752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 701.200500] RSP: 002b:00007ff83ce1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 701.202135] RAX: ffffffffffffffda RBX: 00007ff83f9da020 RCX: 00007ff83f8c6b19 [ 701.203664] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 701.205197] RBP: 00007ff83ce1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 701.206729] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 701.208287] R13: 00007ffceba10c2f R14: 00007ff83ce1b300 R15: 0000000000022000 18:08:43 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x1000000000) 18:08:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:08:43 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 46) 18:08:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 16) 18:08:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) [ 701.356396] FAULT_INJECTION: forcing a failure. [ 701.356396] name failslab, interval 1, probability 0, space 0, times 0 [ 701.358844] CPU: 1 PID: 6015 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 701.360315] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 701.362090] Call Trace: [ 701.362656] dump_stack+0x107/0x167 [ 701.363437] should_fail.cold+0x5/0xa [ 701.364265] ? create_object.isra.0+0x3a/0xa30 [ 701.365242] should_failslab+0x5/0x20 [ 701.366056] kmem_cache_alloc+0x5b/0x310 [ 701.366929] ? mark_held_locks+0x9e/0xe0 [ 701.367802] create_object.isra.0+0x3a/0xa30 [ 701.368747] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 701.369838] kmem_cache_alloc+0x159/0x310 [ 701.370730] xas_alloc+0x336/0x440 [ 701.371493] xas_create+0x34a/0x10d0 [ 701.372305] ? kernel_text_address+0xf2/0x120 [ 701.373262] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 701.374388] xas_store+0x8c/0x1c40 [ 701.375162] __xa_store+0x164/0x2d0 [ 701.375950] ? xa_delete_node+0x280/0x280 [ 701.376844] ? trace_hardirqs_on+0x5b/0x180 [ 701.377772] xa_store+0x31/0x50 [ 701.378481] __io_uring_add_tctx_node+0x1cf/0x520 [ 701.379513] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 701.380637] ? alloc_fd+0x2e7/0x670 [ 701.381428] io_uring_setup+0x1fbb/0x2980 [ 701.382325] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 701.383406] ? wait_for_completion_io+0x270/0x270 [ 701.384473] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 701.385598] ? syscall_enter_from_user_mode+0x1d/0x50 [ 701.386705] do_syscall_64+0x33/0x40 [ 701.387503] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 701.388609] RIP: 0033:0x7f722f48db19 [ 701.389401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 701.393337] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 701.394963] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 701.396492] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 701.398016] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 701.399539] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 701.401095] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 701.424481] FAULT_INJECTION: forcing a failure. [ 701.424481] name failslab, interval 1, probability 0, space 0, times 0 18:08:43 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x10000000000) [ 701.427049] CPU: 0 PID: 6017 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 701.428778] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 701.430558] Call Trace: [ 701.431125] dump_stack+0x107/0x167 [ 701.431921] should_fail.cold+0x5/0xa [ 701.432742] ? jbd2__journal_start+0x190/0x7e0 [ 701.433721] should_failslab+0x5/0x20 [ 701.434537] kmem_cache_alloc+0x5b/0x310 [ 701.435408] ? __kernel_text_address+0x9/0x40 [ 701.436387] jbd2__journal_start+0x190/0x7e0 [ 701.437339] __ext4_journal_start_sb+0x214/0x390 [ 701.438360] ext4_iomap_begin+0x485/0x700 [ 701.439266] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 701.440321] ? kasan_save_stack+0x1b/0x40 [ 701.441210] ? ext4_file_write_iter+0xe0e/0x1530 [ 701.442229] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 701.443586] ? splice_direct_to_actor+0x387/0x980 [ 701.444623] ? do_splice_direct+0x1c4/0x290 [ 701.445543] ? do_sendfile+0x553/0x11e0 [ 701.446394] ? __x64_sys_sendfile64+0x1d1/0x210 [ 701.447388] ? do_syscall_64+0x33/0x40 [ 701.448233] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 701.449382] iomap_apply+0x164/0x810 [ 701.450178] ? iomap_dio_rw+0x90/0x90 [ 701.450999] ? trace_event_raw_event_iomap_class+0x560/0x560 [ 701.452255] ? mark_held_locks+0x9e/0xe0 [ 701.453142] ? filemap_check_errors+0xa5/0x150 [ 701.454125] __iomap_dio_rw+0x6cd/0x1110 [ 701.454991] ? iomap_dio_rw+0x90/0x90 [ 701.455823] ? iomap_dio_bio_actor+0xe30/0xe30 [ 701.456811] ? ext4_orphan_add+0x253/0x9e0 [ 701.457717] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 701.458772] ? ext4_empty_dir+0xae0/0xae0 [ 701.459657] ? jbd2__journal_start+0xf3/0x7e0 [ 701.460630] iomap_dio_rw+0x31/0x90 [ 701.461415] ext4_file_write_iter+0xe0e/0x1530 [ 701.462410] ? ext4_file_read_iter+0x4c0/0x4c0 [ 701.463384] ? kasan_save_stack+0x32/0x40 [ 701.464275] ? kasan_save_stack+0x1b/0x40 [ 701.465164] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 701.466249] ? iter_file_splice_write+0x165/0xc90 [ 701.467279] ? direct_splice_actor+0x10f/0x170 [ 701.468268] ? splice_direct_to_actor+0x387/0x980 [ 701.469297] ? do_splice_direct+0x1c4/0x290 [ 701.470216] ? do_sendfile+0x553/0x11e0 [ 701.471064] ? __x64_sys_sendfile64+0x1d1/0x210 [ 701.472066] ? do_syscall_64+0x33/0x40 [ 701.472899] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 701.474049] do_iter_readv_writev+0x476/0x750 [ 701.475009] ? _cond_resched+0x10/0x30 [ 701.475843] ? new_sync_write+0x660/0x660 [ 701.476740] ? avc_policy_seqno+0x9/0x70 [ 701.477610] ? selinux_file_permission+0x92/0x520 [ 701.478648] ? security_file_permission+0xb1/0xe0 [ 701.479693] do_iter_write+0x191/0x700 [ 701.480542] ? trace_hardirqs_on+0x5b/0x180 [ 701.481477] vfs_iter_write+0x70/0xa0 [ 701.482296] iter_file_splice_write+0x726/0xc90 [ 701.483312] ? generic_splice_sendpage+0x140/0x140 [ 701.484391] ? security_file_permission+0xb1/0xe0 [ 701.485426] ? generic_splice_sendpage+0x140/0x140 [ 701.486477] direct_splice_actor+0x10f/0x170 [ 701.487427] splice_direct_to_actor+0x387/0x980 [ 701.488436] ? pipe_to_sendpage+0x380/0x380 [ 701.489364] ? do_splice_to+0x160/0x160 [ 701.490216] ? security_file_permission+0xb1/0xe0 [ 701.491257] do_splice_direct+0x1c4/0x290 [ 701.492154] ? splice_direct_to_actor+0x980/0x980 [ 701.493183] ? avc_policy_seqno+0x9/0x70 [ 701.494058] ? security_file_permission+0xb1/0xe0 [ 701.495098] do_sendfile+0x553/0x11e0 [ 701.495935] ? do_pwritev+0x270/0x270 [ 701.496751] ? wait_for_completion_io+0x270/0x270 [ 701.497784] ? rcu_read_lock_any_held+0x75/0xa0 [ 701.498773] ? vfs_write+0x354/0xb10 [ 701.499578] __x64_sys_sendfile64+0x1d1/0x210 [ 701.500545] ? __ia32_sys_sendfile+0x220/0x220 [ 701.501527] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 701.502652] ? syscall_enter_from_user_mode+0x1d/0x50 [ 701.503758] do_syscall_64+0x33/0x40 [ 701.504563] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 701.505660] RIP: 0033:0x7fab802e1b19 [ 701.506455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 701.510404] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 701.512039] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 701.513567] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 701.515094] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 701.516629] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 701.518156] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 18:08:43 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 47) 18:08:43 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) [ 701.630056] FAULT_INJECTION: forcing a failure. [ 701.630056] name failslab, interval 1, probability 0, space 0, times 0 [ 701.632632] CPU: 1 PID: 6025 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 701.634105] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 701.636180] Call Trace: [ 701.636937] dump_stack+0x107/0x167 [ 701.637726] should_fail.cold+0x5/0xa [ 701.638692] ? create_object.isra.0+0x3a/0xa30 [ 701.639679] should_failslab+0x5/0x20 [ 701.640510] kmem_cache_alloc+0x5b/0x310 [ 701.641386] ? mark_held_locks+0x9e/0xe0 [ 701.642266] create_object.isra.0+0x3a/0xa30 [ 701.643215] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 701.644460] kmem_cache_alloc+0x159/0x310 [ 701.645709] xas_alloc+0x336/0x440 [ 701.646487] xas_create+0x34a/0x10d0 [ 701.647425] ? kernel_text_address+0xf2/0x120 [ 701.648401] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 701.649535] xas_store+0x8c/0x1c40 [ 701.650315] __xa_store+0x164/0x2d0 [ 701.651103] ? xa_delete_node+0x280/0x280 [ 701.652031] ? trace_hardirqs_on+0x5b/0x180 [ 701.652970] xa_store+0x31/0x50 [ 701.653687] __io_uring_add_tctx_node+0x1cf/0x520 [ 701.654877] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 701.656242] ? alloc_fd+0x2e7/0x670 [ 701.657128] io_uring_setup+0x1fbb/0x2980 [ 701.658116] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 701.659255] ? wait_for_completion_io+0x270/0x270 [ 701.660326] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 701.661587] ? syscall_enter_from_user_mode+0x1d/0x50 [ 701.663003] do_syscall_64+0x33/0x40 [ 701.663805] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 701.665034] RIP: 0033:0x7f722f48db19 [ 701.665836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 701.670143] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 701.672108] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 701.673647] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 701.675188] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 701.676733] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 701.678423] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:08:43 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x46103fff, 0x13, r0, 0x0) 18:08:43 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:08:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:08:43 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xffffffffffffb) 18:08:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 17) 18:08:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:08:56 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:08:56 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:08:56 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x40000000000000) 18:08:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 18:08:56 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 48) 18:08:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xff0f0046, 0x13, r0, 0x0) [ 714.959848] FAULT_INJECTION: forcing a failure. [ 714.959848] name failslab, interval 1, probability 0, space 0, times 0 [ 714.960638] FAULT_INJECTION: forcing a failure. [ 714.960638] name failslab, interval 1, probability 0, space 0, times 0 [ 714.962589] CPU: 0 PID: 6046 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 714.965662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 714.967458] Call Trace: [ 714.968039] dump_stack+0x107/0x167 [ 714.968829] should_fail.cold+0x5/0xa [ 714.969653] ? create_object.isra.0+0x3a/0xa30 [ 714.970641] should_failslab+0x5/0x20 [ 714.971458] kmem_cache_alloc+0x5b/0x310 [ 714.972351] create_object.isra.0+0x3a/0xa30 [ 714.973299] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 714.974399] __kmalloc+0x16e/0x390 [ 714.975175] ext4_find_extent+0xa77/0xd70 [ 714.976085] ? __lock_acquire+0x1657/0x5b00 [ 714.977022] ext4_ext_map_blocks+0x1c8/0x5870 [ 714.977999] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 714.979127] ? perf_trace_lock+0xac/0x490 [ 714.980037] ? ext4_ext_release+0x10/0x10 [ 714.980943] ? lock_release+0x680/0x680 [ 714.981804] ? ext4_es_lookup_extent+0x485/0xa80 [ 714.982825] ? lock_downgrade+0x6d0/0x6d0 [ 714.983732] ? down_read+0x10f/0x430 [ 714.984540] ? down_write+0x160/0x160 [ 714.985360] ? ext4_es_lookup_extent+0xc4/0xa80 [ 714.986371] ext4_map_blocks+0x8e1/0x1910 [ 714.987277] ? kmem_cache_alloc+0x2a6/0x310 [ 714.988214] ? __kernel_text_address+0x9/0x40 [ 714.989177] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 714.990144] ? jbd2__journal_start+0xf3/0x7e0 [ 714.991116] ? __ext4_journal_start_sb+0x214/0x390 [ 714.992175] ? __ext4_journal_start_sb+0x1db/0x390 [ 714.993239] ext4_iomap_begin+0x3ad/0x700 [ 714.994141] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 714.995189] ? kasan_save_stack+0x1b/0x40 [ 714.996092] ? ext4_file_write_iter+0xe0e/0x1530 [ 714.997116] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 714.998478] ? splice_direct_to_actor+0x387/0x980 [ 714.999513] ? do_splice_direct+0x1c4/0x290 [ 715.000447] ? do_sendfile+0x553/0x11e0 [ 715.001304] ? __x64_sys_sendfile64+0x1d1/0x210 [ 715.002329] ? do_syscall_64+0x33/0x40 [ 715.003168] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 715.004333] iomap_apply+0x164/0x810 [ 715.005136] ? iomap_dio_rw+0x90/0x90 [ 715.005961] ? trace_event_raw_event_iomap_class+0x560/0x560 [ 715.007195] ? asm_common_interrupt+0x1e/0x40 [ 715.008207] ? filemap_check_errors+0xa5/0x150 [ 715.009193] __iomap_dio_rw+0x6cd/0x1110 [ 715.010055] ? iomap_dio_rw+0x90/0x90 [ 715.010888] ? iomap_dio_bio_actor+0xe30/0xe30 [ 715.011868] ? ext4_orphan_add+0x253/0x9e0 [ 715.012783] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 715.013840] ? ext4_empty_dir+0xae0/0xae0 [ 715.014725] ? jbd2__journal_start+0xf3/0x7e0 [ 715.015695] iomap_dio_rw+0x31/0x90 [ 715.016487] ext4_file_write_iter+0xe0e/0x1530 [ 715.017482] ? ext4_file_read_iter+0x4c0/0x4c0 [ 715.018461] ? kasan_save_stack+0x32/0x40 [ 715.019343] ? kasan_save_stack+0x1b/0x40 [ 715.020239] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 715.021323] ? iter_file_splice_write+0x165/0xc90 [ 715.022378] ? direct_splice_actor+0x10f/0x170 [ 715.023355] ? splice_direct_to_actor+0x387/0x980 [ 715.024396] ? do_splice_direct+0x1c4/0x290 [ 715.025317] ? do_sendfile+0x553/0x11e0 [ 715.026164] ? __x64_sys_sendfile64+0x1d1/0x210 [ 715.027156] ? do_syscall_64+0x33/0x40 [ 715.027992] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 715.029154] do_iter_readv_writev+0x476/0x750 [ 715.030117] ? _cond_resched+0x10/0x30 [ 715.030951] ? new_sync_write+0x660/0x660 [ 715.031841] ? avc_policy_seqno+0x9/0x70 [ 715.032718] ? selinux_file_permission+0x92/0x520 [ 715.033757] ? security_file_permission+0xb1/0xe0 [ 715.034804] do_iter_write+0x191/0x700 [ 715.035642] ? trace_hardirqs_on+0x5b/0x180 [ 715.036584] vfs_iter_write+0x70/0xa0 [ 715.037406] iter_file_splice_write+0x726/0xc90 [ 715.038422] ? generic_splice_sendpage+0x140/0x140 [ 715.039497] ? security_file_permission+0xb1/0xe0 [ 715.040548] ? generic_splice_sendpage+0x140/0x140 [ 715.041603] direct_splice_actor+0x10f/0x170 [ 715.042552] splice_direct_to_actor+0x387/0x980 [ 715.043556] ? pipe_to_sendpage+0x380/0x380 [ 715.044501] ? do_splice_to+0x160/0x160 [ 715.045352] ? security_file_permission+0xb1/0xe0 [ 715.046396] do_splice_direct+0x1c4/0x290 [ 715.047288] ? splice_direct_to_actor+0x980/0x980 [ 715.048324] ? avc_policy_seqno+0x9/0x70 [ 715.049202] ? security_file_permission+0xb1/0xe0 [ 715.050246] do_sendfile+0x553/0x11e0 [ 715.051074] ? do_pwritev+0x270/0x270 [ 715.051892] ? wait_for_completion_io+0x270/0x270 [ 715.052936] ? perf_trace_preemptirq_template+0x26d/0x400 [ 715.054113] ? perf_trace_preemptirq_template+0x26d/0x400 [ 715.055291] ? rcu_read_lock_any_held+0x75/0xa0 [ 715.056306] __x64_sys_sendfile64+0x1d1/0x210 [ 715.057269] ? __ia32_sys_sendfile+0x220/0x220 [ 715.058256] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 715.059381] ? syscall_enter_from_user_mode+0x1d/0x50 [ 715.060503] do_syscall_64+0x33/0x40 [ 715.061303] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 715.062405] RIP: 0033:0x7fab802e1b19 [ 715.063206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 715.067206] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 715.068896] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 715.070425] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 715.071955] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 715.073488] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 715.075019] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 [ 715.076596] CPU: 1 PID: 6056 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 715.077628] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 715.078811] Call Trace: [ 715.079199] dump_stack+0x107/0x167 [ 715.079724] should_fail.cold+0x5/0xa [ 715.080287] ? create_object.isra.0+0x3a/0xa30 [ 715.080942] should_failslab+0x5/0x20 [ 715.081491] kmem_cache_alloc+0x5b/0x310 [ 715.082075] ? mark_held_locks+0x9e/0xe0 [ 715.082659] create_object.isra.0+0x3a/0xa30 [ 715.083285] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 715.084027] kmem_cache_alloc+0x159/0x310 [ 715.084636] xas_alloc+0x336/0x440 [ 715.085158] xas_create+0x34a/0x10d0 [ 715.085705] ? kernel_text_address+0xf2/0x120 [ 715.086344] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 715.087094] xas_store+0x8c/0x1c40 [ 715.087607] __xa_store+0x164/0x2d0 [ 715.088136] ? xa_delete_node+0x280/0x280 [ 715.088732] ? trace_hardirqs_on+0x5b/0x180 [ 715.089352] xa_store+0x31/0x50 [ 715.089830] __io_uring_add_tctx_node+0x1cf/0x520 [ 715.090516] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 715.091260] ? alloc_fd+0x2e7/0x670 [ 715.091785] io_uring_setup+0x1fbb/0x2980 [ 715.092393] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 715.093121] ? wait_for_completion_io+0x270/0x270 [ 715.093821] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 715.094570] ? syscall_enter_from_user_mode+0x1d/0x50 [ 715.095303] do_syscall_64+0x33/0x40 [ 715.095835] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 715.096572] RIP: 0033:0x7f722f48db19 [ 715.097104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 715.099722] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 715.100820] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 715.101838] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 715.102852] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 715.103864] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 715.104885] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:08:56 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x60000000000000) 18:08:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:09:11 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:09:11 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xff3f0046, 0x13, r0, 0x0) 18:09:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000002) 18:09:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 18) 18:09:11 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r1 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:09:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:09:11 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 49) 18:09:11 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x80000000000000) 18:09:11 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x80ffff00000000) [ 730.123349] FAULT_INJECTION: forcing a failure. [ 730.123349] name failslab, interval 1, probability 0, space 0, times 0 [ 730.125943] CPU: 0 PID: 6089 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 730.127368] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 730.129087] Call Trace: [ 730.129650] dump_stack+0x107/0x167 [ 730.130412] should_fail.cold+0x5/0xa [ 730.131207] ? xas_alloc+0x336/0x440 [ 730.131981] should_failslab+0x5/0x20 [ 730.132797] kmem_cache_alloc+0x5b/0x310 [ 730.133650] xas_alloc+0x336/0x440 [ 730.134393] xas_create+0x34a/0x10d0 [ 730.135176] ? kernel_text_address+0xf2/0x120 [ 730.136108] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 730.137209] xas_store+0x8c/0x1c40 [ 730.137963] __xa_store+0x164/0x2d0 [ 730.138723] ? xa_delete_node+0x280/0x280 [ 730.139596] ? trace_hardirqs_on+0x5b/0x180 [ 730.140509] xa_store+0x31/0x50 [ 730.141200] __io_uring_add_tctx_node+0x1cf/0x520 [ 730.142196] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 730.143282] ? alloc_fd+0x2e7/0x670 [ 730.144047] io_uring_setup+0x1fbb/0x2980 [ 730.144934] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 730.145988] ? wait_for_completion_io+0x270/0x270 [ 730.147016] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 730.148103] ? syscall_enter_from_user_mode+0x1d/0x50 [ 730.149184] do_syscall_64+0x33/0x40 [ 730.149961] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 730.151018] RIP: 0033:0x7f722f48db19 [ 730.151787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 730.155616] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 730.157218] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 730.158694] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 730.160178] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 730.161661] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 730.163148] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 730.169141] FAULT_INJECTION: forcing a failure. [ 730.169141] name failslab, interval 1, probability 0, space 0, times 0 [ 730.171645] CPU: 1 PID: 6092 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 730.173069] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 730.174789] Call Trace: [ 730.175345] dump_stack+0x107/0x167 [ 730.176101] should_fail.cold+0x5/0xa [ 730.176898] ? create_object.isra.0+0x3a/0xa30 [ 730.177840] should_failslab+0x5/0x20 [ 730.178631] kmem_cache_alloc+0x5b/0x310 [ 730.179481] create_object.isra.0+0x3a/0xa30 [ 730.180395] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 730.181451] __kmalloc+0x16e/0x390 [ 730.182182] ? __lockdep_reset_lock+0x180/0x180 [ 730.183153] ext4_find_extent+0xa77/0xd70 [ 730.184025] ? __lock_acquire+0x1657/0x5b00 [ 730.184937] ext4_ext_map_blocks+0x1c8/0x5870 [ 730.185878] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 730.186962] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 730.188047] ? _raw_spin_unlock_irq+0x1f/0x30 [ 730.188980] ? trace_hardirqs_on+0x5b/0x180 [ 730.189874] ? _raw_spin_unlock_irq+0x1f/0x30 [ 730.190798] ? finish_task_switch+0x126/0x5d0 [ 730.191716] ? finish_task_switch+0xef/0x5d0 [ 730.192633] ? ext4_ext_release+0x10/0x10 [ 730.193511] ? lock_release+0x680/0x680 [ 730.194450] ? io_schedule_timeout+0x140/0x140 [ 730.195412] ? ext4_es_lookup_extent+0x485/0xa80 [ 730.196413] ? lock_downgrade+0x6d0/0x6d0 [ 730.197306] ? down_read+0x10f/0x430 [ 730.198096] ? down_write+0x160/0x160 [ 730.198894] ? ext4_es_lookup_extent+0xc4/0xa80 [ 730.199884] ext4_map_blocks+0x8e1/0x1910 [ 730.200774] ? kmem_cache_alloc+0x2a6/0x310 [ 730.201682] ? __kernel_text_address+0x9/0x40 [ 730.202624] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 730.203572] ? jbd2__journal_start+0xf3/0x7e0 [ 730.204524] ? __ext4_journal_start_sb+0x214/0x390 [ 730.205558] ? __ext4_journal_start_sb+0x1db/0x390 [ 730.206594] ext4_iomap_begin+0x3ad/0x700 [ 730.207488] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 730.208521] ? kasan_save_stack+0x1b/0x40 [ 730.209397] ? ext4_file_write_iter+0xe0e/0x1530 [ 730.210393] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 730.211730] ? splice_direct_to_actor+0x387/0x980 [ 730.212749] ? do_splice_direct+0x1c4/0x290 [ 730.213658] ? do_sendfile+0x553/0x11e0 [ 730.214495] ? __x64_sys_sendfile64+0x1d1/0x210 [ 730.215471] ? do_syscall_64+0x33/0x40 [ 730.216297] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 730.217425] iomap_apply+0x164/0x810 [ 730.218203] ? iomap_dio_rw+0x90/0x90 [ 730.219001] ? trace_event_raw_event_iomap_class+0x560/0x560 [ 730.220223] ? mark_held_locks+0x9e/0xe0 [ 730.221101] ? filemap_check_errors+0xa5/0x150 [ 730.222067] __iomap_dio_rw+0x6cd/0x1110 [ 730.222921] ? iomap_dio_rw+0x90/0x90 [ 730.223741] ? iomap_dio_bio_actor+0xe30/0xe30 [ 730.224712] ? ext4_orphan_add+0x253/0x9e0 [ 730.225606] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 730.226637] ? ext4_empty_dir+0xae0/0xae0 [ 730.227507] ? jbd2__journal_start+0xf3/0x7e0 [ 730.228698] iomap_dio_rw+0x31/0x90 [ 730.229468] ext4_file_write_iter+0xe0e/0x1530 [ 730.230441] ? ext4_file_read_iter+0x4c0/0x4c0 [ 730.231399] ? kasan_save_stack+0x32/0x40 [ 730.232275] ? kasan_save_stack+0x1b/0x40 [ 730.233142] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 730.234213] ? iter_file_splice_write+0x165/0xc90 [ 730.235229] ? direct_splice_actor+0x10f/0x170 [ 730.236196] ? splice_direct_to_actor+0x387/0x980 [ 730.237211] ? do_splice_direct+0x1c4/0x290 [ 730.238116] ? do_sendfile+0x553/0x11e0 [ 730.238965] ? __x64_sys_sendfile64+0x1d1/0x210 [ 730.239945] ? do_syscall_64+0x33/0x40 [ 730.240778] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 730.241911] do_iter_readv_writev+0x476/0x750 [ 730.242856] ? _cond_resched+0x10/0x30 [ 730.243686] ? new_sync_write+0x660/0x660 [ 730.244568] ? avc_policy_seqno+0x9/0x70 [ 730.245425] ? selinux_file_permission+0x92/0x520 [ 730.246448] ? security_file_permission+0xb1/0xe0 [ 730.247488] do_iter_write+0x191/0x700 [ 730.248324] ? trace_hardirqs_on+0x5b/0x180 [ 730.249246] vfs_iter_write+0x70/0xa0 [ 730.250048] iter_file_splice_write+0x726/0xc90 [ 730.251044] ? generic_splice_sendpage+0x140/0x140 [ 730.252101] ? security_file_permission+0xb1/0xe0 [ 730.253123] ? generic_splice_sendpage+0x140/0x140 [ 730.254159] direct_splice_actor+0x10f/0x170 [ 730.255090] splice_direct_to_actor+0x387/0x980 [ 730.256073] ? pipe_to_sendpage+0x380/0x380 [ 730.257003] ? do_splice_to+0x160/0x160 [ 730.257839] ? security_file_permission+0xb1/0xe0 [ 730.258860] do_splice_direct+0x1c4/0x290 [ 730.259736] ? splice_direct_to_actor+0x980/0x980 [ 730.260757] ? avc_policy_seqno+0x9/0x70 [ 730.261614] ? security_file_permission+0xb1/0xe0 [ 730.262636] do_sendfile+0x553/0x11e0 [ 730.263440] ? do_pwritev+0x270/0x270 [ 730.264245] ? wait_for_completion_io+0x270/0x270 [ 730.265260] ? rcu_read_lock_any_held+0x75/0xa0 [ 730.266232] ? vfs_write+0x354/0xb10 [ 730.267016] __x64_sys_sendfile64+0x1d1/0x210 [ 730.267955] ? __ia32_sys_sendfile+0x220/0x220 [ 730.268922] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 730.270023] ? syscall_enter_from_user_mode+0x1d/0x50 [ 730.271113] do_syscall_64+0x33/0x40 [ 730.271896] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 730.272991] RIP: 0033:0x7fab802e1b19 [ 730.273773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 730.277659] RSP: 002b:00007fab7d836188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 730.279262] RAX: ffffffffffffffda RBX: 00007fab803f5020 RCX: 00007fab802e1b19 [ 730.280772] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 730.282269] RBP: 00007fab7d8361d0 R08: 0000000000000000 R09: 0000000000000000 [ 730.283899] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 730.285755] R13: 00007ffcc34e564f R14: 00007fab7d836300 R15: 0000000000022000 18:09:12 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 50) 18:09:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:09:12 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x200000000000000) 18:09:12 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xff3f1046, 0x13, r0, 0x0) 18:09:12 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r1 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) [ 730.456420] FAULT_INJECTION: forcing a failure. [ 730.456420] name failslab, interval 1, probability 0, space 0, times 0 [ 730.458847] CPU: 0 PID: 6102 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 730.460282] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 730.461991] Call Trace: [ 730.462547] dump_stack+0x107/0x167 [ 730.463301] should_fail.cold+0x5/0xa [ 730.464088] ? create_object.isra.0+0x3a/0xa30 [ 730.465041] should_failslab+0x5/0x20 [ 730.465836] kmem_cache_alloc+0x5b/0x310 [ 730.466675] ? mark_held_locks+0x9e/0xe0 [ 730.467520] create_object.isra.0+0x3a/0xa30 [ 730.468437] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 730.469496] kmem_cache_alloc+0x159/0x310 [ 730.470366] xas_alloc+0x336/0x440 [ 730.471103] xas_create+0x34a/0x10d0 [ 730.471879] ? kernel_text_address+0xf2/0x120 [ 730.472813] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 730.473901] xas_store+0x8c/0x1c40 [ 730.474654] __xa_store+0x164/0x2d0 [ 730.475410] ? xa_delete_node+0x280/0x280 [ 730.476289] ? trace_hardirqs_on+0x5b/0x180 [ 730.477193] xa_store+0x31/0x50 [ 730.477877] __io_uring_add_tctx_node+0x1cf/0x520 [ 730.478879] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 730.479954] ? alloc_fd+0x2e7/0x670 [ 730.480722] io_uring_setup+0x1fbb/0x2980 [ 730.481589] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 730.482636] ? wait_for_completion_io+0x270/0x270 [ 730.483653] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 730.484738] ? syscall_enter_from_user_mode+0x1d/0x50 [ 730.485803] do_syscall_64+0x33/0x40 [ 730.486574] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 730.487630] RIP: 0033:0x7f722f48db19 [ 730.488410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 730.492282] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 730.493880] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 730.495366] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 730.496954] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 730.498614] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 730.500287] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:09:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:09:12 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 51) 18:09:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:09:12 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x400000000000000) [ 730.706588] FAULT_INJECTION: forcing a failure. [ 730.706588] name failslab, interval 1, probability 0, space 0, times 0 [ 730.709083] CPU: 0 PID: 6113 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 730.710543] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 730.712320] Call Trace: [ 730.712904] dump_stack+0x107/0x167 [ 730.713838] should_fail.cold+0x5/0xa [ 730.714954] ? xas_alloc+0x336/0x440 [ 730.715893] should_failslab+0x5/0x20 [ 730.716798] kmem_cache_alloc+0x5b/0x310 [ 730.717683] xas_alloc+0x336/0x440 [ 730.718560] xas_create+0x34a/0x10d0 [ 730.719434] ? kernel_text_address+0xf2/0x120 [ 730.720512] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 730.721725] xas_store+0x8c/0x1c40 [ 730.722575] __xa_store+0x164/0x2d0 [ 730.723443] ? xa_delete_node+0x280/0x280 [ 730.724428] ? trace_hardirqs_on+0x5b/0x180 [ 730.725380] xa_store+0x31/0x50 [ 730.726070] __io_uring_add_tctx_node+0x1cf/0x520 [ 730.727224] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 730.728315] ? alloc_fd+0x2e7/0x670 [ 730.729079] io_uring_setup+0x1fbb/0x2980 [ 730.729946] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 730.730995] ? wait_for_completion_io+0x270/0x270 [ 730.732016] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 730.733110] ? syscall_enter_from_user_mode+0x1d/0x50 [ 730.734181] do_syscall_64+0x33/0x40 [ 730.734946] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 730.736000] RIP: 0033:0x7f722f48db19 [ 730.736775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 730.740593] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 730.742168] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 730.743643] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 730.745115] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 730.746577] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 730.748051] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:09:12 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xffff8000, 0x13, r0, 0x0) 18:09:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 19) [ 730.961731] FAULT_INJECTION: forcing a failure. [ 730.961731] name failslab, interval 1, probability 0, space 0, times 0 [ 730.964331] CPU: 0 PID: 6119 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 730.965758] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 730.967494] Call Trace: [ 730.968044] dump_stack+0x107/0x167 [ 730.968810] should_fail.cold+0x5/0xa [ 730.969610] ? __es_insert_extent+0xed1/0x1370 [ 730.970556] should_failslab+0x5/0x20 [ 730.971352] kmem_cache_alloc+0x5b/0x310 [ 730.972215] __es_insert_extent+0xed1/0x1370 [ 730.973124] ? do_raw_read_unlock+0x70/0x70 [ 730.974020] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 730.975119] ext4_es_insert_extent+0x45d/0xf10 [ 730.976073] ? ext4_es_scan_clu+0x2e0/0x2e0 18:09:12 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r1 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) [ 730.977147] ? ext4_es_find_extent_range+0x1cb/0x460 [ 730.978208] ? lock_downgrade+0x6d0/0x6d0 [ 730.979077] ? __ext4_handle_dirty_super+0x100/0x100 [ 730.980129] ? __es_find_extent_range+0x1d3/0x490 [ 730.981137] ? do_raw_read_unlock+0x3b/0x70 [ 730.982048] ext4_ext_map_blocks+0x1567/0x5870 [ 730.983004] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 730.984100] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 730.985210] ? ext4_ext_release+0x10/0x10 [ 730.986083] ? lock_release+0x680/0x680 [ 730.986912] ? ext4_es_lookup_extent+0x485/0xa80 [ 730.987886] ? lock_downgrade+0x6d0/0x6d0 [ 730.988762] ? down_read+0x10f/0x430 [ 730.989540] ? down_write+0x160/0x160 [ 730.990334] ? ext4_es_lookup_extent+0xc4/0xa80 18:09:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000003) 18:09:12 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x400010000000000) 18:09:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:09:12 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 52) 18:09:12 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800000000, 0x13, r0, 0x0) [ 730.991301] ext4_map_blocks+0x8e1/0x1910 [ 730.992244] ? kmem_cache_alloc+0x2a6/0x310 [ 730.993140] ? __kernel_text_address+0x9/0x40 [ 730.994069] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 730.995003] ? jbd2__journal_start+0xf3/0x7e0 [ 730.995947] ? __ext4_journal_start_sb+0x214/0x390 [ 730.996978] ? __ext4_journal_start_sb+0x1db/0x390 [ 730.997999] ext4_iomap_begin+0x3ad/0x700 [ 730.998870] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 730.999887] ? kasan_save_stack+0x1b/0x40 [ 731.000762] ? ext4_file_write_iter+0xe0e/0x1530 [ 731.001757] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 731.003072] ? splice_direct_to_actor+0x387/0x980 [ 731.004070] ? do_splice_direct+0x1c4/0x290 [ 731.004969] ? do_sendfile+0x553/0x11e0 [ 731.005796] ? __x64_sys_sendfile64+0x1d1/0x210 [ 731.006757] ? do_syscall_64+0x33/0x40 [ 731.007559] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 731.008677] iomap_apply+0x164/0x810 [ 731.009456] ? iomap_dio_rw+0x90/0x90 [ 731.010248] ? trace_event_raw_event_iomap_class+0x560/0x560 [ 731.011454] ? mark_held_locks+0x9e/0xe0 [ 731.012319] ? filemap_check_errors+0xa5/0x150 [ 731.013273] __iomap_dio_rw+0x6cd/0x1110 [ 731.014116] ? iomap_dio_rw+0x90/0x90 [ 731.014919] ? iomap_dio_bio_actor+0xe30/0xe30 [ 731.015875] ? ext4_orphan_add+0x253/0x9e0 [ 731.016754] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 731.017772] ? ext4_empty_dir+0xae0/0xae0 [ 731.018626] ? jbd2__journal_start+0xf3/0x7e0 [ 731.019569] iomap_dio_rw+0x31/0x90 [ 731.020340] ext4_file_write_iter+0xe0e/0x1530 [ 731.021305] ? ext4_file_read_iter+0x4c0/0x4c0 [ 731.022256] ? kasan_save_stack+0x32/0x40 [ 731.023109] ? kasan_save_stack+0x1b/0x40 [ 731.023972] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 731.025026] ? iter_file_splice_write+0x165/0xc90 [ 731.026080] ? direct_splice_actor+0x10f/0x170 [ 731.027136] ? splice_direct_to_actor+0x387/0x980 [ 731.028235] ? do_splice_direct+0x1c4/0x290 [ 731.029139] ? do_sendfile+0x553/0x11e0 [ 731.029953] ? __x64_sys_sendfile64+0x1d1/0x210 [ 731.030912] ? do_syscall_64+0x33/0x40 [ 731.031724] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 731.032843] do_iter_readv_writev+0x476/0x750 [ 731.033780] ? _cond_resched+0x10/0x30 [ 731.034586] ? new_sync_write+0x660/0x660 [ 731.035441] ? avc_policy_seqno+0x9/0x70 [ 731.036284] ? selinux_file_permission+0x92/0x520 [ 731.037283] ? security_file_permission+0xb1/0xe0 [ 731.038290] do_iter_write+0x191/0x700 [ 731.039100] ? trace_hardirqs_on+0x5b/0x180 [ 731.040007] vfs_iter_write+0x70/0xa0 [ 731.040811] iter_file_splice_write+0x726/0xc90 [ 731.041790] ? generic_splice_sendpage+0x140/0x140 [ 731.042827] ? security_file_permission+0xb1/0xe0 [ 731.043830] ? generic_splice_sendpage+0x140/0x140 [ 731.044863] direct_splice_actor+0x10f/0x170 [ 731.045779] splice_direct_to_actor+0x387/0x980 [ 731.046748] ? pipe_to_sendpage+0x380/0x380 [ 731.047647] ? do_splice_to+0x160/0x160 [ 731.048630] ? security_file_permission+0xb1/0xe0 [ 731.049663] do_splice_direct+0x1c4/0x290 [ 731.050537] ? splice_direct_to_actor+0x980/0x980 [ 731.051555] ? avc_policy_seqno+0x9/0x70 [ 731.052439] ? security_file_permission+0xb1/0xe0 [ 731.053471] do_sendfile+0x553/0x11e0 [ 731.054289] ? do_pwritev+0x270/0x270 [ 731.055093] ? wait_for_completion_io+0x270/0x270 [ 731.056119] ? rcu_read_lock_any_held+0x75/0xa0 [ 731.057112] ? vfs_write+0x354/0xb10 [ 731.057902] __x64_sys_sendfile64+0x1d1/0x210 [ 731.058848] ? __ia32_sys_sendfile+0x220/0x220 [ 731.059821] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 731.060941] ? syscall_enter_from_user_mode+0x1d/0x50 [ 731.062049] do_syscall_64+0x33/0x40 [ 731.062851] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 731.063955] RIP: 0033:0x7fab802e1b19 [ 731.064762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 731.068711] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 731.070334] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 731.071850] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 731.073374] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 731.074887] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 731.076408] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 [ 731.084555] FAULT_INJECTION: forcing a failure. [ 731.084555] name failslab, interval 1, probability 0, space 0, times 0 [ 731.086939] CPU: 0 PID: 6122 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 731.088392] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 731.090148] Call Trace: [ 731.090708] dump_stack+0x107/0x167 [ 731.091489] should_fail.cold+0x5/0xa [ 731.092304] ? create_object.isra.0+0x3a/0xa30 [ 731.093273] should_failslab+0x5/0x20 [ 731.094081] kmem_cache_alloc+0x5b/0x310 [ 731.094948] ? mark_held_locks+0x9e/0xe0 [ 731.095819] create_object.isra.0+0x3a/0xa30 [ 731.096760] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 731.097843] kmem_cache_alloc+0x159/0x310 [ 731.098736] xas_alloc+0x336/0x440 [ 731.099491] xas_create+0x34a/0x10d0 [ 731.100303] ? kernel_text_address+0xf2/0x120 [ 731.101264] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 731.102386] xas_store+0x8c/0x1c40 [ 731.103158] __xa_store+0x164/0x2d0 [ 731.103940] ? xa_delete_node+0x280/0x280 [ 731.104832] ? trace_hardirqs_on+0x5b/0x180 [ 731.105758] xa_store+0x31/0x50 [ 731.106468] __io_uring_add_tctx_node+0x1cf/0x520 [ 731.107498] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 731.108609] ? alloc_fd+0x2e7/0x670 [ 731.109399] io_uring_setup+0x1fbb/0x2980 [ 731.110280] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 731.111350] ? wait_for_completion_io+0x270/0x270 [ 731.112410] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 731.113526] ? syscall_enter_from_user_mode+0x1d/0x50 [ 731.114625] do_syscall_64+0x33/0x40 [ 731.115418] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 731.116511] RIP: 0033:0x7f722f48db19 [ 731.117308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 731.121234] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 731.122851] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 731.124378] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 731.125900] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 731.127411] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 731.128921] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:09:28 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r1 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:09:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000004) 18:09:28 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x4000000000000000) 18:09:28 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 53) 18:09:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:09:28 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r1 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:09:28 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000000, 0x13, r0, 0x0) 18:09:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 20) [ 747.107500] FAULT_INJECTION: forcing a failure. [ 747.107500] name failslab, interval 1, probability 0, space 0, times 0 [ 747.109722] CPU: 0 PID: 6143 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 747.111069] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 747.112715] Call Trace: [ 747.113242] dump_stack+0x107/0x167 [ 747.113958] should_fail.cold+0x5/0xa [ 747.114709] ? xas_alloc+0x336/0x440 [ 747.115439] should_failslab+0x5/0x20 [ 747.116188] kmem_cache_alloc+0x5b/0x310 [ 747.116997] xas_alloc+0x336/0x440 [ 747.117703] xas_create+0x34a/0x10d0 [ 747.118447] ? kernel_text_address+0xf2/0x120 [ 747.119329] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 747.120367] xas_store+0x8c/0x1c40 [ 747.121081] __xa_store+0x164/0x2d0 [ 747.121797] ? xa_delete_node+0x280/0x280 [ 747.122619] ? trace_hardirqs_on+0x5b/0x180 [ 747.123470] xa_store+0x31/0x50 [ 747.124123] __io_uring_add_tctx_node+0x1cf/0x520 [ 747.125080] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 747.126097] ? alloc_fd+0x2e7/0x670 [ 747.126814] io_uring_setup+0x1fbb/0x2980 [ 747.127629] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 747.128626] ? wait_for_completion_io+0x270/0x270 [ 747.129582] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 747.130601] ? syscall_enter_from_user_mode+0x1d/0x50 [ 747.131601] do_syscall_64+0x33/0x40 [ 747.132323] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 747.133329] RIP: 0033:0x7f722f48db19 [ 747.134050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 747.137633] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 747.139107] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 747.140494] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 747.141871] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 747.143248] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 747.144641] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 747.165420] FAULT_INJECTION: forcing a failure. [ 747.165420] name failslab, interval 1, probability 0, space 0, times 0 [ 747.167871] CPU: 1 PID: 6152 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 747.169353] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 747.171153] Call Trace: [ 747.171727] dump_stack+0x107/0x167 [ 747.172530] should_fail.cold+0x5/0xa [ 747.173358] ? create_object.isra.0+0x3a/0xa30 [ 747.174349] should_failslab+0x5/0x20 [ 747.175172] kmem_cache_alloc+0x5b/0x310 [ 747.176056] create_object.isra.0+0x3a/0xa30 [ 747.177019] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 747.178121] kmem_cache_alloc+0x159/0x310 [ 747.179026] __es_insert_extent+0xed1/0x1370 [ 747.179984] ? do_raw_read_unlock+0x70/0x70 [ 747.180923] ? perf_trace_lock+0xac/0x490 [ 747.181837] ext4_es_insert_extent+0x45d/0xf10 [ 747.182862] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 747.183799] ? ext4_es_find_extent_range+0x1cb/0x460 [ 747.184906] ? lock_downgrade+0x6d0/0x6d0 [ 747.185808] ? __ext4_handle_dirty_super+0x100/0x100 [ 747.186907] ? __es_find_extent_range+0x1d3/0x490 [ 747.187956] ? do_raw_read_unlock+0x3b/0x70 [ 747.188911] ext4_ext_map_blocks+0x1567/0x5870 [ 747.189908] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 747.191049] ? perf_trace_lock+0xac/0x490 [ 747.191955] ? ext4_ext_release+0x10/0x10 [ 747.192873] ? lock_release+0x680/0x680 [ 747.193730] ? ext4_es_lookup_extent+0x485/0xa80 [ 747.194758] ? lock_downgrade+0x6d0/0x6d0 [ 747.195665] ? down_read+0x10f/0x430 [ 747.196480] ? down_write+0x160/0x160 [ 747.197304] ? ext4_es_lookup_extent+0xc4/0xa80 [ 747.198319] ext4_map_blocks+0x8e1/0x1910 [ 747.199225] ? kmem_cache_alloc+0x2a6/0x310 [ 747.200159] ? __kernel_text_address+0x9/0x40 [ 747.201136] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 747.202109] ? jbd2__journal_start+0xf3/0x7e0 [ 747.203090] ? __ext4_journal_start_sb+0x214/0x390 [ 747.204163] ? __ext4_journal_start_sb+0x1db/0x390 [ 747.205237] ext4_iomap_begin+0x3ad/0x700 [ 747.206162] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 747.207223] ? kasan_save_stack+0x1b/0x40 [ 747.208122] ? ext4_file_write_iter+0xe0e/0x1530 [ 747.209265] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 747.211003] ? splice_direct_to_actor+0x387/0x980 [ 747.212326] ? do_splice_direct+0x1c4/0x290 [ 747.213510] ? do_sendfile+0x553/0x11e0 [ 747.214603] ? __x64_sys_sendfile64+0x1d1/0x210 [ 747.215873] ? do_syscall_64+0x33/0x40 [ 747.216952] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 747.218427] iomap_apply+0x164/0x810 [ 747.219355] ? iomap_dio_rw+0x90/0x90 [ 747.220222] ? trace_event_raw_event_iomap_class+0x560/0x560 [ 747.221688] ? mark_held_locks+0x9e/0xe0 [ 747.222683] ? filemap_check_errors+0xa5/0x150 [ 747.223734] __iomap_dio_rw+0x6cd/0x1110 [ 747.224638] ? iomap_dio_rw+0x90/0x90 [ 747.225483] ? iomap_dio_bio_actor+0xe30/0xe30 [ 747.226480] ? ext4_orphan_add+0x253/0x9e0 [ 747.227401] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 747.228485] ? ext4_empty_dir+0xae0/0xae0 [ 747.229387] ? jbd2__journal_start+0xf3/0x7e0 [ 747.230375] iomap_dio_rw+0x31/0x90 [ 747.231170] ext4_file_write_iter+0xe0e/0x1530 [ 747.232185] ? ext4_file_read_iter+0x4c0/0x4c0 [ 747.233186] ? kasan_save_stack+0x32/0x40 [ 747.234085] ? kasan_save_stack+0x1b/0x40 [ 747.234985] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 747.236089] ? iter_file_splice_write+0x165/0xc90 [ 747.237146] ? direct_splice_actor+0x10f/0x170 [ 747.238141] ? splice_direct_to_actor+0x387/0x980 [ 747.239185] ? do_splice_direct+0x1c4/0x290 [ 747.240119] ? do_sendfile+0x553/0x11e0 [ 747.241277] ? __x64_sys_sendfile64+0x1d1/0x210 [ 747.242471] ? do_syscall_64+0x33/0x40 [ 747.243468] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 747.244869] do_iter_readv_writev+0x476/0x750 [ 747.245898] ? _cond_resched+0x10/0x30 [ 747.246733] ? new_sync_write+0x660/0x660 [ 747.247621] ? avc_policy_seqno+0x9/0x70 [ 747.248512] ? selinux_file_permission+0x92/0x520 [ 747.249555] ? security_file_permission+0xb1/0xe0 [ 747.250607] do_iter_write+0x191/0x700 [ 747.251452] ? trace_hardirqs_on+0x5b/0x180 [ 747.252401] vfs_iter_write+0x70/0xa0 [ 747.253232] iter_file_splice_write+0x726/0xc90 [ 747.254258] ? generic_splice_sendpage+0x140/0x140 [ 747.255348] ? security_file_permission+0xb1/0xe0 [ 747.256401] ? generic_splice_sendpage+0x140/0x140 [ 747.257458] direct_splice_actor+0x10f/0x170 [ 747.258412] splice_direct_to_actor+0x387/0x980 [ 747.259425] ? pipe_to_sendpage+0x380/0x380 [ 747.260372] ? do_splice_to+0x160/0x160 [ 747.261230] ? security_file_permission+0xb1/0xe0 [ 747.262283] do_splice_direct+0x1c4/0x290 [ 747.263177] ? splice_direct_to_actor+0x980/0x980 [ 747.264237] do_sendfile+0x553/0x11e0 [ 747.265078] ? do_pwritev+0x270/0x270 [ 747.265907] ? wait_for_completion_io+0x270/0x270 [ 747.266958] ? rcu_read_lock_any_held+0x75/0xa0 [ 747.267966] ? vfs_write+0x354/0xb10 [ 747.268790] __x64_sys_sendfile64+0x1d1/0x210 [ 747.269761] ? __ia32_sys_sendfile+0x220/0x220 [ 747.270754] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 747.271884] ? syscall_enter_from_user_mode+0x1d/0x50 [ 747.273000] do_syscall_64+0x33/0x40 [ 747.273797] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 747.274905] RIP: 0033:0x7fab802e1b19 [ 747.275715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 747.279706] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 747.281362] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 747.282913] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 747.284473] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 747.286000] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 747.287538] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 18:09:29 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xfbffffffffff0f00) 18:09:42 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 54) 18:09:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 21) 18:09:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000005) 18:09:42 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r1 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:09:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:09:42 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff0fe04500000000) 18:09:42 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x10000000000, 0x13, r0, 0x0) 18:09:42 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r0 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r1 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) [ 760.252755] FAULT_INJECTION: forcing a failure. [ 760.252755] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 760.254244] CPU: 1 PID: 6180 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 760.255251] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 760.256258] Call Trace: [ 760.256601] dump_stack+0x107/0x167 [ 760.257047] should_fail.cold+0x5/0xa [ 760.257516] __alloc_pages_nodemask+0x182/0x600 [ 760.258087] ? stack_trace_save+0x8c/0xc0 [ 760.258591] ? stack_trace_consume_entry+0x160/0x160 [ 760.259206] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 760.259946] ? kmem_cache_alloc+0x301/0x310 [ 760.260473] alloc_pages_current+0x187/0x280 [ 760.261014] ? do_iter_readv_writev+0x476/0x750 [ 760.261578] allocate_slab+0x26f/0x380 [ 760.262057] ___slab_alloc+0x470/0x700 [ 760.262537] ? create_object.isra.0+0x3a/0xa30 [ 760.263091] ? trace_rcu_dyntick+0x2f/0x170 [ 760.263618] ? create_object.isra.0+0x3a/0xa30 [ 760.264181] ? kmem_cache_alloc+0x301/0x310 [ 760.264710] ? create_object.isra.0+0x3a/0xa30 [ 760.265263] kmem_cache_alloc+0x301/0x310 [ 760.265774] create_object.isra.0+0x3a/0xa30 [ 760.266313] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 760.266932] kmem_cache_alloc+0x159/0x310 [ 760.267441] __es_insert_extent+0xed1/0x1370 [ 760.267976] ? do_raw_read_unlock+0x70/0x70 [ 760.268512] ? perf_trace_lock+0xac/0x490 [ 760.269025] ext4_es_insert_extent+0x45d/0xf10 [ 760.269588] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 760.270112] ? ext4_es_find_extent_range+0x1cb/0x460 [ 760.270728] ? lock_downgrade+0x6d0/0x6d0 [ 760.271235] ? __ext4_handle_dirty_super+0x100/0x100 [ 760.271845] ? __es_find_extent_range+0x1d3/0x490 [ 760.272428] ? do_raw_read_unlock+0x3b/0x70 [ 760.272977] ext4_ext_map_blocks+0x1567/0x5870 [ 760.273533] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 760.274180] ? perf_trace_lock+0xac/0x490 [ 760.274689] ? ext4_ext_release+0x10/0x10 [ 760.275198] ? lock_release+0x680/0x680 [ 760.275682] ? ext4_es_lookup_extent+0x485/0xa80 [ 760.276253] ? lock_downgrade+0x6d0/0x6d0 [ 760.276778] ? down_read+0x10f/0x430 [ 760.277229] ? down_write+0x160/0x160 [ 760.277691] ? ext4_es_lookup_extent+0xc4/0xa80 [ 760.278259] ext4_map_blocks+0x8e1/0x1910 [ 760.278767] ? kmem_cache_alloc+0x2a6/0x310 [ 760.279289] ? __kernel_text_address+0x9/0x40 [ 760.279827] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 760.280370] ? jbd2__journal_start+0xf3/0x7e0 [ 760.280921] ? __ext4_journal_start_sb+0x214/0x390 [ 760.281510] ? __ext4_journal_start_sb+0x1db/0x390 [ 760.282102] ext4_iomap_begin+0x3ad/0x700 [ 760.282613] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 760.283204] ? kasan_save_stack+0x1b/0x40 [ 760.283706] ? ext4_file_write_iter+0xe0e/0x1530 [ 760.284284] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 760.285054] ? splice_direct_to_actor+0x387/0x980 [ 760.285637] ? do_splice_direct+0x1c4/0x290 [ 760.286155] ? do_sendfile+0x553/0x11e0 [ 760.286635] ? __x64_sys_sendfile64+0x1d1/0x210 [ 760.287194] ? do_syscall_64+0x33/0x40 [ 760.287664] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 760.288317] iomap_apply+0x164/0x810 [ 760.288773] ? iomap_dio_rw+0x90/0x90 [ 760.289237] ? trace_event_raw_event_iomap_class+0x560/0x560 [ 760.289937] ? mark_held_locks+0x9e/0xe0 [ 760.290440] ? filemap_check_errors+0xa5/0x150 [ 760.290994] __iomap_dio_rw+0x6cd/0x1110 [ 760.291481] ? iomap_dio_rw+0x90/0x90 [ 760.291951] ? iomap_dio_bio_actor+0xe30/0xe30 [ 760.292508] ? ext4_orphan_add+0x253/0x9e0 [ 760.293018] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 760.293606] ? ext4_empty_dir+0xae0/0xae0 [ 760.294102] ? jbd2__journal_start+0xf3/0x7e0 [ 760.294644] iomap_dio_rw+0x31/0x90 [ 760.295090] ext4_file_write_iter+0xe0e/0x1530 [ 760.295650] ? ext4_file_read_iter+0x4c0/0x4c0 [ 760.296195] ? kasan_save_stack+0x32/0x40 [ 760.296704] ? kasan_save_stack+0x1b/0x40 [ 760.297199] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 760.297802] ? iter_file_splice_write+0x165/0xc90 [ 760.298382] ? direct_splice_actor+0x10f/0x170 [ 760.298925] ? splice_direct_to_actor+0x387/0x980 [ 760.299498] ? do_splice_direct+0x1c4/0x290 [ 760.300010] ? do_sendfile+0x553/0x11e0 [ 760.300487] ? __x64_sys_sendfile64+0x1d1/0x210 [ 760.301054] ? do_syscall_64+0x33/0x40 [ 760.301523] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 760.302164] do_iter_readv_writev+0x476/0x750 [ 760.302702] ? _cond_resched+0x10/0x30 [ 760.303170] ? new_sync_write+0x660/0x660 [ 760.303668] ? avc_policy_seqno+0x9/0x70 [ 760.304156] ? selinux_file_permission+0x92/0x520 [ 760.304745] ? security_file_permission+0xb1/0xe0 [ 760.305335] do_iter_write+0x191/0x700 [ 760.305805] ? trace_hardirqs_on+0x5b/0x180 [ 760.306327] vfs_iter_write+0x70/0xa0 [ 760.306785] iter_file_splice_write+0x726/0xc90 [ 760.307354] ? generic_splice_sendpage+0x140/0x140 [ 760.307955] ? security_file_permission+0xb1/0xe0 [ 760.308547] ? generic_splice_sendpage+0x140/0x140 [ 760.309133] direct_splice_actor+0x10f/0x170 [ 760.309662] splice_direct_to_actor+0x387/0x980 [ 760.310221] ? pipe_to_sendpage+0x380/0x380 [ 760.310741] ? do_splice_to+0x160/0x160 [ 760.311221] ? security_file_permission+0xb1/0xe0 [ 760.311804] do_splice_direct+0x1c4/0x290 [ 760.312297] ? splice_direct_to_actor+0x980/0x980 [ 760.312879] ? avc_policy_seqno+0x9/0x70 [ 760.313367] ? security_file_permission+0xb1/0xe0 [ 760.313943] do_sendfile+0x553/0x11e0 [ 760.314403] ? do_pwritev+0x270/0x270 [ 760.314856] ? wait_for_completion_io+0x270/0x270 [ 760.315426] ? perf_trace_preemptirq_template+0x26d/0x400 [ 760.316075] ? perf_trace_preemptirq_template+0x26d/0x400 [ 760.316745] ? rcu_read_lock_any_held+0x75/0xa0 [ 760.317301] __x64_sys_sendfile64+0x1d1/0x210 [ 760.317833] ? __ia32_sys_sendfile+0x220/0x220 [ 760.318379] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 760.319000] ? syscall_enter_from_user_mode+0x1d/0x50 [ 760.319614] do_syscall_64+0x33/0x40 [ 760.320056] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 760.320673] RIP: 0033:0x7fab802e1b19 [ 760.321114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 760.323286] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 760.324186] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 760.325034] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 760.325874] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 760.326716] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 760.327578] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 [ 760.345037] FAULT_INJECTION: forcing a failure. [ 760.345037] name failslab, interval 1, probability 0, space 0, times 0 18:09:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) [ 760.346438] CPU: 1 PID: 6181 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 760.347422] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 760.348399] Call Trace: [ 760.348727] dump_stack+0x107/0x167 [ 760.349163] should_fail.cold+0x5/0xa [ 760.349609] ? xas_alloc+0x336/0x440 [ 760.350049] should_failslab+0x5/0x20 [ 760.350494] kmem_cache_alloc+0x5b/0x310 [ 760.350973] xas_alloc+0x336/0x440 [ 760.351391] xas_create+0x34a/0x10d0 [ 760.351848] ? kernel_text_address+0xf2/0x120 [ 760.352392] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 760.353052] xas_store+0x8c/0x1c40 [ 760.353497] __xa_store+0x164/0x2d0 [ 760.353943] ? xa_delete_node+0x280/0x280 [ 760.354451] ? trace_hardirqs_on+0x5b/0x180 [ 760.354982] xa_store+0x31/0x50 [ 760.355384] __io_uring_add_tctx_node+0x1cf/0x520 [ 760.355967] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 760.356605] ? alloc_fd+0x2e7/0x670 [ 760.357041] io_uring_setup+0x1fbb/0x2980 [ 760.357536] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 760.358132] ? wait_for_completion_io+0x270/0x270 [ 760.358712] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 760.359335] ? syscall_enter_from_user_mode+0x1d/0x50 [ 760.359945] do_syscall_64+0x33/0x40 [ 760.360385] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 760.360998] RIP: 0033:0x7f722f48db19 [ 760.361437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 760.363589] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 760.364478] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 760.365325] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 760.366159] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 760.366995] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 760.367823] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:09:42 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff3fe04500000000) 18:09:42 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 55) 18:09:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 22) [ 760.541995] FAULT_INJECTION: forcing a failure. [ 760.541995] name failslab, interval 1, probability 0, space 0, times 0 [ 760.544559] CPU: 0 PID: 6190 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 760.546091] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 760.547961] Call Trace: [ 760.548573] dump_stack+0x107/0x167 [ 760.549398] should_fail.cold+0x5/0xa [ 760.550259] ? xas_alloc+0x336/0x440 [ 760.551100] should_failslab+0x5/0x20 [ 760.551961] kmem_cache_alloc+0x5b/0x310 [ 760.552890] xas_alloc+0x336/0x440 [ 760.553696] xas_create+0x34a/0x10d0 [ 760.554550] ? kernel_text_address+0xf2/0x120 [ 760.555560] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 760.556744] xas_store+0x8c/0x1c40 [ 760.557561] __xa_store+0x164/0x2d0 [ 760.558383] ? xa_delete_node+0x280/0x280 [ 760.559323] ? trace_hardirqs_on+0x5b/0x180 [ 760.560302] xa_store+0x31/0x50 [ 760.561058] __io_uring_add_tctx_node+0x1cf/0x520 [ 760.562139] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 760.563311] ? alloc_fd+0x2e7/0x670 [ 760.564139] io_uring_setup+0x1fbb/0x2980 [ 760.565087] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 760.566220] ? wait_for_completion_io+0x270/0x270 [ 760.567327] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 760.568498] ? syscall_enter_from_user_mode+0x1d/0x50 [ 760.569680] do_syscall_64+0x33/0x40 [ 760.570521] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 760.571673] RIP: 0033:0x7f722f48db19 [ 760.572525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 760.576698] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 760.578401] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 760.580004] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 760.581625] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 760.583229] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 760.584847] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:09:42 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xffffffffffffb, 0x13, r0, 0x0) 18:09:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(0x0, 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) [ 760.637911] FAULT_INJECTION: forcing a failure. [ 760.637911] name failslab, interval 1, probability 0, space 0, times 0 [ 760.639360] CPU: 1 PID: 6193 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 760.640138] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 760.641096] Call Trace: [ 760.641406] dump_stack+0x107/0x167 [ 760.641823] should_fail.cold+0x5/0xa [ 760.642265] ? create_object.isra.0+0x3a/0xa30 [ 760.642785] should_failslab+0x5/0x20 [ 760.643223] kmem_cache_alloc+0x5b/0x310 [ 760.643695] create_object.isra.0+0x3a/0xa30 [ 760.644195] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 760.644782] kmem_cache_alloc+0x159/0x310 [ 760.645262] ext4_mb_new_blocks+0x6a4/0x44b0 [ 760.645770] ? trace_hardirqs_on+0x5b/0x180 [ 760.646267] ? kasan_unpoison_shadow+0x33/0x50 [ 760.646787] ? ext4_cache_extents+0x68/0x2d0 [ 760.647291] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 760.647869] ? ext4_discard_preallocations+0xd80/0xd80 [ 760.648468] ? ext4_ext_search_right+0x2e8/0xbd0 [ 760.649017] ? ext4_inode_to_goal_block+0x320/0x430 [ 760.649591] ext4_ext_map_blocks+0x1a55/0x5870 [ 760.650118] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 760.650720] ? perf_trace_lock+0xac/0x490 [ 760.651196] ? ext4_ext_release+0x10/0x10 [ 760.651672] ? ext4_map_blocks+0x5cd/0x1910 [ 760.652165] ? lock_release+0x680/0x680 18:09:42 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff3ff04500000000) [ 760.652628] ? ext4_es_lookup_extent+0x485/0xa80 [ 760.653309] ? find_held_lock+0x2c/0x110 [ 760.653783] ? down_write_killable+0x180/0x180 [ 760.654309] ext4_map_blocks+0x63f/0x1910 [ 760.654785] ? kmem_cache_alloc+0x2a6/0x310 [ 760.655274] ? __kernel_text_address+0x9/0x40 [ 760.655784] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 760.656293] ? jbd2__journal_start+0xf3/0x7e0 [ 760.656815] ? __ext4_journal_start_sb+0x214/0x390 [ 760.657369] ? __ext4_journal_start_sb+0x1db/0x390 [ 760.657929] ext4_iomap_begin+0x3ad/0x700 [ 760.658408] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 760.658964] ? kasan_save_stack+0x1b/0x40 [ 760.659434] ? ext4_file_write_iter+0xe0e/0x1530 [ 760.659977] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 760.660701] ? splice_direct_to_actor+0x387/0x980 [ 760.661248] ? do_splice_direct+0x1c4/0x290 [ 760.661733] ? do_sendfile+0x553/0x11e0 [ 760.662185] ? __x64_sys_sendfile64+0x1d1/0x210 [ 760.662715] ? do_syscall_64+0x33/0x40 [ 760.663159] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 760.663767] iomap_apply+0x164/0x810 [ 760.664189] ? iomap_dio_rw+0x90/0x90 [ 760.664633] ? trace_event_raw_event_iomap_class+0x560/0x560 [ 760.665293] ? mark_held_locks+0x9e/0xe0 [ 760.665763] ? filemap_check_errors+0xa5/0x150 [ 760.666283] __iomap_dio_rw+0x6cd/0x1110 [ 760.666738] ? iomap_dio_rw+0x90/0x90 [ 760.667180] ? iomap_dio_bio_actor+0xe30/0xe30 [ 760.667698] ? ext4_orphan_add+0x253/0x9e0 [ 760.668180] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 760.668749] ? ext4_empty_dir+0xae0/0xae0 [ 760.669213] ? jbd2__journal_start+0xf3/0x7e0 [ 760.669727] iomap_dio_rw+0x31/0x90 [ 760.670141] ext4_file_write_iter+0xe0e/0x1530 [ 760.670669] ? ext4_file_read_iter+0x4c0/0x4c0 [ 760.671181] ? kasan_save_stack+0x32/0x40 [ 760.671650] ? kasan_save_stack+0x1b/0x40 [ 760.672114] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 760.672693] ? iter_file_splice_write+0x165/0xc90 [ 760.673236] ? direct_splice_actor+0x10f/0x170 [ 760.673751] ? splice_direct_to_actor+0x387/0x980 [ 760.674293] ? do_splice_direct+0x1c4/0x290 [ 760.674777] ? do_sendfile+0x553/0x11e0 [ 760.675227] ? __x64_sys_sendfile64+0x1d1/0x210 [ 760.675748] ? do_syscall_64+0x33/0x40 [ 760.676188] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 760.676803] do_iter_readv_writev+0x476/0x750 [ 760.677311] ? _cond_resched+0x10/0x30 [ 760.677753] ? new_sync_write+0x660/0x660 [ 760.678222] ? avc_policy_seqno+0x9/0x70 [ 760.678684] ? selinux_file_permission+0x92/0x520 [ 760.679234] ? security_file_permission+0xb1/0xe0 [ 760.679791] do_iter_write+0x191/0x700 [ 760.680237] ? trace_hardirqs_on+0x5b/0x180 [ 760.680742] vfs_iter_write+0x70/0xa0 [ 760.681176] iter_file_splice_write+0x726/0xc90 [ 760.681713] ? generic_splice_sendpage+0x140/0x140 [ 760.682281] ? security_file_permission+0xb1/0xe0 [ 760.682832] ? generic_splice_sendpage+0x140/0x140 [ 760.683387] direct_splice_actor+0x10f/0x170 [ 760.683888] splice_direct_to_actor+0x387/0x980 [ 760.684418] ? pipe_to_sendpage+0x380/0x380 [ 760.684919] ? do_splice_to+0x160/0x160 [ 760.685370] ? security_file_permission+0xb1/0xe0 [ 760.685927] do_splice_direct+0x1c4/0x290 [ 760.686411] ? splice_direct_to_actor+0x980/0x980 [ 760.686957] ? avc_policy_seqno+0x9/0x70 [ 760.687421] ? security_file_permission+0xb1/0xe0 [ 760.687973] do_sendfile+0x553/0x11e0 [ 760.688485] ? do_pwritev+0x270/0x270 [ 760.688979] ? wait_for_completion_io+0x270/0x270 [ 760.689530] ? rcu_read_lock_any_held+0x75/0xa0 [ 760.690055] ? vfs_write+0x354/0xb10 [ 760.690488] __x64_sys_sendfile64+0x1d1/0x210 [ 760.690995] ? __ia32_sys_sendfile+0x220/0x220 [ 760.691517] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 760.692115] ? syscall_enter_from_user_mode+0x1d/0x50 [ 760.692714] do_syscall_64+0x33/0x40 [ 760.693140] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 760.693727] RIP: 0033:0x7fab802e1b19 [ 760.694152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 760.696237] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 760.697114] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 760.697929] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 760.698738] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 760.699547] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 760.700354] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 18:09:53 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 56) 18:09:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(0x0, 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:09:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000006) 18:09:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 23) 18:09:53 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x40000000000000, 0x13, r0, 0x0) 18:09:53 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x1f18, 0x7e5a, 0x2, &(0x7f0000000000)={[0x6]}, 0x8) 18:09:53 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r0 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r1 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:09:53 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r0 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r1 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) [ 772.134951] FAULT_INJECTION: forcing a failure. [ 772.134951] name failslab, interval 1, probability 0, space 0, times 0 [ 772.138085] CPU: 0 PID: 6216 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 772.139928] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 772.142054] Call Trace: [ 772.142731] dump_stack+0x107/0x167 [ 772.143672] should_fail.cold+0x5/0xa [ 772.144659] ? create_object.isra.0+0x3a/0xa30 [ 772.145838] should_failslab+0x5/0x20 [ 772.146820] kmem_cache_alloc+0x5b/0x310 [ 772.147862] ? mark_held_locks+0x9e/0xe0 [ 772.148914] create_object.isra.0+0x3a/0xa30 [ 772.150042] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 772.151347] kmem_cache_alloc+0x159/0x310 [ 772.152417] xas_alloc+0x336/0x440 [ 772.153352] xas_create+0x34a/0x10d0 [ 772.154326] ? kernel_text_address+0xf2/0x120 [ 772.155484] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 772.156853] xas_store+0x8c/0x1c40 [ 772.157798] __xa_store+0x164/0x2d0 [ 772.158736] ? xa_delete_node+0x280/0x280 [ 772.159802] ? trace_hardirqs_on+0x5b/0x180 [ 772.160933] xa_store+0x31/0x50 [ 772.161793] __io_uring_add_tctx_node+0x1cf/0x520 [ 772.163026] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 772.164378] ? alloc_fd+0x2e7/0x670 [ 772.165348] io_uring_setup+0x1fbb/0x2980 [ 772.166413] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 772.167708] ? wait_for_completion_io+0x270/0x270 [ 772.168958] ? perf_trace_preemptirq_template+0x26d/0x400 [ 772.170165] ? perf_trace_preemptirq_template+0x26d/0x400 [ 772.171352] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 772.172458] ? syscall_enter_from_user_mode+0x1d/0x50 [ 772.173557] do_syscall_64+0x33/0x40 [ 772.174342] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 772.175425] RIP: 0033:0x7f722f48db19 [ 772.176212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 772.180112] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 772.181732] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 772.183255] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 772.184779] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 772.186288] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 772.187800] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 772.228219] FAULT_INJECTION: forcing a failure. [ 772.228219] name failslab, interval 1, probability 0, space 0, times 0 [ 772.230661] CPU: 0 PID: 6222 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 772.232106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 772.233861] Call Trace: [ 772.234421] dump_stack+0x107/0x167 18:09:54 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r0 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r1 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) [ 772.235204] should_fail.cold+0x5/0xa [ 772.236157] ? ext4_mb_new_blocks+0x6a4/0x44b0 [ 772.237118] should_failslab+0x5/0x20 [ 772.237918] kmem_cache_alloc+0x5b/0x310 [ 772.238781] ext4_mb_new_blocks+0x6a4/0x44b0 [ 772.239713] ? trace_hardirqs_on+0x5b/0x180 [ 772.240615] ? kasan_unpoison_shadow+0x33/0x50 [ 772.241576] ? ext4_cache_extents+0x68/0x2d0 [ 772.242488] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 772.243542] ? ext4_discard_preallocations+0xd80/0xd80 [ 772.244649] ? ext4_ext_search_right+0x2e8/0xbd0 [ 772.245630] ? ext4_inode_to_goal_block+0x320/0x430 [ 772.246680] ext4_ext_map_blocks+0x1a55/0x5870 [ 772.247648] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 772.248747] ? perf_trace_lock+0xac/0x490 [ 772.249623] ? ext4_ext_release+0x10/0x10 [ 772.250484] ? ext4_map_blocks+0x5cd/0x1910 [ 772.251386] ? lock_release+0x680/0x680 [ 772.252208] ? ext4_es_lookup_extent+0x485/0xa80 [ 772.253201] ? find_held_lock+0x2c/0x110 [ 772.254066] ? down_write_killable+0x180/0x180 [ 772.255032] ext4_map_blocks+0x63f/0x1910 [ 772.255896] ? kmem_cache_alloc+0x2a6/0x310 [ 772.256805] ? __kernel_text_address+0x9/0x40 [ 772.257736] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 772.258684] ? jbd2__journal_start+0xf3/0x7e0 [ 772.259624] ? __ext4_journal_start_sb+0x214/0x390 [ 772.260647] ? __ext4_journal_start_sb+0x1db/0x390 [ 772.261671] ext4_iomap_begin+0x3ad/0x700 [ 772.262549] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 772.263559] ? kasan_save_stack+0x1b/0x40 [ 772.264426] ? ext4_file_write_iter+0xe0e/0x1530 [ 772.265418] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 772.266761] ? splice_direct_to_actor+0x387/0x980 [ 772.267756] ? do_splice_direct+0x1c4/0x290 [ 772.268689] ? do_sendfile+0x553/0x11e0 [ 772.269538] ? __x64_sys_sendfile64+0x1d1/0x210 [ 772.270531] ? do_syscall_64+0x33/0x40 [ 772.271357] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 772.272501] iomap_apply+0x164/0x810 [ 772.273304] ? iomap_dio_rw+0x90/0x90 [ 772.274109] ? trace_event_raw_event_iomap_class+0x560/0x560 [ 772.275345] ? mark_held_locks+0x9e/0xe0 [ 772.276228] ? filemap_check_errors+0xa5/0x150 [ 772.277218] __iomap_dio_rw+0x6cd/0x1110 [ 772.278086] ? iomap_dio_rw+0x90/0x90 [ 772.278918] ? iomap_dio_bio_actor+0xe30/0xe30 [ 772.279889] ? ext4_orphan_add+0x253/0x9e0 [ 772.280791] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 772.281842] ? ext4_empty_dir+0xae0/0xae0 [ 772.282731] ? jbd2__journal_start+0xf3/0x7e0 [ 772.283686] iomap_dio_rw+0x31/0x90 [ 772.284467] ext4_file_write_iter+0xe0e/0x1530 [ 772.285471] ? ext4_file_read_iter+0x4c0/0x4c0 [ 772.286438] ? kasan_save_stack+0x32/0x40 [ 772.287314] ? kasan_save_stack+0x1b/0x40 [ 772.288193] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 772.289278] ? iter_file_splice_write+0x165/0xc90 [ 772.290305] ? direct_splice_actor+0x10f/0x170 [ 772.291289] ? splice_direct_to_actor+0x387/0x980 [ 772.292321] ? do_splice_direct+0x1c4/0x290 [ 772.293232] ? do_sendfile+0x553/0x11e0 [ 772.294070] ? __x64_sys_sendfile64+0x1d1/0x210 [ 772.295066] ? do_syscall_64+0x33/0x40 [ 772.295899] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 772.297048] do_iter_readv_writev+0x476/0x750 [ 772.297978] ? _cond_resched+0x10/0x30 [ 772.298817] ? new_sync_write+0x660/0x660 [ 772.299710] ? avc_policy_seqno+0x9/0x70 [ 772.300575] ? selinux_file_permission+0x92/0x520 [ 772.301617] ? security_file_permission+0xb1/0xe0 [ 772.302666] do_iter_write+0x191/0x700 [ 772.303523] ? trace_hardirqs_on+0x5b/0x180 [ 772.304454] vfs_iter_write+0x70/0xa0 [ 772.305279] iter_file_splice_write+0x726/0xc90 [ 772.306288] ? generic_splice_sendpage+0x140/0x140 [ 772.307374] ? security_file_permission+0xb1/0xe0 [ 772.308423] ? generic_splice_sendpage+0x140/0x140 [ 772.309481] direct_splice_actor+0x10f/0x170 [ 772.310426] splice_direct_to_actor+0x387/0x980 [ 772.311430] ? pipe_to_sendpage+0x380/0x380 [ 772.312360] ? do_splice_to+0x160/0x160 [ 772.313223] ? security_file_permission+0xb1/0xe0 [ 772.314282] do_splice_direct+0x1c4/0x290 [ 772.315181] ? splice_direct_to_actor+0x980/0x980 [ 772.316229] ? avc_policy_seqno+0x9/0x70 [ 772.317132] ? security_file_permission+0xb1/0xe0 [ 772.318158] do_sendfile+0x553/0x11e0 [ 772.318971] ? do_pwritev+0x270/0x270 [ 772.319781] ? wait_for_completion_io+0x270/0x270 [ 772.320825] ? rcu_read_lock_any_held+0x75/0xa0 [ 772.321808] ? vfs_write+0x354/0xb10 [ 772.322602] __x64_sys_sendfile64+0x1d1/0x210 [ 772.323561] ? __ia32_sys_sendfile+0x220/0x220 [ 772.324542] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 772.325688] ? syscall_enter_from_user_mode+0x1d/0x50 [ 772.326796] do_syscall_64+0x33/0x40 [ 772.327609] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 772.328707] RIP: 0033:0x7fab802e1b19 [ 772.329497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 772.333481] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 772.335123] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 772.336674] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 772.338213] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 772.339730] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 772.341253] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 18:09:54 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:09:54 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 57) 18:09:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 24) [ 772.466189] FAULT_INJECTION: forcing a failure. [ 772.466189] name failslab, interval 1, probability 0, space 0, times 0 [ 772.468788] CPU: 0 PID: 6229 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 772.470303] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 772.472035] Call Trace: 18:09:54 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x60000000000000, 0x13, r0, 0x0) [ 772.472593] dump_stack+0x107/0x167 18:09:54 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r0 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r1 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) [ 772.473493] should_fail.cold+0x5/0xa [ 772.474352] ? xas_alloc+0x336/0x440 [ 772.475133] should_failslab+0x5/0x20 [ 772.475920] kmem_cache_alloc+0x5b/0x310 [ 772.476788] xas_alloc+0x336/0x440 [ 772.477526] xas_create+0x34a/0x10d0 [ 772.478314] ? kernel_text_address+0xf2/0x120 [ 772.479255] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 772.480337] xas_store+0x8c/0x1c40 [ 772.481103] __xa_store+0x164/0x2d0 [ 772.481867] ? xa_delete_node+0x280/0x280 [ 772.482744] ? trace_hardirqs_on+0x5b/0x180 [ 772.483654] xa_store+0x31/0x50 [ 772.484348] __io_uring_add_tctx_node+0x1cf/0x520 [ 772.485363] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 772.486452] ? alloc_fd+0x2e7/0x670 [ 772.487222] io_uring_setup+0x1fbb/0x2980 [ 772.488106] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 772.489175] ? wait_for_completion_io+0x270/0x270 [ 772.490205] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 772.491296] ? syscall_enter_from_user_mode+0x1d/0x50 [ 772.492384] do_syscall_64+0x33/0x40 [ 772.493175] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 772.494240] RIP: 0033:0x7f722f48db19 [ 772.495018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 772.498881] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 772.500472] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 772.501971] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 772.503452] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 772.504947] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 772.506434] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:09:54 executing program 6: r0 = syz_io_uring_setup(0x45b3, &(0x7f00000002c0)={0x0, 0x10, 0x4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 772.583561] FAULT_INJECTION: forcing a failure. [ 772.583561] name failslab, interval 1, probability 0, space 0, times 0 [ 772.585939] CPU: 0 PID: 6234 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 772.587354] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 772.589072] Call Trace: [ 772.589618] dump_stack+0x107/0x167 [ 772.590378] should_fail.cold+0x5/0xa [ 772.591166] ? create_object.isra.0+0x3a/0xa30 [ 772.592099] should_failslab+0x5/0x20 [ 772.592915] kmem_cache_alloc+0x5b/0x310 [ 772.593757] create_object.isra.0+0x3a/0xa30 [ 772.594676] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 772.595722] kmem_cache_alloc+0x159/0x310 [ 772.596608] ext4_mb_new_blocks+0x6a4/0x44b0 [ 772.597533] ? trace_hardirqs_on+0x5b/0x180 [ 772.598445] ? kasan_unpoison_shadow+0x33/0x50 [ 772.599382] ? ext4_cache_extents+0x68/0x2d0 [ 772.600323] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 772.601370] ? ext4_discard_preallocations+0xd80/0xd80 [ 772.602457] ? ext4_ext_search_right+0x2e8/0xbd0 [ 772.603433] ? ext4_inode_to_goal_block+0x320/0x430 [ 772.604491] ext4_ext_map_blocks+0x1a55/0x5870 [ 772.605456] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 772.606552] ? perf_trace_lock+0xac/0x490 [ 772.607414] ? ext4_ext_release+0x10/0x10 [ 772.608287] ? ext4_map_blocks+0x5cd/0x1910 [ 772.609181] ? lock_release+0x680/0x680 [ 772.610033] ? ext4_es_lookup_extent+0x485/0xa80 [ 772.611004] ? find_held_lock+0x2c/0x110 18:09:54 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 58) [ 772.611875] ? down_write_killable+0x180/0x180 [ 772.612926] ext4_map_blocks+0x63f/0x1910 [ 772.613789] ? kmem_cache_alloc+0x2a6/0x310 [ 772.614674] ? __kernel_text_address+0x9/0x40 [ 772.615599] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 772.616524] ? jbd2__journal_start+0xf3/0x7e0 [ 772.617466] ? __ext4_journal_start_sb+0x214/0x390 [ 772.618469] ? __ext4_journal_start_sb+0x1db/0x390 [ 772.619482] ext4_iomap_begin+0x3ad/0x700 [ 772.620346] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 772.621357] ? kasan_save_stack+0x1b/0x40 [ 772.622217] ? ext4_file_write_iter+0xe0e/0x1530 [ 772.623297] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 772.624598] ? splice_direct_to_actor+0x387/0x980 [ 772.625590] ? do_splice_direct+0x1c4/0x290 [ 772.626472] ? do_sendfile+0x553/0x11e0 [ 772.627290] ? __x64_sys_sendfile64+0x1d1/0x210 [ 772.628242] ? do_syscall_64+0x33/0x40 [ 772.629053] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 772.630150] iomap_apply+0x164/0x810 [ 772.630916] ? iomap_dio_rw+0x90/0x90 [ 772.631708] ? trace_event_raw_event_iomap_class+0x560/0x560 [ 772.632906] ? mark_held_locks+0x9e/0xe0 [ 772.633753] ? filemap_check_errors+0xa5/0x150 [ 772.634693] __iomap_dio_rw+0x6cd/0x1110 [ 772.635519] ? iomap_dio_rw+0x90/0x90 [ 772.636318] ? iomap_dio_bio_actor+0xe30/0xe30 [ 772.637266] ? ext4_orphan_add+0x253/0x9e0 [ 772.638131] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 772.639144] ? ext4_empty_dir+0xae0/0xae0 [ 772.639989] ? jbd2__journal_start+0xf3/0x7e0 [ 772.640925] iomap_dio_rw+0x31/0x90 [ 772.641680] ext4_file_write_iter+0xe0e/0x1530 [ 772.642642] ? ext4_file_read_iter+0x4c0/0x4c0 [ 772.643574] ? kasan_save_stack+0x32/0x40 [ 772.644431] ? kasan_save_stack+0x1b/0x40 [ 772.645286] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 772.646329] ? iter_file_splice_write+0x165/0xc90 [ 772.647313] ? direct_splice_actor+0x10f/0x170 [ 772.648244] ? splice_direct_to_actor+0x387/0x980 [ 772.649235] ? do_splice_direct+0x1c4/0x290 [ 772.650113] ? do_sendfile+0x553/0x11e0 [ 772.650927] ? __x64_sys_sendfile64+0x1d1/0x210 [ 772.651875] ? do_syscall_64+0x33/0x40 [ 772.652686] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 772.653785] do_iter_readv_writev+0x476/0x750 [ 772.654705] ? _cond_resched+0x10/0x30 [ 772.655503] ? new_sync_write+0x660/0x660 [ 772.656351] ? avc_policy_seqno+0x9/0x70 [ 772.657198] ? selinux_file_permission+0x92/0x520 [ 772.658190] ? security_file_permission+0xb1/0xe0 [ 772.659191] do_iter_write+0x191/0x700 [ 772.659991] ? trace_hardirqs_on+0x5b/0x180 [ 772.660899] vfs_iter_write+0x70/0xa0 [ 772.661687] iter_file_splice_write+0x726/0xc90 [ 772.662661] ? generic_splice_sendpage+0x140/0x140 [ 772.663694] ? security_file_permission+0xb1/0xe0 [ 772.664697] ? generic_splice_sendpage+0x140/0x140 [ 772.665703] direct_splice_actor+0x10f/0x170 [ 772.666608] splice_direct_to_actor+0x387/0x980 [ 772.667571] ? pipe_to_sendpage+0x380/0x380 [ 772.668460] ? do_splice_to+0x160/0x160 [ 772.669287] ? security_file_permission+0xb1/0xe0 [ 772.670285] do_splice_direct+0x1c4/0x290 [ 772.671137] ? splice_direct_to_actor+0x980/0x980 [ 772.672121] ? avc_policy_seqno+0x9/0x70 [ 772.672978] ? security_file_permission+0xb1/0xe0 [ 772.673971] do_sendfile+0x553/0x11e0 [ 772.674765] ? do_pwritev+0x270/0x270 [ 772.675555] ? wait_for_completion_io+0x270/0x270 [ 772.676681] ? perf_trace_preemptirq_template+0x26d/0x400 [ 772.677827] ? perf_trace_preemptirq_template+0x26d/0x400 [ 772.678977] ? rcu_read_lock_any_held+0x75/0xa0 [ 772.679963] __x64_sys_sendfile64+0x1d1/0x210 [ 772.680911] ? __ia32_sys_sendfile+0x220/0x220 [ 772.681875] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 772.682974] ? syscall_enter_from_user_mode+0x1d/0x50 [ 772.684062] do_syscall_64+0x33/0x40 [ 772.684849] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 772.685932] RIP: 0033:0x7fab802e1b19 [ 772.686709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 772.690583] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 772.692179] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 772.693673] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 772.695169] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 772.696680] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 772.698178] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 18:09:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000007) [ 772.731742] FAULT_INJECTION: forcing a failure. [ 772.731742] name failslab, interval 1, probability 0, space 0, times 0 [ 772.733126] CPU: 1 PID: 6243 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 772.734130] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 772.735067] Call Trace: [ 772.735467] dump_stack+0x107/0x167 [ 772.735864] should_fail.cold+0x5/0xa [ 772.736303] ? xas_alloc+0x336/0x440 [ 772.736716] should_failslab+0x5/0x20 [ 772.737151] kmem_cache_alloc+0x5b/0x310 [ 772.737605] xas_alloc+0x336/0x440 [ 772.738051] xas_create+0x34a/0x10d0 [ 772.738565] ? kernel_text_address+0xf2/0x120 [ 772.739206] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 772.739998] xas_store+0x8c/0x1c40 [ 772.740418] __xa_store+0x164/0x2d0 [ 772.740874] ? xa_delete_node+0x280/0x280 [ 772.741453] ? trace_hardirqs_on+0x5b/0x180 [ 772.741923] xa_store+0x31/0x50 [ 772.742303] __io_uring_add_tctx_node+0x1cf/0x520 [ 772.742824] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 772.743437] ? alloc_fd+0x2e7/0x670 [ 772.743867] io_uring_setup+0x1fbb/0x2980 [ 772.744343] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 772.744931] ? wait_for_completion_io+0x270/0x270 [ 772.745491] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 772.746089] ? syscall_enter_from_user_mode+0x1d/0x50 [ 772.746677] do_syscall_64+0x33/0x40 [ 772.747215] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 772.747817] RIP: 0033:0x7f722f48db19 [ 772.748343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 772.750873] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 772.751735] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 772.752552] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 772.753338] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 772.754150] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 772.754918] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:09:54 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r0 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r1 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:09:54 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r1 = syz_io_uring_setup(0x3865, &(0x7f00000002c0)={0x0, 0x10006286, 0x0, 0x3, 0xfffffffc}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x0, 0x40000, 0x0, {0x0, r7}}, 0x200) r8 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) syz_io_uring_submit(r12, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) socket$inet_icmp_raw(0x2, 0x3, 0x1) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r4, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x0, 0x40000, 0x0, {0x0, r13}}, 0x200) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x2404}, 0x0, {0x0, r13}}, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:09:54 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x80000000000000, 0x13, r0, 0x0) 18:09:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(0x0, 0x92) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:09:54 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x1268, &(0x7f00000000c0)) r0 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r1 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:09:54 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x80ffff00000000, 0x13, r0, 0x0) 18:09:54 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 59) [ 773.128779] FAULT_INJECTION: forcing a failure. [ 773.128779] name failslab, interval 1, probability 0, space 0, times 0 [ 773.130104] CPU: 1 PID: 6264 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 773.130875] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 773.131815] Call Trace: [ 773.132119] dump_stack+0x107/0x167 [ 773.132532] should_fail.cold+0x5/0xa [ 773.132989] ? xas_alloc+0x336/0x440 [ 773.133421] should_failslab+0x5/0x20 [ 773.133861] kmem_cache_alloc+0x5b/0x310 [ 773.134306] xas_alloc+0x336/0x440 [ 773.134696] xas_create+0x34a/0x10d0 [ 773.135125] ? kernel_text_address+0xf2/0x120 [ 773.135612] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 773.136398] xas_store+0x8c/0x1c40 [ 773.136933] __xa_store+0x164/0x2d0 [ 773.137425] ? xa_delete_node+0x280/0x280 [ 773.137884] ? trace_hardirqs_on+0x5b/0x180 [ 773.138362] xa_store+0x31/0x50 [ 773.138724] __io_uring_add_tctx_node+0x1cf/0x520 [ 773.139279] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 773.139847] ? alloc_fd+0x2e7/0x670 [ 773.140274] io_uring_setup+0x1fbb/0x2980 [ 773.140742] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 773.141308] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 773.141885] ? syscall_enter_from_user_mode+0x1d/0x50 [ 773.142477] do_syscall_64+0x33/0x40 [ 773.142889] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 773.143481] RIP: 0033:0x7f722f48db19 [ 773.143888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 773.145907] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 773.146746] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 773.147565] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 773.148392] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 773.149216] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 773.150041] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 786.050458] FAULT_INJECTION: forcing a failure. [ 786.050458] name failslab, interval 1, probability 0, space 0, times 0 [ 786.052742] CPU: 0 PID: 6272 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 786.054107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 786.055742] Call Trace: [ 786.056264] dump_stack+0x107/0x167 [ 786.056994] should_fail.cold+0x5/0xa [ 786.057748] ? create_object.isra.0+0x3a/0xa30 [ 786.058633] should_failslab+0x5/0x20 [ 786.059388] kmem_cache_alloc+0x5b/0x310 [ 786.060189] ? mark_held_locks+0x9e/0xe0 [ 786.060998] create_object.isra.0+0x3a/0xa30 [ 786.061860] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 786.062875] kmem_cache_alloc+0x159/0x310 [ 786.063708] xas_alloc+0x336/0x440 [ 786.064418] xas_create+0x34a/0x10d0 [ 786.065161] ? kernel_text_address+0xf2/0x120 [ 786.066042] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 786.067071] xas_store+0x8c/0x1c40 [ 786.067783] __xa_store+0x164/0x2d0 [ 786.068511] ? xa_delete_node+0x280/0x280 [ 786.069346] ? trace_hardirqs_on+0x5b/0x180 [ 786.070218] xa_store+0x31/0x50 [ 786.070870] __io_uring_add_tctx_node+0x1cf/0x520 [ 786.071826] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 786.072875] ? alloc_fd+0x2e7/0x670 [ 786.073620] io_uring_setup+0x1fbb/0x2980 [ 786.074465] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 786.075485] ? wait_for_completion_io+0x270/0x270 [ 786.076474] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 786.077537] ? syscall_enter_from_user_mode+0x1d/0x50 [ 786.078577] do_syscall_64+0x33/0x40 [ 786.079328] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 786.080649] RIP: 0033:0x7f722f48db19 [ 786.081409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 786.085143] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 786.086678] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 786.088117] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 786.089563] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 786.091009] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 786.092451] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:10:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 25) 18:10:07 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x0, 0x40000, 0x0, {0x0, r4}}, 0x200) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x4000, 0x80) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/image_size', 0x0, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r11, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r12, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x0, 0x40000, 0x0, {0x0, r13}}, 0x200) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x0, @fd=r5, 0x9, 0x0, 0x0, 0x8, 0x1, {0x2, r13}}, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:10:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000008) 18:10:07 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000000000000, 0x13, r0, 0x0) 18:10:07 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x1268, &(0x7f00000000c0)) r0 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r1 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:10:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:10:07 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 60) 18:10:07 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x1268, &(0x7f00000000c0)) r0 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r1 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) [ 786.101232] FAULT_INJECTION: forcing a failure. [ 786.101232] name failslab, interval 1, probability 0, space 0, times 0 [ 786.103860] CPU: 1 PID: 6282 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 786.105296] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 786.107039] Call Trace: [ 786.107597] dump_stack+0x107/0x167 [ 786.108364] should_fail.cold+0x5/0xa [ 786.109178] ? __es_insert_extent+0xed1/0x1370 [ 786.110152] should_failslab+0x5/0x20 [ 786.110952] kmem_cache_alloc+0x5b/0x310 [ 786.111812] __es_insert_extent+0xed1/0x1370 [ 786.112758] ext4_es_insert_extent+0x45d/0xf10 [ 786.113739] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 786.114667] ? down_write_killable+0x180/0x180 [ 786.115651] ext4_map_blocks+0x80b/0x1910 [ 786.116524] ? __kernel_text_address+0x9/0x40 [ 786.117471] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 786.118425] ? jbd2__journal_start+0xf3/0x7e0 [ 786.119372] ? __ext4_journal_start_sb+0x214/0x390 [ 786.120393] ? __ext4_journal_start_sb+0x1db/0x390 [ 786.121433] ext4_iomap_begin+0x3ad/0x700 [ 786.122311] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 786.123337] ? kasan_save_stack+0x1b/0x40 [ 786.124211] ? ext4_file_write_iter+0xe0e/0x1530 [ 786.125211] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 786.126810] ? splice_direct_to_actor+0x387/0x980 [ 786.127911] ? do_splice_direct+0x1c4/0x290 [ 786.128830] ? do_sendfile+0x553/0x11e0 [ 786.129657] ? __x64_sys_sendfile64+0x1d1/0x210 [ 786.130624] ? do_syscall_64+0x33/0x40 [ 786.131443] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 786.132600] iomap_apply+0x164/0x810 [ 786.133393] ? iomap_dio_rw+0x90/0x90 [ 786.134206] ? trace_event_raw_event_iomap_class+0x560/0x560 [ 786.135431] ? mark_held_locks+0x9e/0xe0 [ 786.136297] ? filemap_check_errors+0xa5/0x150 [ 786.137270] __iomap_dio_rw+0x6cd/0x1110 [ 786.138119] ? iomap_dio_rw+0x90/0x90 [ 786.138939] ? iomap_dio_bio_actor+0xe30/0xe30 [ 786.139912] ? ext4_orphan_add+0x253/0x9e0 [ 786.140804] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 786.141843] ? ext4_empty_dir+0xae0/0xae0 [ 786.142715] ? jbd2__journal_start+0xf3/0x7e0 [ 786.143666] iomap_dio_rw+0x31/0x90 [ 786.144434] ext4_file_write_iter+0xe0e/0x1530 [ 786.145419] ? ext4_file_read_iter+0x4c0/0x4c0 [ 786.146381] ? kasan_save_stack+0x32/0x40 [ 786.147257] ? kasan_save_stack+0x1b/0x40 [ 786.148127] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 786.149199] ? iter_file_splice_write+0x165/0xc90 [ 786.150201] ? direct_splice_actor+0x10f/0x170 [ 786.151168] ? splice_direct_to_actor+0x387/0x980 [ 786.152171] ? do_splice_direct+0x1c4/0x290 [ 786.153087] ? do_sendfile+0x553/0x11e0 [ 786.153921] ? __x64_sys_sendfile64+0x1d1/0x210 [ 786.154906] ? do_syscall_64+0x33/0x40 [ 786.155728] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 786.156872] do_iter_readv_writev+0x476/0x750 [ 786.157807] ? _cond_resched+0x10/0x30 [ 786.158639] ? new_sync_write+0x660/0x660 [ 786.159505] ? avc_policy_seqno+0x9/0x70 [ 786.160363] ? selinux_file_permission+0x92/0x520 [ 786.161381] ? security_file_permission+0xb1/0xe0 [ 786.162413] do_iter_write+0x191/0x700 [ 786.163248] ? trace_hardirqs_on+0x5b/0x180 [ 786.164178] vfs_iter_write+0x70/0xa0 [ 786.164982] iter_file_splice_write+0x726/0xc90 [ 786.165975] ? generic_splice_sendpage+0x140/0x140 [ 786.167040] ? security_file_permission+0xb1/0xe0 [ 786.168065] ? generic_splice_sendpage+0x140/0x140 [ 786.169113] direct_splice_actor+0x10f/0x170 [ 786.170045] splice_direct_to_actor+0x387/0x980 [ 786.171038] ? pipe_to_sendpage+0x380/0x380 [ 786.171953] ? do_splice_to+0x160/0x160 [ 786.172814] ? security_file_permission+0xb1/0xe0 [ 786.173829] do_splice_direct+0x1c4/0x290 [ 786.174710] ? splice_direct_to_actor+0x980/0x980 [ 786.175728] ? avc_policy_seqno+0x9/0x70 [ 786.176583] ? security_file_permission+0xb1/0xe0 [ 786.177621] do_sendfile+0x553/0x11e0 [ 786.178432] ? do_pwritev+0x270/0x270 [ 786.179236] ? wait_for_completion_io+0x270/0x270 [ 786.180252] ? rcu_read_lock_any_held+0x75/0xa0 [ 786.181228] ? vfs_write+0x354/0xb10 [ 786.182019] __x64_sys_sendfile64+0x1d1/0x210 [ 786.182969] ? __ia32_sys_sendfile+0x220/0x220 [ 786.183934] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 786.185037] ? syscall_enter_from_user_mode+0x1d/0x50 [ 786.186128] do_syscall_64+0x33/0x40 [ 786.186904] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 786.187993] RIP: 0033:0x7fab802e1b19 [ 786.188766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 786.192620] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 786.194214] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 786.195698] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 786.197193] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 786.198681] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 786.200165] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 18:10:08 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 61) 18:10:08 executing program 6: r0 = syz_io_uring_setup(0x381d, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000e, 0x20010, r0, 0x0) [ 786.535793] FAULT_INJECTION: forcing a failure. [ 786.535793] name failslab, interval 1, probability 0, space 0, times 0 [ 786.538412] CPU: 0 PID: 6293 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 786.539945] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 786.541813] Call Trace: [ 786.542411] dump_stack+0x107/0x167 [ 786.543227] should_fail.cold+0x5/0xa [ 786.544094] ? vm_area_dup+0x78/0x290 [ 786.544960] should_failslab+0x5/0x20 [ 786.545815] kmem_cache_alloc+0x5b/0x310 [ 786.546731] vm_area_dup+0x78/0x290 [ 786.547554] ? lock_release+0x680/0x680 [ 786.548450] ? mark_lock+0xf5/0x2df0 [ 786.549305] ? lock_chain_count+0x20/0x20 [ 786.550230] ? mark_lock+0xf5/0x2df0 [ 786.551070] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 786.552239] ? lock_chain_count+0x20/0x20 [ 786.553183] ? mark_lock+0xf5/0x2df0 [ 786.554017] ? vm_area_alloc+0x110/0x110 [ 786.554929] ? __lock_acquire+0x1657/0x5b00 [ 786.555912] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 786.557102] ? vmacache_find+0x55/0x2a0 [ 786.557994] __split_vma+0xa8/0x4e0 [ 786.558824] __do_munmap+0x365/0x1260 [ 786.559674] ? arch_get_unmapped_area+0x450/0x450 [ 786.560762] mmap_region+0x7cc/0x1500 [ 786.561645] do_mmap+0x868/0x1370 [ 786.562434] vm_mmap_pgoff+0x198/0x1f0 [ 786.563311] ? randomize_page+0xb0/0xb0 [ 786.564218] ksys_mmap_pgoff+0x41c/0x560 [ 786.565137] ? find_mergeable_anon_vma+0x250/0x250 [ 786.566234] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 786.567405] ? syscall_enter_from_user_mode+0x1d/0x50 [ 786.568566] do_syscall_64+0x33/0x40 [ 786.569409] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 786.570551] RIP: 0033:0x7f722f48db62 [ 786.571380] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 786.575512] RSP: 002b:00007f722ca030f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 786.577230] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f722f48db62 [ 786.578816] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 00000000200a0000 [ 786.580415] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 786.582031] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 786.583624] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:10:21 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x1268, &(0x7f00000000c0)) r0 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r1 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:10:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000009) 18:10:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x400000000000000, 0x13, r0, 0x0) [ 800.049917] FAULT_INJECTION: forcing a failure. [ 800.049917] name failslab, interval 1, probability 0, space 0, times 0 [ 800.051384] CPU: 1 PID: 6307 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 800.052235] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 800.053286] Call Trace: [ 800.053622] dump_stack+0x107/0x167 [ 800.054075] should_fail.cold+0x5/0xa [ 800.054556] ? create_object.isra.0+0x3a/0xa30 [ 800.055125] should_failslab+0x5/0x20 [ 800.055604] kmem_cache_alloc+0x5b/0x310 [ 800.056114] create_object.isra.0+0x3a/0xa30 [ 800.056666] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 800.057311] kmem_cache_alloc+0x159/0x310 [ 800.057833] vm_area_dup+0x78/0x290 18:10:21 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 62) 18:10:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) [ 800.058291] ? lock_release+0x680/0x680 18:10:21 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x6a8, 0x80040) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000040)=0x1) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x4000, 0x80) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/image_size', 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc, 0x12, r3, 0x0) 18:10:21 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x1268, &(0x7f00000000c0)) r0 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r1 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:10:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 26) [ 800.058944] ? mark_lock+0xf5/0x2df0 [ 800.059558] ? lock_chain_count+0x20/0x20 [ 800.060072] ? mark_lock+0xf5/0x2df0 [ 800.060544] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 800.061212] ? lock_chain_count+0x20/0x20 [ 800.061725] ? mark_lock+0xf5/0x2df0 [ 800.062189] ? vm_area_alloc+0x110/0x110 [ 800.062693] ? __lock_acquire+0x1657/0x5b00 [ 800.063239] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 800.063886] ? vmacache_find+0x55/0x2a0 [ 800.064380] __split_vma+0xa8/0x4e0 [ 800.064832] __do_munmap+0x365/0x1260 [ 800.065314] ? arch_get_unmapped_area+0x450/0x450 [ 800.065911] mmap_region+0x7cc/0x1500 [ 800.066387] do_mmap+0x868/0x1370 [ 800.066824] vm_mmap_pgoff+0x198/0x1f0 [ 800.067308] ? randomize_page+0xb0/0xb0 [ 800.067805] ksys_mmap_pgoff+0x41c/0x560 [ 800.068307] ? find_mergeable_anon_vma+0x250/0x250 [ 800.068912] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 800.069569] ? syscall_enter_from_user_mode+0x1d/0x50 [ 800.070212] do_syscall_64+0x33/0x40 [ 800.070669] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 800.071342] RIP: 0033:0x7f722f48db62 [ 800.071821] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 800.074164] RSP: 002b:00007f722ca030f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 800.075112] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f722f48db62 [ 800.076034] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 00000000200a0000 [ 800.076938] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 800.077860] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 800.078735] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 800.098376] FAULT_INJECTION: forcing a failure. [ 800.098376] name failslab, interval 1, probability 0, space 0, times 0 [ 800.100172] CPU: 1 PID: 6316 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 800.101015] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 800.102030] Call Trace: [ 800.102370] dump_stack+0x107/0x167 [ 800.102834] should_fail.cold+0x5/0xa [ 800.103320] ? create_object.isra.0+0x3a/0xa30 [ 800.103899] should_failslab+0x5/0x20 [ 800.104466] kmem_cache_alloc+0x5b/0x310 [ 800.105111] create_object.isra.0+0x3a/0xa30 [ 800.105666] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 800.106313] kmem_cache_alloc+0x159/0x310 [ 800.106847] __es_insert_extent+0xed1/0x1370 [ 800.107415] ext4_es_insert_extent+0x45d/0xf10 [ 800.108002] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 800.108564] ? down_write_killable+0x180/0x180 [ 800.109160] ext4_map_blocks+0x80b/0x1910 [ 800.109691] ? __kernel_text_address+0x9/0x40 [ 800.110262] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 800.110834] ? jbd2__journal_start+0xf3/0x7e0 [ 800.111409] ? __ext4_journal_start_sb+0x214/0x390 [ 800.112028] ? __ext4_journal_start_sb+0x1db/0x390 [ 800.112647] ext4_iomap_begin+0x3ad/0x700 [ 800.113204] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 800.113801] ? kasan_save_stack+0x1b/0x40 [ 800.114308] ? ext4_file_write_iter+0xe0e/0x1530 [ 800.114891] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 800.115669] ? splice_direct_to_actor+0x387/0x980 [ 800.116252] ? do_splice_direct+0x1c4/0x290 [ 800.116798] ? do_sendfile+0x553/0x11e0 [ 800.117304] ? __x64_sys_sendfile64+0x1d1/0x210 [ 800.117893] ? do_syscall_64+0x33/0x40 [ 800.118391] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 800.119067] iomap_apply+0x164/0x810 [ 800.119534] ? iomap_dio_rw+0x90/0x90 [ 800.120016] ? trace_event_raw_event_iomap_class+0x560/0x560 [ 800.120751] ? mark_held_locks+0x9e/0xe0 [ 800.121277] ? filemap_check_errors+0xa5/0x150 [ 800.121858] __iomap_dio_rw+0x6cd/0x1110 [ 800.122366] ? iomap_dio_rw+0x90/0x90 [ 800.122857] ? iomap_dio_bio_actor+0xe30/0xe30 [ 800.123435] ? ext4_orphan_add+0x253/0x9e0 [ 800.123966] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 800.124592] ? ext4_empty_dir+0xae0/0xae0 [ 800.125122] ? jbd2__journal_start+0xf3/0x7e0 [ 800.125696] iomap_dio_rw+0x31/0x90 [ 800.126158] ext4_file_write_iter+0xe0e/0x1530 [ 800.126744] ? ext4_file_read_iter+0x4c0/0x4c0 [ 800.127317] ? kasan_save_stack+0x32/0x40 [ 800.127832] ? kasan_save_stack+0x1b/0x40 [ 800.128347] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 800.128992] ? iter_file_splice_write+0x165/0xc90 [ 800.129599] ? direct_splice_actor+0x10f/0x170 [ 800.130172] ? splice_direct_to_actor+0x387/0x980 [ 800.130778] ? do_splice_direct+0x1c4/0x290 [ 800.131315] ? do_sendfile+0x553/0x11e0 [ 800.131810] ? __x64_sys_sendfile64+0x1d1/0x210 [ 800.132391] ? do_syscall_64+0x33/0x40 [ 800.132880] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 800.133566] do_iter_readv_writev+0x476/0x750 [ 800.134134] ? _cond_resched+0x10/0x30 [ 800.134622] ? new_sync_write+0x660/0x660 [ 800.135144] ? avc_policy_seqno+0x9/0x70 [ 800.135658] ? selinux_file_permission+0x92/0x520 [ 800.136267] ? security_file_permission+0xb1/0xe0 [ 800.136884] do_iter_write+0x191/0x700 [ 800.137385] ? trace_hardirqs_on+0x5b/0x180 [ 800.137928] vfs_iter_write+0x70/0xa0 [ 800.138408] iter_file_splice_write+0x726/0xc90 [ 800.139001] ? generic_splice_sendpage+0x140/0x140 [ 800.139627] ? security_file_permission+0xb1/0xe0 [ 800.140235] ? generic_splice_sendpage+0x140/0x140 [ 800.140852] direct_splice_actor+0x10f/0x170 [ 800.141409] splice_direct_to_actor+0x387/0x980 [ 800.141988] ? pipe_to_sendpage+0x380/0x380 [ 800.142527] ? do_splice_to+0x160/0x160 [ 800.143021] ? security_file_permission+0xb1/0xe0 [ 800.143611] do_splice_direct+0x1c4/0x290 [ 800.144115] ? splice_direct_to_actor+0x980/0x980 [ 800.144717] ? avc_policy_seqno+0x9/0x70 [ 800.145237] ? security_file_permission+0xb1/0xe0 [ 800.145843] do_sendfile+0x553/0x11e0 [ 800.146320] ? do_pwritev+0x270/0x270 [ 800.146792] ? wait_for_completion_io+0x270/0x270 [ 800.147397] ? rcu_read_lock_any_held+0x75/0xa0 [ 800.147976] ? vfs_write+0x354/0xb10 [ 800.148438] __x64_sys_sendfile64+0x1d1/0x210 [ 800.149002] ? __ia32_sys_sendfile+0x220/0x220 [ 800.149576] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 800.150228] ? syscall_enter_from_user_mode+0x1d/0x50 [ 800.150875] do_syscall_64+0x33/0x40 [ 800.151338] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 800.151978] RIP: 0033:0x7fab802e1b19 [ 800.152444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 800.154748] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 800.155699] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 800.156584] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 800.157476] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 800.158351] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 800.159232] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 18:10:22 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:10:22 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 63) 18:10:22 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x1268, &(0x7f00000000c0)) r0 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r1 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:10:22 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x400010000000000, 0x13, r0, 0x0) [ 800.321346] FAULT_INJECTION: forcing a failure. [ 800.321346] name failslab, interval 1, probability 0, space 0, times 0 [ 800.322988] CPU: 1 PID: 6326 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 800.323777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 800.324736] Call Trace: [ 800.325054] dump_stack+0x107/0x167 [ 800.325478] should_fail.cold+0x5/0xa [ 800.325925] ? create_object.isra.0+0x3a/0xa30 [ 800.326457] should_failslab+0x5/0x20 [ 800.326894] kmem_cache_alloc+0x5b/0x310 [ 800.327362] ? mark_held_locks+0x9e/0xe0 [ 800.327830] create_object.isra.0+0x3a/0xa30 [ 800.328335] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 800.328922] kmem_cache_alloc+0x159/0x310 [ 800.329415] xas_alloc+0x336/0x440 [ 800.329825] xas_create+0x34a/0x10d0 [ 800.330256] ? kernel_text_address+0xf2/0x120 [ 800.330774] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 800.331377] xas_store+0x8c/0x1c40 [ 800.331804] __xa_store+0x164/0x2d0 [ 800.332230] ? xa_delete_node+0x280/0x280 [ 800.332716] ? trace_hardirqs_on+0x5b/0x180 [ 800.333232] xa_store+0x31/0x50 [ 800.333618] __io_uring_add_tctx_node+0x1cf/0x520 [ 800.334177] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 800.334776] ? alloc_fd+0x2e7/0x670 [ 800.335209] io_uring_setup+0x1fbb/0x2980 [ 800.335698] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 800.336281] ? wait_for_completion_io+0x270/0x270 [ 800.336849] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 800.337459] ? syscall_enter_from_user_mode+0x1d/0x50 [ 800.338061] do_syscall_64+0x33/0x40 [ 800.338499] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 800.339096] RIP: 0033:0x7f722f48db19 [ 800.339527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 800.341662] RSP: 002b:00007f722ca03108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 800.342537] RAX: ffffffffffffffda RBX: 00007f722f5a0f60 RCX: 00007f722f48db19 [ 800.343362] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 800.344184] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 800.345019] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 800.345846] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:10:22 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0)={0x0, 0x4396}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)=0x0) r2 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x100010, r2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r6, r1, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000000)='./file0\x00', 0xa, 0x400200, 0x12345}, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 813.870368] FAULT_INJECTION: forcing a failure. [ 813.870368] name failslab, interval 1, probability 0, space 0, times 0 [ 813.871815] CPU: 1 PID: 6344 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 813.872652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 813.873688] Call Trace: [ 813.874016] dump_stack+0x107/0x167 [ 813.874463] should_fail.cold+0x5/0xa [ 813.874935] ? create_object.isra.0+0x3a/0xa30 [ 813.875487] should_failslab+0x5/0x20 [ 813.875948] kmem_cache_alloc+0x5b/0x310 [ 813.876450] create_object.isra.0+0x3a/0xa30 [ 813.876980] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 813.877606] kmem_cache_alloc+0x159/0x310 [ 813.878112] anon_vma_clone+0xdc/0x590 [ 813.878588] __split_vma+0x17c/0x4e0 [ 813.879040] __do_munmap+0x365/0x1260 [ 813.879503] ? arch_get_unmapped_area+0x450/0x450 [ 813.880101] mmap_region+0x7cc/0x1500 [ 813.880584] do_mmap+0x868/0x1370 [ 813.881027] vm_mmap_pgoff+0x198/0x1f0 [ 813.881519] ? randomize_page+0xb0/0xb0 [ 813.882021] ksys_mmap_pgoff+0x41c/0x560 [ 813.882514] ? find_mergeable_anon_vma+0x250/0x250 [ 813.883112] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 813.883748] ? syscall_enter_from_user_mode+0x1d/0x50 [ 813.884373] do_syscall_64+0x33/0x40 [ 813.884824] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 813.885453] RIP: 0033:0x7f722f48db62 18:10:35 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000000000000000, 0x13, r0, 0x0) 18:10:35 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:10:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000000b) 18:10:35 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f0000000340)={0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x0, 0x40000, 0x0, {0x0, r9}}, 0x200) syz_io_uring_submit(r2, r1, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r9}}, 0x4) r10 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r13, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r14 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r10, 0x0) syz_io_uring_submit(r14, r12, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r15 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r16 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r15, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x0, 0x40000, 0x0, {0x0, r16}}, 0x200) syz_io_uring_submit(r2, r12, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x7, 0x8000, 0x10001, 0x1, 0xa, 0x1, {0x2, r9}}, 0x4) 18:10:35 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 64) [ 813.886137] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 813.888593] RSP: 002b:00007f722ca030f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 813.889532] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f722f48db62 [ 813.890403] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 00000000200a0000 [ 813.891276] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 813.892139] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 813.893003] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:10:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 27) 18:10:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:10:35 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) [ 813.915893] FAULT_INJECTION: forcing a failure. [ 813.915893] name failslab, interval 1, probability 0, space 0, times 0 [ 813.918623] CPU: 0 PID: 6352 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 813.920053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 813.921818] Call Trace: [ 813.922378] dump_stack+0x107/0x167 [ 813.923148] should_fail.cold+0x5/0xa [ 813.923954] ? bvec_alloc+0x148/0x2f0 [ 813.924753] should_failslab+0x5/0x20 [ 813.925561] kmem_cache_alloc+0x5b/0x310 [ 813.926431] bvec_alloc+0x148/0x2f0 [ 813.927197] bio_alloc_bioset+0x40a/0x600 [ 813.928084] ? bvec_alloc+0x2f0/0x2f0 [ 813.928867] ? iov_iter_npages+0x1fd/0xa70 [ 813.929771] iomap_dio_bio_actor+0x431/0xe30 [ 813.930711] iomap_dio_actor+0x36f/0x560 [ 813.931566] ? __x64_sys_sendfile64+0x1d1/0x210 [ 813.932540] ? do_syscall_64+0x33/0x40 [ 813.933368] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 813.934494] iomap_apply+0x289/0x810 [ 813.935272] ? iomap_dio_rw+0x90/0x90 [ 813.936080] ? trace_event_raw_event_iomap_class+0x560/0x560 [ 813.937317] ? mark_held_locks+0x9e/0xe0 [ 813.938168] ? filemap_check_errors+0xa5/0x150 [ 813.939140] __iomap_dio_rw+0x6cd/0x1110 [ 813.939986] ? iomap_dio_rw+0x90/0x90 [ 813.940799] ? iomap_dio_bio_actor+0xe30/0xe30 [ 813.941773] ? ext4_orphan_add+0x253/0x9e0 [ 813.942658] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 813.943690] ? ext4_empty_dir+0xae0/0xae0 [ 813.944554] ? jbd2__journal_start+0xf3/0x7e0 [ 813.945510] iomap_dio_rw+0x31/0x90 [ 813.946275] ext4_file_write_iter+0xe0e/0x1530 [ 813.947256] ? ext4_file_read_iter+0x4c0/0x4c0 [ 813.948212] ? kasan_save_stack+0x32/0x40 [ 813.949075] ? kasan_save_stack+0x1b/0x40 [ 813.949950] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 813.951018] ? iter_file_splice_write+0x165/0xc90 [ 813.952028] ? direct_splice_actor+0x10f/0x170 [ 813.953134] ? splice_direct_to_actor+0x387/0x980 [ 813.954141] ? do_splice_direct+0x1c4/0x290 [ 813.955043] ? do_sendfile+0x553/0x11e0 [ 813.955870] ? __x64_sys_sendfile64+0x1d1/0x210 [ 813.956839] ? do_syscall_64+0x33/0x40 [ 813.957660] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 813.958757] do_iter_readv_writev+0x476/0x750 [ 813.959689] ? _cond_resched+0x10/0x30 [ 813.960488] ? new_sync_write+0x660/0x660 [ 813.961360] ? avc_policy_seqno+0x9/0x70 [ 813.962208] ? selinux_file_permission+0x92/0x520 [ 813.963235] ? security_file_permission+0xb1/0xe0 [ 813.964257] do_iter_write+0x191/0x700 [ 813.965074] ? trace_hardirqs_on+0x5b/0x180 [ 813.965998] vfs_iter_write+0x70/0xa0 [ 813.966806] iter_file_splice_write+0x726/0xc90 [ 813.967796] ? generic_splice_sendpage+0x140/0x140 [ 813.968849] ? security_file_permission+0xb1/0xe0 [ 813.969865] ? generic_splice_sendpage+0x140/0x140 [ 813.970895] direct_splice_actor+0x10f/0x170 [ 813.971825] splice_direct_to_actor+0x387/0x980 [ 813.972802] ? pipe_to_sendpage+0x380/0x380 [ 813.973720] ? do_splice_to+0x160/0x160 [ 813.974551] ? security_file_permission+0xb1/0xe0 [ 813.975574] do_splice_direct+0x1c4/0x290 [ 813.976441] ? splice_direct_to_actor+0x980/0x980 [ 813.977475] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 813.978625] do_sendfile+0x553/0x11e0 [ 813.979430] ? do_pwritev+0x270/0x270 [ 813.980231] ? wait_for_completion_io+0x270/0x270 [ 813.981253] ? rcu_read_lock_any_held+0x75/0xa0 [ 813.982228] ? vfs_write+0x354/0xb10 [ 813.983012] __x64_sys_sendfile64+0x1d1/0x210 [ 813.983951] ? __ia32_sys_sendfile+0x220/0x220 [ 813.984911] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 813.986015] ? syscall_enter_from_user_mode+0x1d/0x50 [ 813.987101] do_syscall_64+0x33/0x40 [ 813.987868] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 813.988947] RIP: 0033:0x7fab802e1b19 [ 813.989735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 813.993577] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 813.995174] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 813.996680] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 813.998175] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 813.999648] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 814.001141] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 18:10:35 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0)={0x0, 0x1be7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:10:35 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 65) 18:10:35 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xfbffffffffff0f00, 0x13, r0, 0x0) 18:10:35 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:10:35 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:10:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) [ 814.257283] FAULT_INJECTION: forcing a failure. [ 814.257283] name failslab, interval 1, probability 0, space 0, times 0 [ 814.258588] CPU: 1 PID: 6371 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 814.259544] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 814.260486] Call Trace: [ 814.260798] dump_stack+0x107/0x167 [ 814.261232] should_fail.cold+0x5/0xa [ 814.261676] ? anon_vma_clone+0xdc/0x590 [ 814.262137] should_failslab+0x5/0x20 [ 814.262573] kmem_cache_alloc+0x5b/0x310 [ 814.263038] anon_vma_clone+0xdc/0x590 [ 814.263487] __split_vma+0x17c/0x4e0 [ 814.263913] __do_munmap+0x365/0x1260 [ 814.264351] ? arch_get_unmapped_area+0x450/0x450 [ 814.264903] mmap_region+0x7cc/0x1500 [ 814.265357] do_mmap+0x868/0x1370 [ 814.265759] vm_mmap_pgoff+0x198/0x1f0 [ 814.266200] ? randomize_page+0xb0/0xb0 [ 814.266656] ksys_mmap_pgoff+0x41c/0x560 [ 814.267115] ? find_mergeable_anon_vma+0x250/0x250 [ 814.267671] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 814.268265] ? syscall_enter_from_user_mode+0x1d/0x50 [ 814.268848] do_syscall_64+0x33/0x40 [ 814.269275] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 814.269854] RIP: 0033:0x7f722f48db62 [ 814.270273] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 814.272343] RSP: 002b:00007f722ca030f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 814.273207] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f722f48db62 [ 814.274007] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 00000000200a0000 [ 814.274810] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 814.275613] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 814.276411] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:10:36 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xff0f004600000000, 0x13, r0, 0x0) 18:10:36 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0)={0x0, 0xffffffff, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x266040, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000100)=@buf={0x84, &(0x7f0000000040)="070f84e9e20917bb4c37e08cc3726507f93a6a5fc9c30734418d882e92f193492540a55a072ab1d81f22e2a954c25e291286ec1bb85e29a753d9425570caad0f3a57f0be30d2a1d428dbee330e6760ba5f08b3986665d85c2e01a94d5a2415fe0ebb8514fd1d319a32339f6d1bb87fa542082bc35ed160e93e53e81582f82ed76aa122e5"}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000004, 0x11, r1, 0x0) 18:10:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:10:36 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 66) [ 814.550361] FAULT_INJECTION: forcing a failure. [ 814.550361] name failslab, interval 1, probability 0, space 0, times 0 [ 814.552947] CPU: 0 PID: 6388 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 814.554464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 814.556184] Call Trace: [ 814.556736] dump_stack+0x107/0x167 [ 814.557504] should_fail.cold+0x5/0xa [ 814.558299] ? create_object.isra.0+0x3a/0xa30 [ 814.559248] should_failslab+0x5/0x20 [ 814.560041] kmem_cache_alloc+0x5b/0x310 [ 814.560890] create_object.isra.0+0x3a/0xa30 [ 814.561813] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 814.562870] kmem_cache_alloc+0x159/0x310 [ 814.563744] vm_area_dup+0x78/0x290 [ 814.564505] ? find_held_lock+0x2c/0x110 [ 814.565352] ? __vma_adjust+0x66e/0x2510 [ 814.566197] ? lock_downgrade+0x6d0/0x6d0 [ 814.567070] ? up_write+0x191/0x550 [ 814.567838] ? downgrade_write+0x3a0/0x3a0 [ 814.568723] ? anon_vma_interval_tree_remove+0xb34/0xf30 [ 814.569855] ? vm_area_alloc+0x110/0x110 [ 814.570709] ? __vma_adjust+0xbb8/0x2510 [ 814.571572] ? vmacache_find+0x55/0x2a0 [ 814.572400] __split_vma+0xa8/0x4e0 [ 814.573165] __do_munmap+0xf40/0x1260 [ 814.573966] ? arch_get_unmapped_area+0x450/0x450 [ 814.574976] mmap_region+0x7cc/0x1500 [ 814.575785] do_mmap+0x868/0x1370 [ 814.576549] vm_mmap_pgoff+0x198/0x1f0 [ 814.577385] ? randomize_page+0xb0/0xb0 [ 814.578230] ksys_mmap_pgoff+0x41c/0x560 [ 814.579078] ? find_mergeable_anon_vma+0x250/0x250 [ 814.580110] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 814.581209] ? syscall_enter_from_user_mode+0x1d/0x50 [ 814.582274] do_syscall_64+0x33/0x40 [ 814.583054] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 814.584130] RIP: 0033:0x7f722f48db62 [ 814.584903] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 814.588747] RSP: 002b:00007f722ca030f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 814.590344] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f722f48db62 [ 814.591841] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 00000000200a0000 [ 814.593359] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 814.594854] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 814.596342] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:10:36 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xff3f004600000000, 0x13, r0, 0x0) 18:10:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000000d) 18:10:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 28) 18:10:36 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0)={0x0, 0xf9a4, 0x11}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:10:36 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xff3f104600000000, 0x13, r0, 0x0) [ 814.748956] FAULT_INJECTION: forcing a failure. [ 814.748956] name failslab, interval 1, probability 0, space 0, times 0 [ 814.751567] CPU: 0 PID: 6399 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 814.753138] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 814.754885] Call Trace: [ 814.755440] dump_stack+0x107/0x167 [ 814.756206] should_fail.cold+0x5/0xa [ 814.756999] ? bvec_alloc+0x148/0x2f0 [ 814.757801] should_failslab+0x5/0x20 [ 814.758593] kmem_cache_alloc+0x5b/0x310 [ 814.759441] bvec_alloc+0x148/0x2f0 [ 814.760212] bio_alloc_bioset+0x40a/0x600 [ 814.761080] ? bvec_alloc+0x2f0/0x2f0 [ 814.761878] ? iov_iter_npages+0x1fd/0xa70 [ 814.762760] iomap_dio_bio_actor+0x431/0xe30 [ 814.763685] iomap_dio_actor+0x36f/0x560 [ 814.764534] ? __x64_sys_sendfile64+0x1d1/0x210 [ 814.765509] ? do_syscall_64+0x33/0x40 [ 814.766320] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 814.767434] iomap_apply+0x289/0x810 [ 814.768209] ? iomap_dio_rw+0x90/0x90 [ 814.769005] ? trace_event_raw_event_iomap_class+0x560/0x560 [ 814.770225] ? mark_held_locks+0x9e/0xe0 [ 814.771080] ? filemap_check_errors+0xa5/0x150 [ 814.772037] __iomap_dio_rw+0x6cd/0x1110 [ 814.772875] ? iomap_dio_rw+0x90/0x90 [ 814.773687] ? iomap_dio_bio_actor+0xe30/0xe30 [ 814.774644] ? ext4_orphan_add+0x253/0x9e0 [ 814.775536] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 814.776564] ? ext4_empty_dir+0xae0/0xae0 [ 814.777432] ? jbd2__journal_start+0xf3/0x7e0 [ 814.778370] iomap_dio_rw+0x31/0x90 [ 814.779134] ext4_file_write_iter+0xe0e/0x1530 [ 814.780096] ? ext4_file_read_iter+0x4c0/0x4c0 [ 814.781046] ? kasan_save_stack+0x32/0x40 [ 814.781914] ? kasan_save_stack+0x1b/0x40 [ 814.782770] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 814.783803] ? iter_file_splice_write+0x165/0xc90 [ 814.784801] ? direct_splice_actor+0x10f/0x170 [ 814.785752] ? splice_direct_to_actor+0x387/0x980 [ 814.786750] ? do_splice_direct+0x1c4/0x290 18:10:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) [ 814.787642] ? do_sendfile+0x553/0x11e0 [ 814.788597] ? __x64_sys_sendfile64+0x1d1/0x210 [ 814.789573] ? do_syscall_64+0x33/0x40 [ 814.790381] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 814.791491] do_iter_readv_writev+0x476/0x750 [ 814.792423] ? _cond_resched+0x10/0x30 [ 814.793242] ? new_sync_write+0x660/0x660 [ 814.794105] ? avc_policy_seqno+0x9/0x70 [ 814.794955] ? selinux_file_permission+0x92/0x520 [ 814.795965] ? security_file_permission+0xb1/0xe0 [ 814.796976] do_iter_write+0x191/0x700 [ 814.797805] ? trace_hardirqs_on+0x5b/0x180 [ 814.798712] vfs_iter_write+0x70/0xa0 [ 814.799503] iter_file_splice_write+0x726/0xc90 [ 814.800481] ? generic_splice_sendpage+0x140/0x140 [ 814.801520] ? security_file_permission+0xb1/0xe0 [ 814.802522] ? generic_splice_sendpage+0x140/0x140 [ 814.803538] direct_splice_actor+0x10f/0x170 [ 814.804451] splice_direct_to_actor+0x387/0x980 [ 814.805433] ? pipe_to_sendpage+0x380/0x380 [ 814.806326] ? do_splice_to+0x160/0x160 [ 814.807150] ? security_file_permission+0xb1/0xe0 [ 814.808166] do_splice_direct+0x1c4/0x290 [ 814.809032] ? splice_direct_to_actor+0x980/0x980 [ 814.810046] ? avc_policy_seqno+0x9/0x70 [ 814.810897] ? security_file_permission+0xb1/0xe0 [ 814.811908] do_sendfile+0x553/0x11e0 [ 814.812713] ? do_pwritev+0x270/0x270 [ 814.813520] ? wait_for_completion_io+0x270/0x270 [ 814.814523] ? rcu_read_lock_any_held+0x75/0xa0 [ 814.815487] ? vfs_write+0x354/0xb10 [ 814.816266] __x64_sys_sendfile64+0x1d1/0x210 [ 814.817202] ? __ia32_sys_sendfile+0x220/0x220 [ 814.818167] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 814.819261] ? syscall_enter_from_user_mode+0x1d/0x50 [ 814.820341] do_syscall_64+0x33/0x40 [ 814.821119] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 814.822193] RIP: 0033:0x7fab802e1b19 [ 814.822962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 814.826834] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 814.828434] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 814.829929] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 814.830171] FAULT_INJECTION: forcing a failure. [ 814.830171] name failslab, interval 1, probability 0, space 0, times 0 [ 814.831413] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 18:10:36 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 67) [ 814.831425] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 814.831436] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 [ 814.835574] CPU: 1 PID: 6403 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 814.836341] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 814.837293] Call Trace: [ 814.837598] dump_stack+0x107/0x167 [ 814.838015] should_fail.cold+0x5/0xa [ 814.838446] ? anon_vma_clone+0xdc/0x590 [ 814.838911] should_failslab+0x5/0x20 [ 814.839348] kmem_cache_alloc+0x5b/0x310 [ 814.839812] anon_vma_clone+0xdc/0x590 [ 814.840257] __split_vma+0x17c/0x4e0 [ 814.840679] __do_munmap+0xf40/0x1260 [ 814.841119] ? arch_get_unmapped_area+0x450/0x450 [ 814.841676] mmap_region+0x7cc/0x1500 [ 814.842117] do_mmap+0x868/0x1370 [ 814.842512] vm_mmap_pgoff+0x198/0x1f0 [ 814.842951] ? randomize_page+0xb0/0xb0 [ 814.843411] ksys_mmap_pgoff+0x41c/0x560 [ 814.843869] ? find_mergeable_anon_vma+0x250/0x250 [ 814.844427] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 814.845018] ? syscall_enter_from_user_mode+0x1d/0x50 [ 814.845600] do_syscall_64+0x33/0x40 [ 814.846021] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 814.846592] RIP: 0033:0x7f722f48db62 [ 814.847010] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 814.849095] RSP: 002b:00007f722ca030f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 814.849968] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f722f48db62 [ 814.850783] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 00000000200a0000 [ 814.851594] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 814.852398] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 814.853206] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:10:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 29) 18:10:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 18:10:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000000e) 18:10:51 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 68) 18:10:51 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x4ce6, &(0x7f0000000000)={0x0, 0x9849, 0x0, 0x3, 0x361, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000007c0)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@alg, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/179, 0xb3}, {&(0x7f0000000400)=""/147, 0x93}, {&(0x7f0000000240)=""/90, 0x5a}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/247, 0xf7}], 0x5, &(0x7f0000000740)=""/83, 0x53}, 0x0, 0x0, 0x1, {0x3}}, 0x8) 18:10:51 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:10:51 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x4) 18:10:51 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) [ 829.994344] FAULT_INJECTION: forcing a failure. [ 829.994344] name failslab, interval 1, probability 0, space 0, times 0 [ 829.997229] CPU: 0 PID: 6422 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 829.998885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 830.000867] Call Trace: [ 830.001527] dump_stack+0x107/0x167 [ 830.002405] should_fail.cold+0x5/0xa [ 830.003323] ? create_object.isra.0+0x3a/0xa30 [ 830.004417] should_failslab+0x5/0x20 [ 830.005335] kmem_cache_alloc+0x5b/0x310 [ 830.006314] create_object.isra.0+0x3a/0xa30 [ 830.007370] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 830.008581] kmem_cache_alloc+0x159/0x310 [ 830.009596] anon_vma_clone+0xdc/0x590 [ 830.010540] __split_vma+0x17c/0x4e0 [ 830.011435] __do_munmap+0xf40/0x1260 [ 830.012346] ? arch_get_unmapped_area+0x450/0x450 [ 830.013519] mmap_region+0x7cc/0x1500 [ 830.014447] do_mmap+0x868/0x1370 [ 830.015291] vm_mmap_pgoff+0x198/0x1f0 [ 830.016227] ? randomize_page+0xb0/0xb0 [ 830.017199] ksys_mmap_pgoff+0x41c/0x560 [ 830.018193] ? find_mergeable_anon_vma+0x250/0x250 [ 830.019377] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 830.020641] ? syscall_enter_from_user_mode+0x1d/0x50 [ 830.021890] do_syscall_64+0x33/0x40 [ 830.022787] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 830.024009] RIP: 0033:0x7f722f48db62 [ 830.024901] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 830.029306] RSP: 002b:00007f722ca030f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 830.031123] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f722f48db62 [ 830.032824] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 00000000200a0000 [ 830.034534] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 830.036240] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 830.037952] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 830.072563] FAULT_INJECTION: forcing a failure. [ 830.072563] name failslab, interval 1, probability 0, space 0, times 0 [ 830.075206] CPU: 1 PID: 6424 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 830.076677] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 830.078459] Call Trace: [ 830.079022] dump_stack+0x107/0x167 [ 830.079806] should_fail.cold+0x5/0xa [ 830.080623] ? bvec_alloc+0x148/0x2f0 [ 830.081447] should_failslab+0x5/0x20 [ 830.082260] kmem_cache_alloc+0x5b/0x310 [ 830.083132] bvec_alloc+0x148/0x2f0 [ 830.083913] bio_alloc_bioset+0x40a/0x600 [ 830.084802] ? bvec_alloc+0x2f0/0x2f0 [ 830.085652] ? iov_iter_npages+0x1fd/0xa70 [ 830.086560] iomap_dio_bio_actor+0x431/0xe30 [ 830.087508] iomap_dio_actor+0x36f/0x560 [ 830.088370] ? __x64_sys_sendfile64+0x1d1/0x210 [ 830.089371] ? do_syscall_64+0x33/0x40 [ 830.090201] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 830.091353] iomap_apply+0x289/0x810 [ 830.092143] ? iomap_dio_rw+0x90/0x90 [ 830.092963] ? trace_event_raw_event_iomap_class+0x560/0x560 [ 830.094211] ? mark_held_locks+0x9e/0xe0 [ 830.095090] ? filemap_check_errors+0xa5/0x150 [ 830.096068] __iomap_dio_rw+0x6cd/0x1110 [ 830.096934] ? iomap_dio_rw+0x90/0x90 [ 830.097769] ? iomap_dio_bio_actor+0xe30/0xe30 [ 830.098744] ? ext4_orphan_add+0x253/0x9e0 [ 830.099650] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 830.100700] ? ext4_empty_dir+0xae0/0xae0 [ 830.101586] ? jbd2__journal_start+0xf3/0x7e0 [ 830.102548] iomap_dio_rw+0x31/0x90 [ 830.103329] ext4_file_write_iter+0xe0e/0x1530 [ 830.104319] ? ext4_file_read_iter+0x4c0/0x4c0 [ 830.105299] ? kasan_save_stack+0x32/0x40 [ 830.106176] ? kasan_save_stack+0x1b/0x40 [ 830.107062] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 830.108152] ? iter_file_splice_write+0x165/0xc90 [ 830.109181] ? direct_splice_actor+0x10f/0x170 [ 830.110160] ? splice_direct_to_actor+0x387/0x980 [ 830.111187] ? do_splice_direct+0x1c4/0x290 [ 830.112100] ? do_sendfile+0x553/0x11e0 [ 830.112948] ? __x64_sys_sendfile64+0x1d1/0x210 [ 830.113955] ? do_syscall_64+0x33/0x40 [ 830.114785] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 830.115929] do_iter_readv_writev+0x476/0x750 [ 830.116881] ? _cond_resched+0x10/0x30 [ 830.117723] ? new_sync_write+0x660/0x660 [ 830.118610] ? avc_policy_seqno+0x9/0x70 [ 830.119479] ? selinux_file_permission+0x92/0x520 [ 830.120516] ? security_file_permission+0xb1/0xe0 [ 830.121564] do_iter_write+0x191/0x700 [ 830.122401] ? trace_hardirqs_on+0x5b/0x180 [ 830.123329] vfs_iter_write+0x70/0xa0 [ 830.124142] iter_file_splice_write+0x726/0xc90 [ 830.125151] ? generic_splice_sendpage+0x140/0x140 [ 830.126226] ? security_file_permission+0xb1/0xe0 [ 830.127258] ? generic_splice_sendpage+0x140/0x140 [ 830.128306] direct_splice_actor+0x10f/0x170 [ 830.129247] splice_direct_to_actor+0x387/0x980 [ 830.130255] ? pipe_to_sendpage+0x380/0x380 [ 830.131180] ? do_splice_to+0x160/0x160 [ 830.132029] ? security_file_permission+0xb1/0xe0 [ 830.133065] do_splice_direct+0x1c4/0x290 [ 830.133963] ? splice_direct_to_actor+0x980/0x980 [ 830.134995] ? avc_policy_seqno+0x9/0x70 [ 830.135872] ? security_file_permission+0xb1/0xe0 [ 830.136910] do_sendfile+0x553/0x11e0 [ 830.137742] ? do_pwritev+0x270/0x270 [ 830.138569] __x64_sys_sendfile64+0x1d1/0x210 [ 830.139525] ? __ia32_sys_sendfile+0x220/0x220 [ 830.140512] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 830.141645] ? syscall_enter_from_user_mode+0x1d/0x50 [ 830.142753] do_syscall_64+0x33/0x40 [ 830.143560] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 830.144661] RIP: 0033:0x7fab802e1b19 [ 830.145466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 830.149419] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 830.151055] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 830.152585] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 830.154121] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 830.155652] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 830.157189] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 18:11:05 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 69) 18:11:05 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000001c0)={0x0, r0}) 18:11:05 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:11:05 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:11:05 executing program 6: r0 = syz_io_uring_setup(0x43865, &(0x7f0000000080)={0x0, 0x0, 0x10, 0xfffffffc, 0x368}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) r1 = syz_io_uring_setup(0x52b, &(0x7f0000000100)={0x0, 0xc49a, 0x20, 0x1, 0xd9}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) r3 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x0, 0x40000, 0x0, {0x0, r9}}, 0x200) fcntl$getownex(r1, 0x10, &(0x7f0000000340)) syz_io_uring_submit(r2, r5, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000200)}, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:11:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8) 18:11:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 30) 18:11:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000000f) [ 843.455702] FAULT_INJECTION: forcing a failure. [ 843.455702] name failslab, interval 1, probability 0, space 0, times 0 [ 843.457168] CPU: 1 PID: 6440 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 843.458034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 843.459079] Call Trace: [ 843.459416] dump_stack+0x107/0x167 [ 843.459876] should_fail.cold+0x5/0xa [ 843.460362] ? vm_area_alloc+0x1c/0x110 [ 843.460865] should_failslab+0x5/0x20 [ 843.461358] kmem_cache_alloc+0x5b/0x310 [ 843.461877] vm_area_alloc+0x1c/0x110 [ 843.462367] mmap_region+0x982/0x1500 [ 843.462853] do_mmap+0x868/0x1370 [ 843.463303] vm_mmap_pgoff+0x198/0x1f0 [ 843.463808] ? randomize_page+0xb0/0xb0 [ 843.464330] ksys_mmap_pgoff+0x41c/0x560 [ 843.464857] ? find_mergeable_anon_vma+0x250/0x250 [ 843.465501] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 843.466183] ? syscall_enter_from_user_mode+0x1d/0x50 [ 843.466857] do_syscall_64+0x33/0x40 [ 843.467351] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 843.468017] RIP: 0033:0x7f722f48db62 [ 843.468499] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 843.470879] RSP: 002b:00007f722ca030f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 843.471853] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f722f48db62 [ 843.472755] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 00000000200a0000 [ 843.473665] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 843.474574] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 843.475502] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 843.522211] FAULT_INJECTION: forcing a failure. [ 843.522211] name failslab, interval 1, probability 0, space 0, times 0 [ 843.523744] CPU: 1 PID: 6449 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 843.524675] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 843.525715] Call Trace: [ 843.526049] dump_stack+0x107/0x167 [ 843.526504] should_fail.cold+0x5/0xa [ 843.526985] ? create_object.isra.0+0x3a/0xa30 [ 843.527555] should_failslab+0x5/0x20 [ 843.528026] kmem_cache_alloc+0x5b/0x310 [ 843.528533] ? __lock_acquire+0x1657/0x5b00 [ 843.529072] create_object.isra.0+0x3a/0xa30 [ 843.529628] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 843.530265] kmem_cache_alloc_node+0x169/0x330 [ 843.530845] create_task_io_context+0x2c/0x430 [ 843.531428] submit_bio_checks+0x1366/0x1720 [ 843.531990] ? lock_acquire+0x197/0x470 [ 843.532488] ? trace_event_raw_event_block_rq_requeue+0x560/0x560 [ 843.533272] ? lock_release+0x680/0x680 [ 843.533777] ? find_held_lock+0x2c/0x110 [ 843.534291] ? __bio_add_page+0x328/0x430 [ 843.534813] submit_bio_noacct+0x82/0x1010 [ 843.535348] ? blk_queue_enter+0xc30/0xc30 [ 843.535886] submit_bio+0xf3/0x4e0 [ 843.536327] ? submit_bio_noacct+0x1010/0x1010 [ 843.536890] ? bio_alloc_bioset+0x2a1/0x600 [ 843.537421] ? bio_add_pc_page+0x100/0x100 [ 843.537947] ? bvec_alloc+0x2f0/0x2f0 [ 843.538442] iomap_dio_submit_bio+0x295/0x360 [ 843.538994] iomap_dio_bio_actor+0x7d6/0xe30 [ 843.539544] iomap_dio_actor+0x36f/0x560 [ 843.540042] ? __x64_sys_sendfile64+0x1d1/0x210 [ 843.540622] ? do_syscall_64+0x33/0x40 [ 843.541099] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 843.541776] iomap_apply+0x289/0x810 [ 843.542240] ? iomap_dio_rw+0x90/0x90 [ 843.542715] ? trace_event_raw_event_iomap_class+0x560/0x560 [ 843.543424] ? mark_held_locks+0x9e/0xe0 [ 843.543934] ? filemap_check_errors+0xa5/0x150 [ 843.544491] __iomap_dio_rw+0x6cd/0x1110 [ 843.544999] ? iomap_dio_rw+0x90/0x90 [ 843.545479] ? iomap_dio_bio_actor+0xe30/0xe30 [ 843.546037] ? ext4_orphan_add+0x253/0x9e0 [ 843.546555] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 843.547158] ? ext4_empty_dir+0xae0/0xae0 [ 843.547666] ? jbd2__journal_start+0xf3/0x7e0 [ 843.548239] iomap_dio_rw+0x31/0x90 [ 843.548695] ext4_file_write_iter+0xe0e/0x1530 [ 843.549275] ? ext4_file_read_iter+0x4c0/0x4c0 [ 843.549843] ? kasan_save_stack+0x32/0x40 [ 843.550352] ? kasan_save_stack+0x1b/0x40 [ 843.550875] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 843.551521] ? iter_file_splice_write+0x165/0xc90 [ 843.552111] ? direct_splice_actor+0x10f/0x170 [ 843.552676] ? splice_direct_to_actor+0x387/0x980 [ 843.553283] ? do_splice_direct+0x1c4/0x290 [ 843.553815] ? do_sendfile+0x553/0x11e0 [ 843.554307] ? __x64_sys_sendfile64+0x1d1/0x210 [ 843.554881] ? do_syscall_64+0x33/0x40 [ 843.555357] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 843.556019] do_iter_readv_writev+0x476/0x750 [ 843.556586] ? _cond_resched+0x10/0x30 [ 843.557068] ? new_sync_write+0x660/0x660 [ 843.557598] ? avc_policy_seqno+0x9/0x70 [ 843.558092] ? selinux_file_permission+0x92/0x520 [ 843.558684] ? security_file_permission+0xb1/0xe0 [ 843.559279] do_iter_write+0x191/0x700 [ 843.559757] ? trace_hardirqs_on+0x5b/0x180 [ 843.560299] vfs_iter_write+0x70/0xa0 [ 843.560775] iter_file_splice_write+0x726/0xc90 [ 843.561356] ? generic_splice_sendpage+0x140/0x140 [ 843.561977] ? security_file_permission+0xb1/0xe0 [ 843.562579] ? generic_splice_sendpage+0x140/0x140 [ 843.563181] direct_splice_actor+0x10f/0x170 [ 843.563721] splice_direct_to_actor+0x387/0x980 [ 843.564293] ? pipe_to_sendpage+0x380/0x380 [ 843.564831] ? do_splice_to+0x160/0x160 [ 843.565328] ? security_file_permission+0xb1/0xe0 [ 843.565929] do_splice_direct+0x1c4/0x290 [ 843.566440] ? splice_direct_to_actor+0x980/0x980 [ 843.567033] ? avc_policy_seqno+0x9/0x70 [ 843.567540] ? security_file_permission+0xb1/0xe0 [ 843.568132] do_sendfile+0x553/0x11e0 [ 843.568596] ? do_pwritev+0x270/0x270 [ 843.569060] ? wait_for_completion_io+0x270/0x270 [ 843.569663] ? rcu_read_lock_any_held+0x75/0xa0 [ 843.570235] ? vfs_write+0x354/0xb10 [ 843.570702] __x64_sys_sendfile64+0x1d1/0x210 [ 843.571258] ? __ia32_sys_sendfile+0x220/0x220 [ 843.571837] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 843.572490] ? syscall_enter_from_user_mode+0x1d/0x50 [ 843.573138] do_syscall_64+0x33/0x40 [ 843.573594] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 843.574231] RIP: 0033:0x7fab802e1b19 [ 843.574679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 843.576894] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 843.577824] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 843.578677] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 843.579550] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 843.580406] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 843.581269] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 18:11:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10) 18:11:05 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 70) 18:11:05 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:11:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000010) 18:11:05 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0)={0x0, 0xd6c1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 843.702820] FAULT_INJECTION: forcing a failure. [ 843.702820] name failslab, interval 1, probability 0, space 0, times 0 [ 843.706012] CPU: 0 PID: 6454 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 843.707693] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 843.709859] Call Trace: [ 843.710512] dump_stack+0x107/0x167 [ 843.711417] should_fail.cold+0x5/0xa [ 843.712357] ? vm_area_alloc+0x1c/0x110 [ 843.713348] should_failslab+0x5/0x20 [ 843.714311] kmem_cache_alloc+0x5b/0x310 [ 843.715324] vm_area_alloc+0x1c/0x110 [ 843.716260] mmap_region+0x982/0x1500 [ 843.717208] do_mmap+0x868/0x1370 [ 843.718078] vm_mmap_pgoff+0x198/0x1f0 [ 843.719037] ? randomize_page+0xb0/0xb0 [ 843.719996] ksys_mmap_pgoff+0x41c/0x560 [ 843.720995] ? find_mergeable_anon_vma+0x250/0x250 [ 843.722216] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 843.723508] ? syscall_enter_from_user_mode+0x1d/0x50 [ 843.724779] do_syscall_64+0x33/0x40 [ 843.725708] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 843.726965] RIP: 0033:0x7f722f48db62 [ 843.727880] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 843.732392] RSP: 002b:00007f722ca030f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 843.734254] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f722f48db62 [ 843.735983] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 00000000200a0000 [ 843.737722] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 843.739449] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 843.741175] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:11:05 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 71) 18:11:05 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) [ 843.888226] FAULT_INJECTION: forcing a failure. [ 843.888226] name failslab, interval 1, probability 0, space 0, times 0 [ 843.889620] CPU: 1 PID: 6470 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 843.890392] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 843.891336] Call Trace: [ 843.891639] dump_stack+0x107/0x167 [ 843.892054] should_fail.cold+0x5/0xa [ 843.892493] ? vm_area_dup+0x78/0x290 [ 843.892925] should_failslab+0x5/0x20 [ 843.893358] kmem_cache_alloc+0x5b/0x310 [ 843.893826] vm_area_dup+0x78/0x290 [ 843.894243] ? lock_acquire+0x197/0x470 [ 843.894710] ? mark_lock+0xf5/0x2df0 [ 843.895134] ? lock_chain_count+0x20/0x20 [ 843.895609] ? __lock_acquire+0x1657/0x5b00 [ 843.896099] ? mark_lock+0xf5/0x2df0 [ 843.896533] ? find_held_lock+0x2c/0x110 [ 843.896992] ? vm_area_alloc+0x110/0x110 [ 843.897469] ? __lock_acquire+0x1657/0x5b00 [ 843.897960] ? lock_acquire+0x197/0x470 [ 843.898413] ? __mm_populate+0x24e/0x360 [ 843.898872] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 843.899472] ? vmacache_find+0x55/0x2a0 [ 843.899925] __split_vma+0xa8/0x4e0 [ 843.900339] __do_munmap+0x365/0x1260 [ 843.900773] ? arch_get_unmapped_area+0x450/0x450 [ 843.901320] ? lock_release+0x680/0x680 [ 843.901781] mmap_region+0x7cc/0x1500 [ 843.902220] do_mmap+0x868/0x1370 [ 843.902618] vm_mmap_pgoff+0x198/0x1f0 [ 843.903059] ? randomize_page+0xb0/0xb0 [ 843.903516] ksys_mmap_pgoff+0x41c/0x560 [ 843.903975] ? find_mergeable_anon_vma+0x250/0x250 [ 843.904530] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 843.905128] ? syscall_enter_from_user_mode+0x1d/0x50 [ 843.905722] do_syscall_64+0x33/0x40 [ 843.906156] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 843.906737] RIP: 0033:0x7f722f48db62 [ 843.907164] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 843.909249] RSP: 002b:00007f722ca030f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 18:11:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x60) 18:11:05 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@loopback, @in6=@empty}}, {{@in=@remote}}}, &(0x7f00000001c0)=0xe8) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0)={0x0, 0x4}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) [ 843.910116] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f722f48db62 [ 843.911114] RDX: 0000000000000003 RSI: 0000000000100000 RDI: 0000000020ffc000 [ 843.911926] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 843.912735] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 843.913554] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:11:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x4000) 18:11:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 31) 18:11:05 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:11:05 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000001c0)={0x0, r0}) [ 844.192432] FAULT_INJECTION: forcing a failure. [ 844.192432] name failslab, interval 1, probability 0, space 0, times 0 [ 844.195147] CPU: 0 PID: 6486 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 844.196539] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 844.198241] Call Trace: [ 844.198786] dump_stack+0x107/0x167 [ 844.199530] should_fail.cold+0x5/0xa [ 844.200315] ? lock_downgrade+0x6d0/0x6d0 [ 844.201158] ? mempool_alloc+0x148/0x360 [ 844.201991] ? mempool_free_pages+0x20/0x20 [ 844.202875] should_failslab+0x5/0x20 [ 844.203653] kmem_cache_alloc+0x5b/0x310 [ 844.204481] ? mempool_free_pages+0x20/0x20 [ 844.205392] mempool_alloc+0x148/0x360 [ 844.206195] ? mempool_resize+0x7d0/0x7d0 [ 844.207038] ? mark_lock+0xf5/0x2df0 [ 844.207800] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 844.209100] __sg_alloc_table+0x24e/0x390 [ 844.210147] sg_alloc_table_chained+0x9b/0x1f0 [ 844.211067] ? sg_alloc_table_chained+0x1f0/0x1f0 [ 844.212045] scsi_alloc_sgtables+0x236/0xaf0 [ 844.212942] ? scsi_cmd_runtime_exceeced+0x1d0/0x1d0 [ 844.213980] ? lockdep_init_map_type+0x2c7/0x780 [ 844.214947] sd_init_command+0x2f8/0x30b0 [ 844.215782] ? scsi_init_command+0x4ee/0x750 [ 844.216683] scsi_queue_rq+0xe5e/0x27f0 [ 844.217514] blk_mq_dispatch_rq_list+0x372/0x1c40 [ 844.218516] ? elv_rb_del+0x50/0xa0 [ 844.219244] ? elv_rqhash_del+0x119/0x160 [ 844.220082] ? blk_mq_dequeue_from_ctx+0x7f0/0x7f0 [ 844.221078] ? dd_dispatch_request+0x1c0/0x990 [ 844.222048] blk_mq_do_dispatch_sched+0x7f4/0xa00 [ 844.223041] ? blk_mq_sched_mark_restart_hctx+0x80/0x80 [ 844.224125] ? lock_acquire+0x197/0x470 [ 844.224921] ? hctx_lock+0x7f/0x200 [ 844.225688] __blk_mq_sched_dispatch_requests+0x2d7/0x450 [ 844.226804] ? blk_mq_do_dispatch_sched+0xa00/0xa00 [ 844.227829] blk_mq_sched_dispatch_requests+0xfd/0x1e0 [ 844.228885] __blk_mq_run_hw_queue+0x12c/0x290 [ 844.229817] ? blk_mq_start_request+0x3f0/0x3f0 [ 844.230755] ? lock_acquire+0x197/0x470 [ 844.231570] __blk_mq_delay_run_hw_queue+0x53f/0x5a0 [ 844.232601] blk_mq_run_hw_queue+0x170/0x2f0 [ 844.233498] ? blk_mq_delay_run_hw_queues+0x1f0/0x1f0 [ 844.234550] ? dd_dispatch_request+0x990/0x990 [ 844.235507] blk_mq_sched_insert_requests+0x247/0x720 [ 844.236559] blk_mq_flush_plug_list+0x415/0x6c0 [ 844.237516] ? blk_mq_insert_requests+0x450/0x450 [ 844.238503] ? trace_event_raw_event_iomap_class+0x560/0x560 [ 844.239684] blk_flush_plug_list+0x26c/0x3c0 [ 844.240571] ? mark_held_locks+0x9e/0xe0 [ 844.241403] ? blk_insert_cloned_request+0x450/0x450 [ 844.242450] blk_finish_plug+0x50/0xa0 [ 844.243239] __iomap_dio_rw+0xca0/0x1110 [ 844.244075] ? iomap_dio_bio_actor+0xe30/0xe30 [ 844.245025] ? ext4_orphan_add+0x253/0x9e0 [ 844.245889] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 844.246888] ? ext4_empty_dir+0xae0/0xae0 [ 844.247728] ? jbd2__journal_start+0xf3/0x7e0 [ 844.248643] iomap_dio_rw+0x31/0x90 [ 844.249385] ext4_file_write_iter+0xe0e/0x1530 [ 844.250371] ? ext4_file_read_iter+0x4c0/0x4c0 [ 844.251293] ? kasan_save_stack+0x32/0x40 [ 844.252131] ? kasan_save_stack+0x1b/0x40 [ 844.252968] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 844.254007] ? iter_file_splice_write+0x165/0xc90 [ 844.254981] ? direct_splice_actor+0x10f/0x170 [ 844.255903] ? splice_direct_to_actor+0x387/0x980 [ 844.256882] ? do_splice_direct+0x1c4/0x290 [ 844.257762] ? do_sendfile+0x553/0x11e0 [ 844.258565] ? __x64_sys_sendfile64+0x1d1/0x210 [ 844.259508] ? do_syscall_64+0x33/0x40 [ 844.260294] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 844.261380] do_iter_readv_writev+0x476/0x750 [ 844.262291] ? _cond_resched+0x10/0x30 [ 844.263110] ? new_sync_write+0x660/0x660 [ 844.263953] ? avc_policy_seqno+0x9/0x70 [ 844.264772] ? selinux_file_permission+0x92/0x520 [ 844.265762] ? security_file_permission+0xb1/0xe0 [ 844.266744] do_iter_write+0x191/0x700 [ 844.267537] ? trace_hardirqs_on+0x5b/0x180 [ 844.268415] vfs_iter_write+0x70/0xa0 [ 844.269195] iter_file_splice_write+0x726/0xc90 [ 844.270164] ? generic_splice_sendpage+0x140/0x140 [ 844.271215] ? security_file_permission+0xb1/0xe0 [ 844.272374] ? generic_splice_sendpage+0x140/0x140 [ 844.273642] direct_splice_actor+0x10f/0x170 [ 844.274539] splice_direct_to_actor+0x387/0x980 [ 844.275488] ? pipe_to_sendpage+0x380/0x380 [ 844.276365] ? do_splice_to+0x160/0x160 [ 844.277173] ? security_file_permission+0xb1/0xe0 [ 844.278169] do_splice_direct+0x1c4/0x290 [ 844.279005] ? splice_direct_to_actor+0x980/0x980 [ 844.279984] ? avc_policy_seqno+0x9/0x70 [ 844.280842] ? security_file_permission+0xb1/0xe0 [ 844.282094] do_sendfile+0x553/0x11e0 [ 844.283077] ? do_pwritev+0x270/0x270 [ 844.284043] ? wait_for_completion_io+0x270/0x270 [ 844.285256] ? rcu_read_lock_any_held+0x75/0xa0 [ 844.286447] ? vfs_write+0x354/0xb10 [ 844.287283] __x64_sys_sendfile64+0x1d1/0x210 [ 844.288294] ? __ia32_sys_sendfile+0x220/0x220 [ 844.289318] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 844.290512] ? syscall_enter_from_user_mode+0x1d/0x50 [ 844.291667] do_syscall_64+0x33/0x40 [ 844.292508] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 844.293654] RIP: 0033:0x7fab802e1b19 [ 844.294494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 844.298591] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 844.300317] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 844.301908] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 844.303514] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 844.305096] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 844.306710] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 18:11:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 32) 18:11:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000011) 18:11:19 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000001c0)={0x0, r0}) 18:11:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x6000) 18:11:19 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000002, 0x20010, r0, 0x0) r2 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_aout(r7, &(0x7f0000001b40)=ANY=[@ANYBLOB="cc0092088a020000b0020000bb5400004a02000001000000000000000000000008e1573f6f4eb43fa74998e84344902ccd74700129950f255591a592870c0a9bf02e6881a17f7bf0eaac57700ac301695210fd2189dc0fb6b2d6e02e07dd7ba94f77880562c7c97358a896573f2872d7ce54491ec9ba710000000000000052cd85366095e133e209edf01f22c0a5d124a0831ae920c89ce165bc0b7f44478c0092c49bc3129057f065d7b9cc34fb14abd48300302420d2063b8e8e2bad099a5c1e6ce98615d3dc4739f881336198f9f13f599d8c2bcb78010637982fd9bbd19544b79281d416f9260078ccce4827370e163247eb677d89ed004af859fdef883739fc057be443756674eae65f6230b605d937162be3ac496fd0439f992fe995a6dfe8b10e538399b2664eec05934217ede2d376f489bf53c64be5ec8852cc4b55424e21b92c39c34222ff204d771b3de075a852f371604b26699d7caba956205de64838bd42522d80d3886f4bc3639ea4aea9da1514c7a43b860b00930d17d63b8fcb0c67858c85ee34bbd6f23f5c2592a435c66183f625ffa1cab45baae35f515ac377c3debe9f88eb22da71ebcd066b7a897d16891140c283aee36a38039893c7f1e5425ab1e8ac906aef8ed6fd7179e69bea2ebaaaa60c0e017fcef7ceb004b0c905fc563e44ee04ccd3848041b2304db122ac71bf7f2d6fdd28d5581576151d83422e05487c9c8a6cef7d28fdd1ec85a04c6dfa267943c266f756568d9bcd9f1cd19306ab449a605ee9b937296f60d934b9de56456f4ddf9cfbb336e777012c2f4bacc6a2a3e6eba02382050a359db799bd71aac787c0adae9a3e2c777952553075a1b6f51c6040f7160ae13b8cfcb2e6d39790d5b3ff030000244b3902a68606e84963c8074b851ef343d89e43a3b000cc35fd94b1db80d94d5eff4af716c00cb767e0fee710abf83bbe1fab4db16257e5009fee74515ecc50e24e677756e2038edfdd5285996a19052392aada67e8110faffc0f8a1ba3ea49e5d828caf6b04631cb629cb493fc2e244073c9f35088cab226c4f21faaab0f4c17cc0c4245f5e874343cc9b0e50429aa5dd16dc04a981eb4674ed84fb72a18979c86c259ef586e266140d66eb33c449a58ee4f7fdb273ca8fc5e7fad4ad2f88dc27409beb3186cb68ef4506c6fc6ac6a44da6df68e33731ab329508fa430e4f920728d416e99bc14a1b41f2dfcaa940dfc6ee27d52896b5b584eff64eca3df9145f477e26ce464f5261a2a8819c93211fa676227e47afcfa7208b78f523072a7461023f486f1d2b9f96fc1d6d4dba127c5793c2b6dbe120029c72c2451ad28a4e5153f0933fa9a152753cc6e48dace171446ec0b26ffbd19a2a7818e0ca46aac133a68e66a32f478953b82febfd67adc8941febb6f2c76a7b4c2879b555eb18ace23d21b4d14ff8e91e4647b0bcc868037e5d377bcce73fefd467d8b3493e893e3606900883b7e600f183784e0221aa76e9af83b3f8b439de10ce7e37db5bc1291269f542fa42c38fe3ba26eb217a57d0e04273a0c653a18284e737ddb4def82c3595183131276a21ffba6ec19102061211e4379c70fe52a0ec82d63f063a1ea638a0ab01c6f5bfe62049299c54a8c99c96e63d8bca19e424b6c8a7868b5c5e548e1de645313c6a9c114ac9d7bf354f5ac5045c0ab1fae4363c0f781848275df533df28e809d34b4b61ee48c6549c3328620a23cbb1acd32a5fd0648b45440f2634e4893912de8067d6baecc142b98ae84b27e0c976afe2a762aed5d7f9824d8dbd339157b7ce3de88b3aa97474e996fa97970847da4f9002d7f59b6dad71c69ce9f5d295ac05d52dc50cc16f64d980b268d3bd1e9994b2d5c1fa35228ca6bff809664eeec86bc0eff7ec07ae0abd9fd855b1af0ddfa5653fdf15b4d19c163bd4a1a476c2ff4d96f55f1fe588204f84c53301a9b1c31c6ddf1f84b5d1732a8bce8e37732d23536476ae537e1a034fdf9d9b309e5d75917585ce1b2dd6cbdd84f0dd22d17f028572c369bd8f93e14200ac0b6d86d98c72d79d311a450ce5fec75673a92b35a683350f783eef32b188f724e36ba4518ecf88c03b583d02f45da0827fd030e21200ff44ccf852011e6663a59c6762d0e8d275a0e34fa01fd86d2debea8a604fd6923f89a3700c13920bfe95118ffa6d48e7c0da6b4d8fb456ff27e85e883a47e18b92154faeea190a8ef31afbbaa842817d900fa5ddfd8bb60faac468f74a503de12e069df1d6229a2a7f5417e52d41a622d71d1861a16d99135a72158766704dd88e837616c6619a0429ba31d92033ba2f3d7b5d27d33eb6b97dbacbd31a2d79a92d6f6287c2c8031da1656e01fb7bd15d2175451c9b4965c468f207808398904921693ff4f64f4113be654340c397c2b407f7aaa18b4472d97e3641139eb7f0e694d7579febe61eec10e93aab459c34092421925e7de56cd03f3fc58e6d7b473ea5a91954f481bbcdea3778ad5bfafbf625a61d648edd5d7ccae1c382bc941d436e96fbad276f4527b7f2e03695224acad87b991b98543aeff132644a680430843332b8a403d4408a2789f27253fbe4c4a5f1e5a42a2f6d19a5380f84e3bb1101e576ba92af403530e7f5ec49b0c0f0208880a563d9cfb4e7a82c97b93cd51fe41b6257b1e61657301de2191dcf40bfeddb6679017463e3609103a0046ecc499f5cf2882e973808477be69e88e1a3b22c8eff5997ba4f6eb315aadbbcf0b3d7a24d19615ccaa5f6f5acbeb3a68e533e0578f08ef4d692658cf85019ba13c2e569a957179029bb83f79ea147ead551d46eb5b46c0d715f009abaaf20bdd868ef987fd285006871354c7dca6063ebe30cccb473c4373bb06f40cec76a5a2c6e707eb99f639d08602f6e18c64f4a5c3916e4d09fa130ba0d6e1c7e2bac1b7c3ba57fca50aa784e49dd3214e49e18abf6c3c9546e8af5b70821f11c976a235465fce40972ea37a54895c0cf319f6255cc9d86a2c8b66aa287ad631cd2705c9997633fba2c00b1876bdbb38cc9ac821675bcd0be76bfd7764d157f286c7a5365b0cc51f31b15532a8ef2d68b8cce5856f049e99ef2d075aa4d47b31bd4ddd8d92f84e0332ce13fca5479de173d8ff90ea6e6becf558b02ba63c94177b2461a16dc2bcc88ff17455660968f372a2939fddde222d5068eeacee06501a26a7452184f0af1ce184c2ec5747ca20028b11c29b9b6110dc4ff1049de459e4e754af3fc7c3c3e25f478ca868cd41da602082de1ff1288765430eed18b499d9459e9ee024d1fbbcc283f9d16c8e97f05a8d6e1a7a034d9a15caf286dbb2a1c61da730b93e32579726dc38f7772c61c389544c62e505c129a16e7791502b550b282c45c0663100c2dae75ddd9f7af55660d19157ed4523bab43379905c25bcce5f11414965709f003772ab3bbb6d74d091adece4f5a757243e8cf3f828798981e8b11b21367f22f5059858fb5ef8e2fb8f82e9ea9c9501d60e890cb0f7f4c220aaee6ccde1e9af221171771290193d73390d0055ad6ba072302009bb949d12792e73e9806376d4f255d252622d737d0e840e36605da6b99e127bff67e3437825cebe5b1d0016bf32a7f11b9c640c3e25cf22bd9473a81b52ea4e94f5cec09cc7dbfbc2be0d758bbef8de46aaa6572e84edc44bf3fe6bbd5602825a0ec2763a42e2656af4a9748b4ac266d1799930797d6d24e5eee90afe9fd36a4ff4fd6b384d392ef71249edf15b1fdb3efd93460de1701dd10851d57e0abcedf3feb38141d810218854124542c9c55bb85e2e2f460b18419b01b5a105e6e9e6ce1cbedb7f3d4734e33243c3e7ee53e107488185857d9bded778ea0eea4f806c4380763429b023944c8260cf90a4961aa1826db22c8fbb7210d429aff5978d0fe8dbe4e80bc43ade435b62728ad1238553b2abc205cb4513f858850210c31f5d2cf636a8a43b5c619cc859abaaeb6d2678a5af8124ebfecd4e458c6c02b58b571cc2d8f924b94930c42a572f70aa445fa4fbff36b40e6a6e9ba09d2fa3db27e78a35b0f672552b33e5cfe4ae879fdac56fb2558d973ccdf42805900a85679ab46b6e5ef31461d11c64adb2aced5ee76012b8c13f46996ebc0d16037275569f2ec957b22d20527f0efef6d94c92408db6be5f8c4b719c667e3c03585fe05894b7e29410cff664b248fada340d392bc222de45491f9e08929396c93804ec895cca735874d690aea9e09e3ea9ebd0c437de49e3fa6c8a8a81b4ec3ac7848a44d710aafda82a818ba0fdbb7544c8b02c0a394aa34858b99d7226c23802b996c95e177e7b2b3543ed7d60342ed8a7f7165c78598bee19a434be454c385d5a82b87579d7709971a1ceda6a9a2f2f3c8f14260269addb166c5ec64a867195f7a1a0cb4e1b389812b0e28153efff177121f9ae794ab7a92e05f664619343769d4d9a1ada2d53f5ceb265fa2811291c503d2c58b650cf7b9c19e3838fb1d755cdffd8ac7b55e1785d062195307b1b8c8f306d35e5d870afe0b10d17cb02fc6196a395c3e8c481d6c78d5401d073e578e3aaa2be65317cc4894d63899737e3e432ac0d951216dcb1826cd73789a5e0b729600b659bc7079e81b800cb7be8ef1327f58db22adcfc653b459bac0a09fe800a4d4f9f906ed92def3599cd3cfe711749ae9a13d855087fc79600d2565905fceaa7e9ab655fff01b1b2decb54d81f3dc3f77882a0f8d0c018c9c7c90ac8ad08edfe19d216fc4422c5015d41ea3fc3df24d31c230fdd4d96e7daa63c0aa5e8e420c9c5261e00c7fa9ddef5f57aac740127354157db7081604e696258002aecee2089bac1937fdcd41abab033486e9e951e05c883757828c8a056621447b90807c5784438507754182c6c709030d1184b306a5855bf1b89672135dd40fc9ae6aae9357d5a339a1a0e6d035a482ad603f0fd4a445629d48f70d8ea1f80ed44e990d291936da8cad71bf71bda9445a0a9532c80ff392ef27a34bfd4380fc971c13ca668834370896948d7d8ab19e80d615e6062e20682247ea92354e8e1c716327f507571bcf11d9f281dd028936820910ae87304b31ebdd4d6915f5cbe6a92810a0e872e57cc84f23c4aa34b7bb64590329231d6297d14a56fa451a25afd5f848c8f50de566eb325a64f854dcdff43a8a17be927dca59a2cfc3d8a5b552aa8851cf93e92b9b1665e9b048228a8a538874770d8fe349803184e75e8941bcd789dda25322ccaed23533f34fe1dac9bb94effa866439354890f67c80feec47f30e88a6c2a18d1a077c4b76c18993fd43f1184f7835057878690e8c1d3fd835a53f2542d29a2fba7f9502b89bc6eae31c599b690aa3d0fc38a43352218b00b0f612c38849ab5e5119ea25ae6cdeb0411c6d258df3b2b6c08f26030d52bd97c8dce85440902204737ffe907f687dd7f18abfb652c5e0b83d2cece2194f507b13949d7bb6bf3d89f7b255c568f922bd7a65aa6a9009c395833c9e92e81e64f5585b4c59a80e1d16797574294a53d1ede596f77ce3a2964b6ac7732ed3c4f57a326053f924964948d3ca59bdeae1b56af2e49e6481371c133b181267764cc4c32705241744589ab1531dd26dd4fd32a7f5b9158c1ae41563ba83bb93b19db3b2752839e6fc96e8d61931b83ac45bd046871f43210bfae81f34121d81321cf719a69c02e310eb245e4d6645aaaa3710646f1f8e91159f6ad1873cfc2f082ebd0b66739cc5f2fd5e28e8618a26fa193a9e1dc28ac5da3dcf075009b06c490c30ee89ff871bb8e5d955e062300ce333073045291bf838e4e594a1cc66fc1f21507cbc4023bcdf6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cde000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060c338905db9cc783400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003b6a2d0792f55a1b2ac8a1f5490000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000083e0aae29d11c0062cff3862e61325fc62e8538b150065e88d1fe5f58beec843abe656d44b9f4fbd64e2c0c4b81027064d18b24b117b2c3e0bdac042b053f4cf41c98db7a4bd711ab04802770184d3a61cb2282ad64dca2ff12d28dfdf1de8128c98c5eecde108c067a83b6afa251958f04b32fcc017c137a0132f11f6102b4e5268325aa0bcdc95497716d3f0079f0a0ce7dde7efb3d093388dd4bf8fd20e4486c09b3bc70ff6ef9f986b70b53975c672683617967f6b7f8f572912c4b31987bcad90edc55272dc2a02e228b07d"], 0x1720) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80680, 0x0) syz_io_uring_submit(r6, r1, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x6, 0x1, 0x1, {0x0, 0x0, r8}}, 0x65) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000000), 0x4000, 0x80) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/image_size', 0x0, 0x0) ioctl$LOOP_SET_FD(r9, 0x4c00, r10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r10, 0x7, &(0x7f00000000c0)=r11, 0x1) 18:11:19 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 72) 18:11:19 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:11:19 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) [ 857.818021] FAULT_INJECTION: forcing a failure. [ 857.818021] name failslab, interval 1, probability 0, space 0, times 0 [ 857.820816] CPU: 0 PID: 6497 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 857.822409] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 857.824305] Call Trace: [ 857.824917] dump_stack+0x107/0x167 [ 857.825771] should_fail.cold+0x5/0xa [ 857.826651] ? create_object.isra.0+0x3a/0xa30 [ 857.827696] should_failslab+0x5/0x20 [ 857.828576] kmem_cache_alloc+0x5b/0x310 [ 857.829510] create_object.isra.0+0x3a/0xa30 [ 857.830546] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 857.831720] kmem_cache_alloc+0x159/0x310 [ 857.832684] vm_area_dup+0x78/0x290 [ 857.833521] ? lock_acquire+0x197/0x470 [ 857.834454] ? mark_lock+0xf5/0x2df0 [ 857.835318] ? lock_chain_count+0x20/0x20 [ 857.836279] ? __lock_acquire+0x1657/0x5b00 [ 857.837282] ? mark_lock+0xf5/0x2df0 [ 857.838152] ? find_held_lock+0x2c/0x110 [ 857.839082] ? vm_area_alloc+0x110/0x110 [ 857.840023] ? __lock_acquire+0x1657/0x5b00 [ 857.841029] ? lock_acquire+0x197/0x470 [ 857.841955] ? __mm_populate+0x24e/0x360 [ 857.842891] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 857.844096] ? vmacache_find+0x55/0x2a0 [ 857.845010] __split_vma+0xa8/0x4e0 [ 857.845866] __do_munmap+0x365/0x1260 [ 857.846740] ? arch_get_unmapped_area+0x450/0x450 [ 857.847846] ? lock_release+0x680/0x680 [ 857.848769] mmap_region+0x7cc/0x1500 [ 857.849651] do_mmap+0x868/0x1370 [ 857.850454] vm_mmap_pgoff+0x198/0x1f0 [ 857.851352] ? randomize_page+0xb0/0xb0 [ 857.852275] ksys_mmap_pgoff+0x41c/0x560 [ 857.853211] ? find_mergeable_anon_vma+0x250/0x250 [ 857.854367] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 857.855563] ? syscall_enter_from_user_mode+0x1d/0x50 [ 857.856741] do_syscall_64+0x33/0x40 [ 857.857636] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 857.858812] RIP: 0033:0x7f722f48db62 [ 857.859672] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 857.863914] RSP: 002b:00007f722ca030f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 857.865682] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f722f48db62 [ 857.867326] RDX: 0000000000000003 RSI: 0000000000100000 RDI: 0000000020ffc000 [ 857.868968] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 857.870624] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 857.872265] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 857.890682] FAULT_INJECTION: forcing a failure. [ 857.890682] name failslab, interval 1, probability 0, space 0, times 0 [ 857.893292] CPU: 0 PID: 6504 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 857.894901] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 857.896805] Call Trace: [ 857.897404] dump_stack+0x107/0x167 [ 857.898266] should_fail.cold+0x5/0xa [ 857.899149] ? create_object.isra.0+0x3a/0xa30 [ 857.900204] should_failslab+0x5/0x20 [ 857.901091] kmem_cache_alloc+0x5b/0x310 [ 857.902049] ? __lock_acquire+0x1657/0x5b00 [ 857.903053] create_object.isra.0+0x3a/0xa30 [ 857.904072] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 857.905251] kmem_cache_alloc_node+0x169/0x330 [ 857.906321] create_task_io_context+0x2c/0x430 [ 857.907392] submit_bio_checks+0x1366/0x1720 [ 857.908414] ? lock_acquire+0x197/0x470 [ 857.909334] ? trace_event_raw_event_block_rq_requeue+0x560/0x560 [ 857.910783] ? lock_release+0x680/0x680 [ 857.911705] ? find_held_lock+0x2c/0x110 [ 857.912647] ? __bio_add_page+0x328/0x430 [ 857.913624] submit_bio_noacct+0x82/0x1010 [ 857.914614] ? blk_queue_enter+0xc30/0xc30 [ 857.915609] submit_bio+0xf3/0x4e0 [ 857.916444] ? submit_bio_noacct+0x1010/0x1010 [ 857.917503] ? bio_alloc_bioset+0x2a1/0x600 [ 857.918520] ? bio_add_pc_page+0x100/0x100 [ 857.919530] ? bvec_alloc+0x2f0/0x2f0 [ 857.920413] iomap_dio_submit_bio+0x295/0x360 [ 857.921451] iomap_dio_bio_actor+0x7d6/0xe30 [ 857.922500] iomap_dio_actor+0x36f/0x560 [ 857.923455] ? __x64_sys_sendfile64+0x1d1/0x210 [ 857.924518] ? do_syscall_64+0x33/0x40 [ 857.925423] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 857.926676] iomap_apply+0x289/0x810 [ 857.927528] ? iomap_dio_rw+0x90/0x90 [ 857.928417] ? trace_event_raw_event_iomap_class+0x560/0x560 [ 857.929761] ? mark_held_locks+0x9e/0xe0 [ 857.930752] ? filemap_check_errors+0xa5/0x150 [ 857.931828] __iomap_dio_rw+0x6cd/0x1110 [ 857.932779] ? iomap_dio_rw+0x90/0x90 [ 857.933698] ? iomap_dio_bio_actor+0xe30/0xe30 [ 857.934769] ? ext4_orphan_add+0x253/0x9e0 [ 857.935734] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 857.936875] ? ext4_empty_dir+0xae0/0xae0 [ 857.937831] ? jbd2__journal_start+0xf3/0x7e0 [ 857.938876] iomap_dio_rw+0x31/0x90 [ 857.939739] ext4_file_write_iter+0xe0e/0x1530 [ 857.940795] ? ext4_file_read_iter+0x4c0/0x4c0 [ 857.941846] ? kasan_save_stack+0x32/0x40 [ 857.942790] ? kasan_save_stack+0x1b/0x40 [ 857.943736] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 857.944914] ? iter_file_splice_write+0x165/0xc90 [ 857.946040] ? direct_splice_actor+0x10f/0x170 [ 857.947086] ? splice_direct_to_actor+0x387/0x980 [ 857.948180] ? do_splice_direct+0x1c4/0x290 [ 857.949161] ? do_sendfile+0x553/0x11e0 [ 857.950098] ? __x64_sys_sendfile64+0x1d1/0x210 [ 857.951166] ? do_syscall_64+0x33/0x40 [ 857.952085] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 857.953327] do_iter_readv_writev+0x476/0x750 [ 857.954380] ? _cond_resched+0x10/0x30 [ 857.955265] ? new_sync_write+0x660/0x660 [ 857.956251] ? avc_policy_seqno+0x9/0x70 [ 857.957176] ? selinux_file_permission+0x92/0x520 [ 857.958287] ? security_file_permission+0xb1/0xe0 [ 857.959392] do_iter_write+0x191/0x700 [ 857.960294] ? trace_hardirqs_on+0x5b/0x180 [ 857.961284] vfs_iter_write+0x70/0xa0 [ 857.962169] iter_file_splice_write+0x726/0xc90 [ 857.963253] ? generic_splice_sendpage+0x140/0x140 [ 857.964390] ? security_file_permission+0xb1/0xe0 [ 857.965501] ? generic_splice_sendpage+0x140/0x140 [ 857.966644] direct_splice_actor+0x10f/0x170 [ 857.967646] splice_direct_to_actor+0x387/0x980 [ 857.968720] ? pipe_to_sendpage+0x380/0x380 [ 857.969722] ? do_splice_to+0x160/0x160 [ 857.970625] ? security_file_permission+0xb1/0xe0 [ 857.971744] do_splice_direct+0x1c4/0x290 [ 857.972667] ? splice_direct_to_actor+0x980/0x980 [ 857.973799] ? avc_policy_seqno+0x9/0x70 [ 857.974739] ? security_file_permission+0xb1/0xe0 [ 857.975842] do_sendfile+0x553/0x11e0 [ 857.976710] ? do_pwritev+0x270/0x270 [ 857.977575] ? wait_for_completion_io+0x270/0x270 [ 857.978707] ? rcu_read_lock_any_held+0x75/0xa0 [ 857.979760] ? vfs_write+0x354/0xb10 [ 857.980616] __x64_sys_sendfile64+0x1d1/0x210 [ 857.981647] ? __ia32_sys_sendfile+0x220/0x220 [ 857.982689] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 857.983901] ? syscall_enter_from_user_mode+0x1d/0x50 [ 857.985087] do_syscall_64+0x33/0x40 [ 857.985944] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 857.987105] RIP: 0033:0x7fab802e1b19 [ 857.987981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 857.992238] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 857.994000] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 857.995634] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 857.997278] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 857.998922] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 858.000565] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 18:11:33 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 73) [ 871.837361] FAULT_INJECTION: forcing a failure. [ 871.837361] name failslab, interval 1, probability 0, space 0, times 0 [ 871.840015] CPU: 0 PID: 6523 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 871.841563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 871.843444] Call Trace: [ 871.844040] dump_stack+0x107/0x167 [ 871.844881] should_fail.cold+0x5/0xa [ 871.845758] ? anon_vma_clone+0xdc/0x590 [ 871.846682] should_failslab+0x5/0x20 [ 871.847539] kmem_cache_alloc+0x5b/0x310 [ 871.848465] anon_vma_clone+0xdc/0x590 [ 871.849350] __split_vma+0x17c/0x4e0 [ 871.850225] __do_munmap+0x365/0x1260 [ 871.851084] ? arch_get_unmapped_area+0x450/0x450 [ 871.852606] ? lock_release+0x680/0x680 [ 871.853532] mmap_region+0x7cc/0x1500 [ 871.854446] do_mmap+0x868/0x1370 [ 871.855262] vm_mmap_pgoff+0x198/0x1f0 [ 871.856169] ? randomize_page+0xb0/0xb0 [ 871.857107] ksys_mmap_pgoff+0x41c/0x560 [ 871.858062] ? find_mergeable_anon_vma+0x250/0x250 [ 871.859204] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 871.860420] ? syscall_enter_from_user_mode+0x1d/0x50 [ 871.861619] do_syscall_64+0x33/0x40 [ 871.862493] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 871.863684] RIP: 0033:0x7f722f48db62 [ 871.864546] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 871.868846] RSP: 002b:00007f722ca030f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 871.870624] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f722f48db62 [ 871.872279] RDX: 0000000000000003 RSI: 0000000000100000 RDI: 0000000020ffc000 [ 871.873941] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 871.875599] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 871.877254] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:11:33 executing program 0: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:11:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000013) 18:11:33 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10004) 18:11:33 executing program 5: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:11:33 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 18:11:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 33) 18:11:33 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x48000) r2 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) [ 871.893900] FAULT_INJECTION: forcing a failure. [ 871.893900] name failslab, interval 1, probability 0, space 0, times 0 [ 871.896016] CPU: 1 PID: 6526 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 871.897104] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 871.898434] Call Trace: [ 871.898864] dump_stack+0x107/0x167 [ 871.899452] should_fail.cold+0x5/0xa [ 871.900059] ? jbd2__journal_start+0x190/0x7e0 [ 871.900780] should_failslab+0x5/0x20 [ 871.901389] kmem_cache_alloc+0x5b/0x310 [ 871.902057] jbd2__journal_start+0x190/0x7e0 [ 871.902766] __ext4_journal_start_sb+0x214/0x390 [ 871.903520] ext4_dirty_inode+0xbc/0x130 [ 871.904164] ? ext4_setattr+0x22f0/0x22f0 [ 871.904818] __mark_inode_dirty+0x492/0xd30 [ 871.905502] ? current_time+0xac/0x120 [ 871.906130] generic_update_time+0x21c/0x370 [ 871.906825] ? igrab+0xc0/0xc0 [ 871.907340] file_update_time+0x43a/0x520 [ 871.908006] ? evict_inodes+0x470/0x470 [ 871.908647] ? down_write_killable+0x180/0x180 [ 871.909378] file_modified+0x7d/0xa0 [ 871.910074] ext4_file_write_iter+0x8f8/0x1530 [ 871.910875] ? ext4_file_read_iter+0x4c0/0x4c0 [ 871.911593] ? kasan_save_stack+0x32/0x40 [ 871.912244] ? kasan_save_stack+0x1b/0x40 [ 871.912899] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 871.913702] ? iter_file_splice_write+0x165/0xc90 [ 871.914475] ? direct_splice_actor+0x10f/0x170 [ 871.915194] ? splice_direct_to_actor+0x387/0x980 [ 871.915971] ? do_splice_direct+0x1c4/0x290 [ 871.916662] ? do_sendfile+0x553/0x11e0 [ 871.917289] ? __x64_sys_sendfile64+0x1d1/0x210 [ 871.918036] ? do_syscall_64+0x33/0x40 [ 871.918657] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 871.919522] do_iter_readv_writev+0x476/0x750 [ 871.920238] ? _cond_resched+0x10/0x30 [ 871.920852] ? new_sync_write+0x660/0x660 [ 871.921506] ? avc_policy_seqno+0x9/0x70 [ 871.922151] ? selinux_file_permission+0x92/0x520 [ 871.922913] ? security_file_permission+0xb1/0xe0 [ 871.923685] do_iter_write+0x191/0x700 [ 871.924303] ? trace_hardirqs_on+0x5b/0x180 [ 871.924990] vfs_iter_write+0x70/0xa0 [ 871.925590] iter_file_splice_write+0x726/0xc90 [ 871.926343] ? generic_splice_sendpage+0x140/0x140 [ 871.927136] ? security_file_permission+0xb1/0xe0 [ 871.927902] ? generic_splice_sendpage+0x140/0x140 [ 871.928677] direct_splice_actor+0x10f/0x170 [ 871.929372] splice_direct_to_actor+0x387/0x980 [ 871.930114] ? pipe_to_sendpage+0x380/0x380 [ 871.930794] ? do_splice_to+0x160/0x160 [ 871.931424] ? security_file_permission+0xb1/0xe0 [ 871.932193] do_splice_direct+0x1c4/0x290 [ 871.932852] ? splice_direct_to_actor+0x980/0x980 [ 871.933611] ? avc_policy_seqno+0x9/0x70 [ 871.934271] ? security_file_permission+0xb1/0xe0 [ 871.935040] do_sendfile+0x553/0x11e0 [ 871.935645] ? do_pwritev+0x270/0x270 [ 871.936258] ? wait_for_completion_io+0x270/0x270 [ 871.937025] ? rcu_read_lock_any_held+0x75/0xa0 [ 871.937766] ? vfs_write+0x354/0xb10 [ 871.938365] __x64_sys_sendfile64+0x1d1/0x210 [ 871.939071] ? __ia32_sys_sendfile+0x220/0x220 [ 871.939798] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 871.940622] ? syscall_enter_from_user_mode+0x1d/0x50 [ 871.941455] do_syscall_64+0x33/0x40 [ 871.942057] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 871.942872] RIP: 0033:0x7fab802e1b19 [ 871.943457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 871.946369] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 871.947560] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 871.948670] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 871.949788] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 871.950900] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 871.952014] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 18:11:33 executing program 6: exit(0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 18:11:33 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 74) 18:11:33 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x400000) [ 872.050851] FAULT_INJECTION: forcing a failure. [ 872.050851] name failslab, interval 1, probability 0, space 0, times 0 [ 872.052550] CPU: 1 PID: 6540 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 872.053550] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 872.054925] Call Trace: [ 872.055324] dump_stack+0x107/0x167 [ 872.055882] should_fail.cold+0x5/0xa [ 872.056458] ? create_object.isra.0+0x3a/0xa30 [ 872.057144] should_failslab+0x5/0x20 [ 872.057709] kmem_cache_alloc+0x5b/0x310 [ 872.058477] create_object.isra.0+0x3a/0xa30 [ 872.059136] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 872.059910] kmem_cache_alloc+0x159/0x310 [ 872.060542] vm_area_dup+0x78/0x290 [ 872.061086] ? lock_acquire+0x197/0x470 [ 872.061892] ? mark_lock+0xf5/0x2df0 [ 872.062551] ? lock_chain_count+0x20/0x20 [ 872.063182] ? __lock_acquire+0x1657/0x5b00 [ 872.063922] ? mark_lock+0xf5/0x2df0 [ 872.064481] ? find_held_lock+0x2c/0x110 [ 872.065093] ? vm_area_alloc+0x110/0x110 [ 872.065705] ? __lock_acquire+0x1657/0x5b00 [ 872.066374] ? lock_acquire+0x197/0x470 [ 872.066971] ? __mm_populate+0x24e/0x360 [ 872.067582] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 872.068371] ? vmacache_find+0x55/0x2a0 [ 872.068965] __split_vma+0xa8/0x4e0 [ 872.069555] __do_munmap+0x365/0x1260 [ 872.070278] ? arch_get_unmapped_area+0x450/0x450 [ 872.071085] ? lock_release+0x680/0x680 [ 872.071750] mmap_region+0x7cc/0x1500 [ 872.072332] do_mmap+0x868/0x1370 [ 872.072940] vm_mmap_pgoff+0x198/0x1f0 [ 872.073612] ? randomize_page+0xb0/0xb0 [ 872.074243] ksys_mmap_pgoff+0x41c/0x560 [ 872.074937] ? find_mergeable_anon_vma+0x250/0x250 [ 872.075676] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 872.076456] ? syscall_enter_from_user_mode+0x1d/0x50 [ 872.077347] do_syscall_64+0x33/0x40 [ 872.078076] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 872.078842] RIP: 0033:0x7f722f48db62 [ 872.079393] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 872.082390] RSP: 002b:00007f722ca030f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 872.083740] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f722f48db62 [ 872.084818] RDX: 0000000000000003 RSI: 0000000000100000 RDI: 0000000020ffc000 [ 872.085890] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 872.086958] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 872.088288] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:11:33 executing program 0: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:11:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x600000) 18:11:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 34) 18:11:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 18:11:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x800000) 18:11:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000015) [ 872.369542] FAULT_INJECTION: forcing a failure. [ 872.369542] name failslab, interval 1, probability 0, space 0, times 0 [ 872.372008] CPU: 0 PID: 6558 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 872.373479] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 872.375257] Call Trace: [ 872.375823] dump_stack+0x107/0x167 [ 872.376606] should_fail.cold+0x5/0xa [ 872.377420] ? create_object.isra.0+0x3a/0xa30 [ 872.378403] should_failslab+0x5/0x20 [ 872.379219] kmem_cache_alloc+0x5b/0x310 [ 872.380091] create_object.isra.0+0x3a/0xa30 [ 872.381027] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 872.382122] kmem_cache_alloc+0x159/0x310 [ 872.383009] ? mempool_free_pages+0x20/0x20 [ 872.383929] mempool_alloc+0x148/0x360 [ 872.384764] ? mempool_resize+0x7d0/0x7d0 [ 872.385656] ? mark_lock+0xf5/0x2df0 [ 872.386463] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 872.387589] __sg_alloc_table+0x24e/0x390 [ 872.388480] sg_alloc_table_chained+0x9b/0x1f0 [ 872.389452] ? sg_alloc_table_chained+0x1f0/0x1f0 [ 872.390491] scsi_alloc_sgtables+0x236/0xaf0 [ 872.391438] ? scsi_cmd_runtime_exceeced+0x1d0/0x1d0 [ 872.392522] ? lockdep_init_map_type+0x2c7/0x780 [ 872.393536] sd_init_command+0x2f8/0x30b0 [ 872.394426] ? scsi_init_command+0x4ee/0x750 [ 872.395375] scsi_queue_rq+0xe5e/0x27f0 [ 872.396236] blk_mq_dispatch_rq_list+0x372/0x1c40 [ 872.397281] ? elv_rb_del+0x50/0xa0 [ 872.398062] ? elv_rqhash_del+0x119/0x160 [ 872.398940] ? blk_mq_dequeue_from_ctx+0x7f0/0x7f0 [ 872.399991] ? dd_dispatch_request+0x1c0/0x990 [ 872.400968] blk_mq_do_dispatch_sched+0x7f4/0xa00 [ 872.402015] ? blk_mq_sched_mark_restart_hctx+0x80/0x80 [ 872.403154] ? lock_acquire+0x197/0x470 [ 872.403992] ? hctx_lock+0x7f/0x200 [ 872.404770] __blk_mq_sched_dispatch_requests+0x2d7/0x450 [ 872.405947] ? blk_mq_do_dispatch_sched+0xa00/0xa00 [ 872.407019] blk_mq_sched_dispatch_requests+0xfd/0x1e0 [ 872.408136] __blk_mq_run_hw_queue+0x12c/0x290 [ 872.409104] ? blk_mq_start_request+0x3f0/0x3f0 [ 872.410102] ? lock_acquire+0x197/0x470 [ 872.410961] __blk_mq_delay_run_hw_queue+0x53f/0x5a0 [ 872.412042] blk_mq_run_hw_queue+0x170/0x2f0 [ 872.412975] ? blk_mq_delay_run_hw_queues+0x1f0/0x1f0 [ 872.414087] ? dd_dispatch_request+0x990/0x990 [ 872.415059] blk_mq_sched_insert_requests+0x247/0x720 [ 872.416164] blk_mq_flush_plug_list+0x415/0x6c0 [ 872.417160] ? blk_mq_insert_requests+0x450/0x450 [ 872.418205] ? trace_event_raw_event_iomap_class+0x560/0x560 [ 872.419438] blk_flush_plug_list+0x26c/0x3c0 [ 872.420372] ? mark_held_locks+0x9e/0xe0 [ 872.421236] ? blk_insert_cloned_request+0x450/0x450 [ 872.422331] blk_finish_plug+0x50/0xa0 [ 872.423153] __iomap_dio_rw+0xca0/0x1110 [ 872.424030] ? iomap_dio_bio_actor+0xe30/0xe30 [ 872.425000] ? ext4_orphan_add+0x253/0x9e0 [ 872.425909] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 872.426950] ? ext4_empty_dir+0xae0/0xae0 [ 872.427828] ? jbd2__journal_start+0xf3/0x7e0 [ 872.428787] iomap_dio_rw+0x31/0x90 [ 872.429568] ext4_file_write_iter+0xe0e/0x1530 [ 872.430561] ? ext4_file_read_iter+0x4c0/0x4c0 [ 872.431526] ? kasan_save_stack+0x32/0x40 [ 872.432406] ? kasan_save_stack+0x1b/0x40 [ 872.433282] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 872.434363] ? iter_file_splice_write+0x165/0xc90 [ 872.435383] ? direct_splice_actor+0x10f/0x170 [ 872.436352] ? splice_direct_to_actor+0x387/0x980 [ 872.437372] ? do_splice_direct+0x1c4/0x290 [ 872.438287] ? do_sendfile+0x553/0x11e0 [ 872.439129] ? __x64_sys_sendfile64+0x1d1/0x210 [ 872.440114] ? do_syscall_64+0x33/0x40 [ 872.440941] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 872.442085] do_iter_readv_writev+0x476/0x750 [ 872.443045] ? _cond_resched+0x10/0x30 [ 872.443873] ? new_sync_write+0x660/0x660 [ 872.444753] ? avc_policy_seqno+0x9/0x70 [ 872.445614] ? selinux_file_permission+0x92/0x520 [ 872.446648] ? security_file_permission+0xb1/0xe0 [ 872.447681] do_iter_write+0x191/0x700 [ 872.448516] ? trace_hardirqs_on+0x5b/0x180 [ 872.449439] vfs_iter_write+0x70/0xa0 [ 872.450258] iter_file_splice_write+0x726/0xc90 [ 872.451258] ? generic_splice_sendpage+0x140/0x140 [ 872.452324] ? security_file_permission+0xb1/0xe0 [ 872.453351] ? generic_splice_sendpage+0x140/0x140 [ 872.454409] direct_splice_actor+0x10f/0x170 [ 872.455348] splice_direct_to_actor+0x387/0x980 [ 872.456341] ? pipe_to_sendpage+0x380/0x380 [ 872.457263] ? do_splice_to+0x160/0x160 [ 872.458114] ? security_file_permission+0xb1/0xe0 [ 872.459152] do_splice_direct+0x1c4/0x290 [ 872.460032] ? splice_direct_to_actor+0x980/0x980 [ 872.461051] ? avc_policy_seqno+0x9/0x70 [ 872.461925] ? security_file_permission+0xb1/0xe0 [ 872.462953] do_sendfile+0x553/0x11e0 [ 872.463770] ? do_pwritev+0x270/0x270 [ 872.464578] ? wait_for_completion_io+0x270/0x270 [ 872.465603] ? rcu_read_lock_any_held+0x75/0xa0 [ 872.466589] ? vfs_write+0x354/0xb10 [ 872.467391] __x64_sys_sendfile64+0x1d1/0x210 [ 872.468347] ? __ia32_sys_sendfile+0x220/0x220 [ 872.469323] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 872.470449] ? syscall_enter_from_user_mode+0x1d/0x50 [ 872.471549] do_syscall_64+0x33/0x40 [ 872.472343] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 872.473430] RIP: 0033:0x7fab802e1b19 [ 872.474224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 872.478144] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 872.479760] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 872.481271] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 872.482795] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 872.484307] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 872.485832] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 18:11:34 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 75) [ 872.560533] FAULT_INJECTION: forcing a failure. [ 872.560533] name failslab, interval 1, probability 0, space 0, times 0 [ 872.562985] CPU: 0 PID: 6563 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 872.564436] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 872.566211] Call Trace: [ 872.566771] dump_stack+0x107/0x167 [ 872.567547] should_fail.cold+0x5/0xa [ 872.568358] ? vm_area_alloc+0x1c/0x110 [ 872.569198] should_failslab+0x5/0x20 [ 872.570015] kmem_cache_alloc+0x5b/0x310 [ 872.570885] vm_area_alloc+0x1c/0x110 [ 872.571699] mmap_region+0x982/0x1500 [ 872.572524] do_mmap+0x868/0x1370 [ 872.573274] vm_mmap_pgoff+0x198/0x1f0 [ 872.574113] ? randomize_page+0xb0/0xb0 [ 872.574966] ksys_mmap_pgoff+0x41c/0x560 [ 872.575828] ? find_mergeable_anon_vma+0x250/0x250 [ 872.576875] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 872.577999] ? syscall_enter_from_user_mode+0x1d/0x50 [ 872.579176] do_syscall_64+0x33/0x40 [ 872.580023] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 872.581114] RIP: 0033:0x7f722f48db62 [ 872.581911] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 872.585758] RSP: 002b:00007f722ca030f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 872.587373] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f722f48db62 [ 872.588872] RDX: 0000000000000003 RSI: 0000000000100000 RDI: 0000000020ffc000 [ 872.590397] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 872.591910] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 872.593421] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:11:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x80ffff) 18:11:49 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r3 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x0, 0x40000, 0x0, {0x0, r9}}, 0x200) r10 = syz_open_dev$loop(&(0x7f0000000000), 0x4000, 0x80) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/image_size', 0x0, 0x0) ioctl$LOOP_SET_FD(r10, 0x4c00, r11) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x41) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r13 = dup3(r0, r8, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x13, r13, 0x8000000) syz_io_uring_submit(r12, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r12, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r14}}, 0x3) 18:11:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 18:11:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000023) 18:11:49 executing program 0: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:11:49 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 76) 18:11:49 executing program 5: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:11:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 35) [ 888.082939] FAULT_INJECTION: forcing a failure. [ 888.082939] name failslab, interval 1, probability 0, space 0, times 0 [ 888.087338] CPU: 0 PID: 6579 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 888.088796] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 888.090754] Call Trace: [ 888.091319] dump_stack+0x107/0x167 [ 888.092098] should_fail.cold+0x5/0xa [ 888.092912] ? create_object.isra.0+0x3a/0xa30 [ 888.093878] should_failslab+0x5/0x20 [ 888.094705] kmem_cache_alloc+0x5b/0x310 [ 888.095570] create_object.isra.0+0x3a/0xa30 [ 888.096486] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 888.097560] kmem_cache_alloc+0x159/0x310 [ 888.098466] vm_area_alloc+0x1c/0x110 [ 888.099264] mmap_region+0x982/0x1500 [ 888.100068] do_mmap+0x868/0x1370 [ 888.100802] vm_mmap_pgoff+0x198/0x1f0 [ 888.101625] ? randomize_page+0xb0/0xb0 [ 888.102503] ksys_mmap_pgoff+0x41c/0x560 [ 888.103358] ? find_mergeable_anon_vma+0x250/0x250 [ 888.104390] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 888.105493] ? syscall_enter_from_user_mode+0x1d/0x50 [ 888.106610] do_syscall_64+0x33/0x40 [ 888.107389] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 888.108463] RIP: 0033:0x7f722f48db62 [ 888.109247] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 888.113145] RSP: 002b:00007f722ca030f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 888.114772] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f722f48db62 [ 888.116265] RDX: 0000000000000003 RSI: 0000000000100000 RDI: 0000000020ffc000 [ 888.117776] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 888.119290] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 888.120798] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 888.168349] FAULT_INJECTION: forcing a failure. [ 888.168349] name failslab, interval 1, probability 0, space 0, times 0 [ 888.171137] CPU: 0 PID: 6584 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 888.172667] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 888.174449] Call Trace: [ 888.175016] dump_stack+0x107/0x167 [ 888.175783] should_fail.cold+0x5/0xa [ 888.176589] ? jbd2__journal_start+0x190/0x7e0 [ 888.177555] should_failslab+0x5/0x20 [ 888.178385] kmem_cache_alloc+0x5b/0x310 [ 888.179261] jbd2__journal_start+0x190/0x7e0 [ 888.180187] __ext4_journal_start_sb+0x214/0x390 [ 888.181200] ext4_dio_write_end_io+0x22b/0x600 [ 888.182192] iomap_dio_complete+0x1a1/0x790 [ 888.183100] ? ext4_es_delayed_clu+0x3d0/0x3d0 [ 888.184058] iomap_dio_rw+0x63/0x90 [ 888.184821] ext4_file_write_iter+0xe0e/0x1530 [ 888.185791] ? ext4_file_read_iter+0x4c0/0x4c0 [ 888.186783] ? kasan_save_stack+0x32/0x40 [ 888.187654] ? kasan_save_stack+0x1b/0x40 [ 888.188512] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 888.189575] ? iter_file_splice_write+0x165/0xc90 [ 888.190611] ? direct_splice_actor+0x10f/0x170 [ 888.191566] ? splice_direct_to_actor+0x387/0x980 [ 888.192572] ? do_splice_direct+0x1c4/0x290 [ 888.193474] ? do_sendfile+0x553/0x11e0 [ 888.194342] ? __x64_sys_sendfile64+0x1d1/0x210 [ 888.195321] ? do_syscall_64+0x33/0x40 [ 888.196137] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 888.197267] do_iter_readv_writev+0x476/0x750 [ 888.198231] ? _cond_resched+0x10/0x30 [ 888.199059] ? new_sync_write+0x660/0x660 [ 888.199926] ? avc_policy_seqno+0x9/0x70 [ 888.200777] ? selinux_file_permission+0x92/0x520 [ 888.201792] ? security_file_permission+0xb1/0xe0 [ 888.202850] do_iter_write+0x191/0x700 [ 888.203664] ? trace_hardirqs_on+0x5b/0x180 [ 888.204582] vfs_iter_write+0x70/0xa0 [ 888.205398] iter_file_splice_write+0x726/0xc90 [ 888.206427] ? generic_splice_sendpage+0x140/0x140 [ 888.207473] ? security_file_permission+0xb1/0xe0 [ 888.208488] ? generic_splice_sendpage+0x140/0x140 [ 888.209524] direct_splice_actor+0x10f/0x170 [ 888.210476] splice_direct_to_actor+0x387/0x980 [ 888.211461] ? pipe_to_sendpage+0x380/0x380 [ 888.212370] ? do_splice_to+0x160/0x160 [ 888.213204] ? security_file_permission+0xb1/0xe0 [ 888.214247] do_splice_direct+0x1c4/0x290 [ 888.215121] ? splice_direct_to_actor+0x980/0x980 [ 888.216136] ? avc_policy_seqno+0x9/0x70 [ 888.216992] ? security_file_permission+0xb1/0xe0 [ 888.218042] do_sendfile+0x553/0x11e0 [ 888.218851] ? do_pwritev+0x270/0x270 [ 888.219650] ? wait_for_completion_io+0x270/0x270 [ 888.220659] ? perf_trace_preemptirq_template+0x26d/0x400 [ 888.221801] ? perf_trace_preemptirq_template+0x26d/0x400 [ 888.223015] ? rcu_read_lock_any_held+0x75/0xa0 [ 888.224001] __x64_sys_sendfile64+0x1d1/0x210 [ 888.224945] ? __ia32_sys_sendfile+0x220/0x220 [ 888.225929] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 888.227053] ? syscall_enter_from_user_mode+0x1d/0x50 [ 888.228144] do_syscall_64+0x33/0x40 [ 888.228939] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 888.230051] RIP: 0033:0x7fab802e1b19 [ 888.230833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 888.234757] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 888.236356] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 888.237856] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 888.239388] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 888.240897] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 888.242432] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 18:11:50 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 77) 18:11:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x1000000) 18:11:50 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 888.425964] FAULT_INJECTION: forcing a failure. [ 888.425964] name failslab, interval 1, probability 0, space 0, times 0 [ 888.428501] CPU: 0 PID: 6595 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 888.429950] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 888.431692] Call Trace: [ 888.432247] dump_stack+0x107/0x167 [ 888.433012] should_fail.cold+0x5/0xa [ 888.433812] ? create_object.isra.0+0x3a/0xa30 [ 888.434780] should_failslab+0x5/0x20 [ 888.435578] kmem_cache_alloc+0x5b/0x310 [ 888.436438] create_object.isra.0+0x3a/0xa30 [ 888.437355] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 888.438433] kmem_cache_alloc+0x159/0x310 [ 888.439306] vm_area_alloc+0x1c/0x110 [ 888.440102] mmap_region+0x982/0x1500 [ 888.440914] do_mmap+0x868/0x1370 [ 888.441650] vm_mmap_pgoff+0x198/0x1f0 [ 888.442479] ? randomize_page+0xb0/0xb0 [ 888.443326] ksys_mmap_pgoff+0x41c/0x560 [ 888.444182] ? find_mergeable_anon_vma+0x250/0x250 [ 888.445208] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 888.446310] ? syscall_enter_from_user_mode+0x1d/0x50 [ 888.447390] do_syscall_64+0x33/0x40 [ 888.448184] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 888.449267] RIP: 0033:0x7f722f48db62 [ 888.450048] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 888.453891] RSP: 002b:00007f722ca030f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 888.455482] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f722f48db62 [ 888.456966] RDX: 0000000000000003 RSI: 0000000000100000 RDI: 0000000020ffc000 [ 888.458469] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 888.459956] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 888.461441] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:11:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 36) 18:11:50 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 18:11:50 executing program 7: syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 78) 18:11:50 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x4000, 0x80) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/image_size', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000000)={0x0, 0x6, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @broadcast, @random="92445e91fa93", @remote, @local, @local]}) r2 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) r3 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x6, 0x428000) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000040), 0xa6, 0x200) ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000080)=0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) 18:11:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x4000000) 18:11:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000001da) 18:11:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)) [ 888.735318] FAULT_INJECTION: forcing a failure. [ 888.735318] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 888.737737] CPU: 1 PID: 6612 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 888.739265] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 888.741339] Call Trace: [ 888.741961] dump_stack+0x107/0x167 [ 888.742773] should_fail.cold+0x5/0xa [ 888.743549] __alloc_pages_nodemask+0x182/0x600 [ 888.744482] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 888.745733] ? walk_mem_res+0x170/0x170 [ 888.746807] alloc_pages_current+0x187/0x280 [ 888.747965] pte_alloc_one+0x16/0x1a0 [ 888.748760] __pte_alloc+0x1d/0x330 [ 888.749605] remap_pfn_range_internal+0x9a3/0xf60 [ 888.750601] ? lookup_memtype+0x5b/0x200 [ 888.751428] ? apply_to_existing_page_range+0x40/0x40 [ 888.752481] remap_pfn_range+0xcd/0x160 [ 888.753478] ? remap_pfn_range_notrack+0x70/0x70 [ 888.754704] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 888.755815] io_uring_mmap+0x398/0x530 [ 888.756779] mmap_file+0x5e/0xe0 [ 888.757442] mmap_region+0xc4d/0x1500 [ 888.758302] do_mmap+0x868/0x1370 [ 888.759181] vm_mmap_pgoff+0x198/0x1f0 [ 888.760235] ? randomize_page+0xb0/0xb0 [ 888.761053] ksys_mmap_pgoff+0x41c/0x560 [ 888.762010] ? find_mergeable_anon_vma+0x250/0x250 [ 888.762984] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 888.764198] ? syscall_enter_from_user_mode+0x1d/0x50 [ 888.765474] do_syscall_64+0x33/0x40 [ 888.766317] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 888.767519] RIP: 0033:0x7f722f48db62 [ 888.768247] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 888.771898] RSP: 002b:00007f722ca030f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 888.773405] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f722f48db62 [ 888.774807] RDX: 0000000000000003 RSI: 0000000000100000 RDI: 0000000020ffc000 [ 888.776344] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 888.778181] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 888.779761] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 18:11:50 executing program 5: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROSET(r0, 0x1268, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) [ 888.817782] FAULT_INJECTION: forcing a failure. [ 888.817782] name failslab, interval 1, probability 0, space 0, times 0 [ 888.820040] CPU: 1 PID: 6613 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 888.821384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 888.822997] Call Trace: [ 888.823513] dump_stack+0x107/0x167 [ 888.824224] should_fail.cold+0x5/0xa [ 888.824975] ? create_object.isra.0+0x3a/0xa30 [ 888.825865] should_failslab+0x5/0x20 [ 888.826612] kmem_cache_alloc+0x5b/0x310 [ 888.827409] create_object.isra.0+0x3a/0xa30 [ 888.828283] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 888.829283] __kmalloc+0x16e/0x390 [ 888.829994] iter_file_splice_write+0x165/0xc90 [ 888.830916] ? generic_splice_sendpage+0x140/0x140 [ 888.831876] ? pipe_to_user+0x170/0x170 [ 888.832672] ? security_file_permission+0xb1/0xe0 [ 888.833627] ? generic_splice_sendpage+0x140/0x140 [ 888.834609] direct_splice_actor+0x10f/0x170 [ 888.835490] splice_direct_to_actor+0x387/0x980 [ 888.836404] ? pipe_to_sendpage+0x380/0x380 [ 888.837250] ? do_splice_to+0x160/0x160 [ 888.838032] ? security_file_permission+0xb1/0xe0 [ 888.838979] do_splice_direct+0x1c4/0x290 [ 888.839783] ? splice_direct_to_actor+0x980/0x980 [ 888.840725] ? avc_policy_seqno+0x9/0x70 [ 888.841520] ? security_file_permission+0xb1/0xe0 [ 888.842472] do_sendfile+0x553/0x11e0 [ 888.843210] ? do_pwritev+0x270/0x270 [ 888.843953] ? wait_for_completion_io+0x270/0x270 [ 888.844902] ? perf_trace_preemptirq_template+0x26d/0x400 [ 888.845975] ? perf_trace_preemptirq_template+0x26d/0x400 [ 888.847062] ? rcu_read_lock_any_held+0x75/0xa0 [ 888.848000] __x64_sys_sendfile64+0x1d1/0x210 [ 888.848866] ? __ia32_sys_sendfile+0x220/0x220 [ 888.849764] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 888.850784] ? syscall_enter_from_user_mode+0x1d/0x50 [ 888.851787] do_syscall_64+0x33/0x40 [ 888.852520] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 888.853522] RIP: 0033:0x7fab802e1b19 [ 888.854249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 888.857793] RSP: 002b:00007fab7d857188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 888.859255] RAX: ffffffffffffffda RBX: 00007fab803f4f60 RCX: 00007fab802e1b19 [ 888.860880] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 888.862589] RBP: 00007fab7d8571d0 R08: 0000000000000000 R09: 0000000000000000 [ 888.864108] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 888.865663] R13: 00007ffcc34e564f R14: 00007fab7d857300 R15: 0000000000022000 18:11:50 executing program 6: sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0xfffffff8}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x5f51}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x10000}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x43b9, &(0x7f0000000240)={0x0, 0x97bd, 0x3a, 0x1, 0x1ce, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITE={0x17, 0x0, 0x2007, @fd_index=0x8, 0x2, &(0x7f00000003c0)="7f037f5122d9a8f402b200297dccdb8835853744dd199ead6ddefe4dcfef4e2a22a354394b672927d120ad3e00e071f79e2e72729be0158d19e0935aed7be7c50d8eda070e63f2fc59b57345a84842dc93256b6c", 0x54, 0x787b2470857ef172, 0x1}, 0x4) 18:11:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x4000100) 18:11:50 executing program 6: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000008, 0x4010, r0, 0x10000000) syz_io_uring_setup(0x3218, &(0x7f0000000080)={0x0, 0xca23, 0x8, 0x2, 0x181, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r4 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r8, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x0, 0x40000, 0x0, {0x0, r10}}, 0x200) r11 = syz_open_dev$loop(&(0x7f0000000000), 0x4000, 0x80) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/image_size', 0x0, 0x0) ioctl$LOOP_SET_FD(r11, 0x4c00, r12) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r12, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000004}, 0x4) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}, 0x3f) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x8, &(0x7f0000000000), 0x1, 0x0, 0x0, {0x0, r13}}, 0xea22) 18:11:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000281) [ 889.132793] ------------[ cut here ]------------ [ 889.133970] WARNING: CPU: 0 PID: 6612 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 889.135517] Modules linked in: [ 889.136072] CPU: 0 PID: 6612 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 889.137270] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 889.138708] RIP: 0010:get_pat_info+0x216/0x270 [ 889.139497] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 21 8b 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 0a 8b 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 c5 ae 5a 00 e9 [ 889.142640] RSP: 0018:ffff88804501f890 EFLAGS: 00010212 [ 889.143554] RAX: 0000000000013cb6 RBX: ffff88801535ef00 RCX: ffffc9000a833000 [ 889.144799] RDX: 0000000000040000 RSI: ffffffff811255f6 RDI: 0000000000000007 [ 889.146038] RBP: ffff88804501f948 R08: 0000000000000000 R09: ffff88804501f818 [ 889.147264] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 889.148480] R13: 1ffff11008a03f12 R14: 0000000000000000 R15: ffff88801535ef50 [ 889.151669] FS: 00007f722ca03700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 889.154505] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 889.157298] CR2: 0000001b2d522000 CR3: 00000000457f8000 CR4: 0000000000350ef0 [ 889.159893] Call Trace: [ 889.160367] ? pgprot_writethrough+0xc0/0xc0 [ 889.161138] ? finish_task_switch+0x126/0x5d0 [ 889.161892] ? finish_task_switch+0xef/0x5d0 [ 889.162675] untrack_pfn+0xdc/0x240 [ 889.163316] ? track_pfn_insert+0x150/0x150 [ 889.164045] ? lock_downgrade+0x6d0/0x6d0 [ 889.164765] ? uprobe_munmap+0x1c/0x670 [ 889.165474] unmap_single_vma+0x1bc/0x300 [ 889.166212] zap_page_range_single+0x2ce/0x450 [ 889.166980] ? unmap_single_vma+0x300/0x300 [ 889.167743] ? remap_pfn_range_internal+0xc56/0xf60 [ 889.168616] ? lookup_memtype+0x5b/0x200 [ 889.169346] ? apply_to_existing_page_range+0x40/0x40 [ 889.170258] remap_pfn_range+0x139/0x160 [ 889.170946] ? remap_pfn_range_notrack+0x70/0x70 [ 889.171776] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 889.172702] io_uring_mmap+0x398/0x530 [ 889.173402] mmap_file+0x5e/0xe0 [ 889.173992] mmap_region+0xc4d/0x1500 [ 889.174675] do_mmap+0x868/0x1370 [ 889.175296] vm_mmap_pgoff+0x198/0x1f0 [ 889.175954] ? randomize_page+0xb0/0xb0 [ 889.176658] ksys_mmap_pgoff+0x41c/0x560 [ 889.177378] ? find_mergeable_anon_vma+0x250/0x250 [ 889.178252] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 889.179170] ? syscall_enter_from_user_mode+0x1d/0x50 [ 889.180041] do_syscall_64+0x33/0x40 [ 889.180691] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 889.181581] RIP: 0033:0x7f722f48db62 [ 889.182261] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 889.185405] RSP: 002b:00007f722ca030f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 889.186737] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f722f48db62 [ 889.187969] RDX: 0000000000000003 RSI: 0000000000100000 RDI: 0000000020ffc000 [ 889.189201] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 18:11:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) [ 889.190431] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 889.191905] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 889.193157] irq event stamp: 1163 [ 889.193749] hardirqs last enabled at (1171): [] console_unlock+0x92d/0xb40 [ 889.195222] hardirqs last disabled at (1180): [] console_unlock+0x839/0xb40 [ 889.196681] softirqs last enabled at (1150): [] asm_call_irq_on_stack+0x12/0x20 [ 889.198237] softirqs last disabled at (1139): [] asm_call_irq_on_stack+0x12/0x20 [ 889.199761] ---[ end trace 20486f98ec8ddf09 ]--- VM DIAGNOSIS: 18:11:51 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff822e9701 RDI=ffffffff879fa240 RBP=ffffffff879fa200 RSP=ffff88804501f2e8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffffffff879fa258 R14=0000000000000001 R15=ffffffff879fa250 RIP=ffffffff822e9758 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f722ca03700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d522000 CR3=00000000457f8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff85a1a6ac RDX=0000000000000000 RSI=1ffffffff0b434d6 RDI=ffff8880425679a0 RBP=ffff88804256797d RSP=ffff888042567870 R8 =ffffffff85a1a6b1 R9 =ffff888042567d10 R10=0000000000032047 R11=1ffff110084acf16 R12=ffff888042567d10 R13=ffff888042567948 R14=1ffff110084acf16 R15=ffffffff85a1a6b0 RIP=ffffffff81109ee3 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4f18268700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000000010c CR3=0000000041b34000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000