00003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) dup2(r0, r1) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200401, 0x40) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {0x8001}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x38}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) 03:11:34 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x15, &(0x7f0000000080), 0x4) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x480100, 0x148) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) fcntl$dupfd(r0, 0x406, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00#@\x00\x00\x00\x00\x00'], 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x48000080}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20044880) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000005700000008000300", @ANYRES32=r9, @ANYBLOB="38f28f1188f206009500ca86000075292a8dcd8857ca69029a6986d51f54c6563787bdffc0fd1c0a86e4073b16e6189a7dd9fcf477b8b6fb1ccb35c83d77e21e696090bf2f101a4088e77cc4a343c981011540d2775f2346e565c57bf8687e92b271d3395794a2e59ddf4f91dc44c347"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x0, 0x4, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 03:11:34 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000500)=""/229, 0xe5}], 0x4}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 657.955341] loop1: detected capacity change from 0 to 4096 [ 657.956390] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:11:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 4) [ 658.006203] audit: type=1326 audit(1748056295.258:22): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6384 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a5c97b19 code=0x7ffc0000 [ 658.017337] audit: type=1326 audit(1748056295.267:23): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6384 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd8a5c97b19 code=0x7ffc0000 [ 658.024590] audit: type=1326 audit(1748056295.268:24): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6384 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a5c97b19 code=0x7ffc0000 [ 658.031919] audit: type=1326 audit(1748056295.275:25): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6384 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8a5c97b19 code=0x7ffc0000 [ 658.034679] loop1: detected capacity change from 0 to 4096 03:11:35 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000500)=""/229, 0xe5}], 0x4}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 658.040607] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 658.041342] audit: type=1326 audit(1748056295.275:26): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6384 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a5c97b19 code=0x7ffc0000 [ 658.048343] FAULT_INJECTION: forcing a failure. [ 658.048343] name failslab, interval 1, probability 0, space 0, times 0 [ 658.049821] CPU: 0 PID: 6404 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 658.050672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 658.051706] Call Trace: [ 658.052045] dump_stack+0x107/0x167 [ 658.052501] should_fail.cold+0x5/0xa [ 658.052975] ? create_object.isra.0+0x3a/0xa20 [ 658.053541] should_failslab+0x5/0x20 [ 658.054011] kmem_cache_alloc+0x5b/0x310 03:11:35 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00), 0x0, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) [ 658.054515] create_object.isra.0+0x3a/0xa20 [ 658.055170] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 658.055804] __kmalloc+0x16e/0x390 [ 658.056246] alloc_pipe_info+0x1e5/0x590 [ 658.056752] ? SOFTIRQ_verbose+0x10/0x10 [ 658.057254] splice_direct_to_actor+0x774/0x980 [ 658.057831] ? _cond_resched+0x10/0x30 [ 658.058307] ? inode_security+0x107/0x140 [ 658.058812] ? pipe_to_sendpage+0x380/0x380 [ 658.059347] ? avc_policy_seqno+0x9/0x70 [ 658.059849] ? selinux_file_permission+0x92/0x520 [ 658.060444] ? do_splice_to+0x160/0x160 [ 658.060937] ? security_file_permission+0xb1/0xe0 [ 658.061537] do_splice_direct+0x1c4/0x290 [ 658.062064] ? splice_direct_to_actor+0x980/0x980 [ 658.062653] ? avc_policy_seqno+0x9/0x70 [ 658.063154] ? security_file_permission+0xb1/0xe0 [ 658.063649] audit: type=1326 audit(1748056295.275:27): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6384 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a5c97b19 code=0x7ffc0000 [ 658.063778] do_sendfile+0x553/0x11e0 [ 658.066776] ? do_pwritev+0x270/0x270 [ 658.067245] ? wait_for_completion_io+0x270/0x270 [ 658.067847] ? rcu_read_lock_any_held+0x75/0xa0 [ 658.068415] ? vfs_write+0x354/0xb10 [ 658.068881] __x64_sys_sendfile64+0x1d1/0x210 [ 658.069449] ? __ia32_sys_sendfile+0x220/0x220 [ 658.070022] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 658.070677] ? syscall_enter_from_user_mode+0x1d/0x50 [ 658.071319] do_syscall_64+0x33/0x40 [ 658.071779] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 658.072413] RIP: 0033:0x7fe3014fcb19 [ 658.072870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 658.075139] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 658.076088] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 658.076963] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 658.077425] audit: type=1326 audit(1748056295.282:28): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6384 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd8a5c97b19 code=0x7ffc0000 [ 658.077833] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 658.077840] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.077847] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 658.078068] hpet: Lost 1 RTC interrupts [ 658.106748] audit: type=1326 audit(1748056295.282:29): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6384 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fd8a5c97ad7 code=0x7ffc0000 [ 658.111763] loop6: detected capacity change from 0 to 2102784 03:11:35 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x4b5, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = gettid() sendfile(r0, r1, 0x0, 0xffe3) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) r5 = fork() ptrace(0x10, r2) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000200)=0x2, 0x7, 0x4) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000a, 0xffffffffffffffff) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) [ 658.134435] EXT4-fs error (device loop6): ext4_fill_super:4967: inode #2: comm syz-executor.6: iget: special inode unallocated [ 658.136111] EXT4-fs (loop6): get root inode failed [ 658.136724] EXT4-fs (loop6): mount failed 03:11:35 executing program 4: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000000c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e40)) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r2, 0x800, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0x2000003) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000500)) r5 = socket$netlink(0x10, 0x3, 0x0) getpeername$netlink(r5, &(0x7f0000000040), &(0x7f0000000080)=0xc) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000b00)=ANY=[@ANYRES32=0x0, @ANYBLOB='$}', @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRESHEX=r5, @ANYBLOB="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", @ANYBLOB], 0x54, 0x3) sendfile(r2, r3, 0x0, 0x100000001) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fadvise64(r6, 0x0, 0xfff, 0x4) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}}, 0x108) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) [ 673.662254] tmpfs: Bad value for 'mpol' [ 673.670301] tmpfs: Bad value for 'mpol' 03:11:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 5) 03:11:50 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@mpol={'mpol', 0x3d, {'default', '=relative', @val={0x3a, [0x30, 0x3a, 0x30, 0x3a, 0x30, 0x2f, 0x31]}}}}]}) 03:11:50 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100220018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653000"]) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nr0\x00'}) 03:11:50 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000000c) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x401870cb, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x15, 0x0, 0x1, 0x20, 0x6, @local}, 0x14) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000600)={0xa, 0x0, 0x0, @empty}, 0x1c) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "c0502dc8a3f3e75366d7a29d0bd42e6d365c8384f665a2104b6faaa5427626b93311e77f0de4211e1217bc355a5246327eb7ba126bf7e4adb45535a4d9757c77f555e42ca654e9f9089be590271f821f5f6b632da2dabf1d6e618629da57a34a33f5e913338e628f32d84f60dbb9f94b70f1828e7d652bb2443c02901738d15cd72d14288f0d47dfe96e49988d0402f96628f97be361723e018daf71ab0100000000000000c9aa53b8c092760da4cd088f03fad6704eceb8949dc35abc6c9f51916777bc38aa3669fb220546dbd1024eb87da205b46eda75f2b1a85bdce12a8afa95492a14be3f42052ff500", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005ed00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000540)={{r8, 0xe32, 0x1, 0xd38, 0x48000, 0x4, 0x4a12, 0x4, 0x5, 0x217, 0x8, 0x2, 0x1000, 0xfa, 0xf9f}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005ff00)={0xb, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x1, "1a0e0a464e3b76"}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000228bd7000fbdbdf25020000000800030007000000080002000200000038000180060001000000000008000300ac1e01011400040000000000000000000000000000000000060005004e240000060005004e21000008000200020000000800031a01000000"], 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x7, 0x1, &(0x7f0000000300)=[{&(0x7f00000000c0)="e4a60f21e4b5de5df6ff5e8ef5ff39a97a25cf6beca14652c1682ca8ad01ffaaa7ecd2ad8e3970c1", 0x28}], 0x400, &(0x7f0000000340)=ANY=[@ANYBLOB="646f74732c747a3d5554432c6e6f646f74732c646f74732c736d61636b66736861743d002c66756e638000000000000000434845434b2c00"]) 03:11:50 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00), 0x0, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 03:11:50 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x4b5, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = gettid() sendfile(r0, r1, 0x0, 0xffe3) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) r5 = fork() ptrace(0x10, r2) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000200)=0x2, 0x7, 0x4) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000a, 0xffffffffffffffff) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 03:11:50 executing program 7: sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd7000fedbdf2503000000080034000400000008003900ef0000009ee8e73d96c277e5a5e855b2d3e0c1357890716d9b133583523f2dcaf930bde9866a645d47f561a223336560548d1dd7f1cfe4ad7c00e67ecfe5afca4399d86f3f7320958bbafc30c1a3928f3fe51e189dfa879a750febb1d4bc3066db727dba292436b6e6fd6794fa60c60bf3dc8178d0c33a4e1c7d89e68567"], 0x24}, 0x1, 0x0, 0x0, 0x400d1}, 0x810) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.log\x00', 0x20200, 0x14) [ 673.685857] loop5: detected capacity change from 0 to 32768 sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000d40)={0x54, 0x0, 0xfd, 0x70ad2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2a, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32353033313039333700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000003b6f4d0472b34eacba0268aaada5ab8e010000000c00000000000000ddf4655f00"/64, 0x40, 0x4df}, {&(0x7f0000010200)="0100000000000500110000000000000000000000040000003c00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="030000001300000023000000ce000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010500)="fffffffffcff0700000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x480, 0x23}, {&(0x7f0000010a00)="0b0000000c0001022e00000002000000f40302022e2e00"/32, 0x20, 0x1400}, {&(0x7f0000010b00)="00000000000400"/32, 0x20, 0x1800}, {&(0x7f0000010c00)="00000000000400"/32, 0x20, 0x1c00}, {&(0x7f0000010d00)="00000000000400"/32, 0x20, 0x2000}, {&(0x7f0000010e00)="00000000000400"/32, 0x20, 0x2400}, {&(0x7f0000010f00)="00000000000400"/32, 0x20, 0x2800}, {&(0x7f0000011000)="00000000000400"/32, 0x20, 0x2c00}, {&(0x7f0000011100)="00000000000400"/32, 0x20, 0x3000}, {&(0x7f0000011200)="00000000000400"/32, 0x20, 0x3400}, {&(0x7f0000011300)="00000000000400"/32, 0x20, 0x3800}, {&(0x7f0000011400)="00000000000400"/32, 0x20, 0x3c00}, {&(0x7f0000011500)="00000000000400"/32, 0x20, 0x4000}, {&(0x7f0000011600)="504d4d00504d4dffddf4655f00000000647679756b6f762d676c6170746f70320000000000007b2600000000001400000000000000000000000000000000000000000000006c6f6f7033300075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x43fc}, {&(0x7f0000011700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x4800}, {&(0x7f0000011800)="ffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300"/1056, 0x420, 0x4c00}, {&(0x7f0000011d00)="0400"/32, 0x20, 0x5400}, {&(0x7f0000011e00)="0500"/32, 0x20, 0x5800}, {&(0x7f0000011f00)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000007000"/96, 0x60, 0x5c00}, {&(0x7f0000012000)="0200"/32, 0x20, 0x6000}, {&(0x7f0000012100)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x6400}, {&(0x7f0000012200)="0300"/32, 0x20, 0x6800}, {&(0x7f0000012300)="0400"/32, 0x20, 0x6c00}, {&(0x7f0000012400)="0500"/32, 0x20, 0x7000}, {&(0x7f0000000fc0)="00000000000000000100000000000000000000000000000000000000000000005c8a546ffa654b0c0000000000400000080000000000000000000000000000000000000000000042007000"/104, 0x68, 0x7400}, {&(0x7f0000012600)="0200"/32, 0x20, 0x7800}, {&(0x7f0000012700)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d803050766696c653100"/64, 0x40, 0x7c00}, {&(0x7f0000012800)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8030000000006000000779b539778617474723100000601f00300000000060000007498539778617474723200"/96, 0x60, 0x8000}, {&(0x7f0000012900)="0000000000000000000000000000020078617474723200007861747472310001", 0x20, 0x83e0}, {&(0x7f0000012a00)="0000000000000000ddf4655fddf4655fddf4655f00"/32, 0x20, 0x8c00}, {&(0x7f0000012b00)="ed41000000040000ddf4655fddf4655fddf4655f00000000000004000200000000000800050000000af301000400000000000000000000000100000004000000", 0x40, 0x8c80}, {&(0x7f0000012c00)="8081000000180000ddf4655fddf4655fddf4655f00000000000001000c00000010000800000000000af303000400000000000000000000000100000012000000010000000100000018000000020000000400000014000000000000000000000000000000000000000000000000000000000000000000000000000000000000008081000000180000ddf4655fddf4655fddf4655f00000000000001000c00000010000800000000000af30300040000000000000000000000010000001900000001000000010000001e00000002000000040000001a00"/224, 0xe0, 0x8d00}, {&(0x7f0000012d00)="c041000000300000ddf4655fddf4655fddf4655f00000000000002001800000000000800000000000af301000400000000000000000000000c00000005000000", 0x40, 0x9100}, {&(0x7f0000012e00)="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"/768, 0x300, 0x9180}, {&(0x7f0000013100)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzWallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x9c00}, {&(0x7f0000013600)='syzkallers\x00'/32, 0x20, 0xa400}, {&(0x7f0000000f40)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xcc00}], 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="c3675a75c3559805c53d2b2b4d0b1f02d3d3312743934d0611ff376f730111b89ac19f8da32404ae607723078514edd864a868705c7d976b42cd7072a97b393e96becf0343072f8db5ab5e507a3a375c4eaa0b65cbbcf9492855f978ebf4805f6b597df1cae5809ec55f6337d81d256c6ab7ff58bc125c44ebed78d417010a08e33ce41a57a8e3118857eadd00720a9620d8e932798af46d883ef1f1002b12cb93b075b6fb4aa71063af822f7281a4e7b25969fa846f550e998d8be57024ed40028c971bbcdd6d8fff2c01d8d17225"]) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r2, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x20000004) r3 = socket$netlink(0x10, 0x3, 0x0) getpeername$netlink(r3, &(0x7f0000000040), &(0x7f0000000080)=0xc) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000bc0), 0x4000, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100002}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, r5, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8b, 0x61}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000040}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, 0x13, 0xa, 0xc00, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="00042cbd7000fbdbdf257f000000080003007ee8e4f926a6834802453dead1997bb37811c1032701f95e196bd5fa379ec0ab70486aa01378e71d312c3b4f652494234f74dbd3a03a71358f530bc43ead7cd21680e4d8117600f35cdea8449a6f59ea6e9c4fdb7dfdb4e18fc271b02da050be90af90b44d73ae0ce1d56fe804388df7a6113d4eddb2d36b5f1d63e4ac1759bf45f56107545665599c5e22d24bacabc22b34204af36a296497b795dfbd", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x8041) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r8, 0x1, 0x0, 0x0, {0x24}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x2a}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000740)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x21000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, 0x0, 0x10, 0x71bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008001}, 0x40008) 03:11:50 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {0x0}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 673.689129] FAULT_INJECTION: forcing a failure. [ 673.689129] name failslab, interval 1, probability 0, space 0, times 0 [ 673.691801] CPU: 0 PID: 6432 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 673.693352] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 673.695222] Call Trace: [ 673.695831] dump_stack+0x107/0x167 [ 673.696660] should_fail.cold+0x5/0xa [ 673.697525] ? alloc_pipe_info+0x1e5/0x590 [ 673.698480] should_failslab+0x5/0x20 [ 673.699340] __kmalloc+0x72/0x390 [ 673.700137] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 673.701291] alloc_pipe_info+0x1e5/0x590 [ 673.702205] ? SOFTIRQ_verbose+0x10/0x10 [ 673.703160] splice_direct_to_actor+0x774/0x980 [ 673.703370] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 673.704229] ? _cond_resched+0x10/0x30 [ 673.704247] ? inode_security+0x107/0x140 [ 673.704270] ? pipe_to_sendpage+0x380/0x380 [ 673.708872] ? avc_policy_seqno+0x9/0x70 [ 673.709788] ? selinux_file_permission+0x92/0x520 [ 673.710872] ? do_splice_to+0x160/0x160 [ 673.711779] ? security_file_permission+0xb1/0xe0 [ 673.712876] do_splice_direct+0x1c4/0x290 [ 673.713814] ? splice_direct_to_actor+0x980/0x980 [ 673.714904] ? avc_policy_seqno+0x9/0x70 [ 673.715843] ? security_file_permission+0xb1/0xe0 [ 673.716952] do_sendfile+0x553/0x11e0 [ 673.717825] ? do_pwritev+0x270/0x270 [ 673.718688] ? wait_for_completion_io+0x270/0x270 [ 673.719793] ? rcu_read_lock_any_held+0x75/0xa0 [ 673.720837] ? vfs_write+0x354/0xb10 [ 673.721698] __x64_sys_sendfile64+0x1d1/0x210 [ 673.722714] ? __ia32_sys_sendfile+0x220/0x220 [ 673.723770] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 673.724963] ? syscall_enter_from_user_mode+0x1d/0x50 [ 673.726147] do_syscall_64+0x33/0x40 [ 673.726994] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 673.728167] RIP: 0033:0x7fe3014fcb19 [ 673.729005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 673.733196] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 673.734920] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 673.736546] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 673.738157] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 673.739782] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.741401] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 673.743271] hpet_rtc_timer_reinit: 10 callbacks suppressed [ 673.743280] hpet: Lost 2 RTC interrupts [ 673.771350] loop7: detected capacity change from 0 to 262144 [ 673.791882] loop6: detected capacity change from 0 to 2102784 [ 673.798930] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 03:11:51 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="28000029b2af00208bf3b009553b6c9b0000ffff3486ac7af05301a30d98a325b50ffbfb44611effb2df44454e24953586b173e22214eff8204000ad180b1c8a15f97a628de5cd2623916896de0ca348ea8e230627d4af194888a2f9cf2214703df6812a966c855df744b50e4591d9857b4b01a103002606816d00000000", @ANYRESOCT=r0, @ANYBLOB="0c001100fb0300000000080055370fefc858d934b1fc98612d4b4c2d3c6b77dec4bdda5d6a056a835036df9795ab00000000000000000013e89d5e10c31c4895331e6c9062e6d19714413124927a70063ee48656ba815eee21568ca7d1c61a59ebab5c0109894757a4f503873c3b3b120fbd1b368d8fd86d6e2d30a0eebc77da844463f6262c43d3fa70e3a3bf832e75ff8e638862485199a31900718233e061b4cac99c4ba775d97bdb71cdd3e5e4"], 0x28}}, 0x0) close_range(r2, r1, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_io_uring_setup(0x6e20, &(0x7f0000000380), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000001c0)=@sco={0x1f, @fixed}}, 0x0) ftruncate(0xffffffffffffffff, 0x9) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) io_uring_setup(0x6c70, &(0x7f0000000440)={0x0, 0x9fe0, 0x0, 0x2, 0xef}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000000)=0x1, 0x4) unshare(0x48020200) [ 673.831907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=6444 comm=syz-executor.7 03:11:51 executing program 1: r0 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000100)={0x0, "3339b7878a1c91bbd7511e9f0230d3de41391b9b52b98b015a8460bbb4be26f73d7663f703da9b7df7c4c66762b16e6eb6231ce5c27f841f14881a9ebc769b6e", 0x4}, 0x48, 0xfffffffffffffffd) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x42) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "de62c1d5edab6b374bc65978806290cc4923addaaf2189832e52fdaba7805917f54173bb3ac806dc90a1c9332668883afddf0acb73422d6430da351cf61356ca", 0x16}, 0x48, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r0) r3 = add_key(&(0x7f00000008c0)='user\x00', &(0x7f0000000900)={'syz', 0x3}, &(0x7f0000000940)='\'', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0xee00, 0xffffffffffffffff) r4 = fork() tkill(r4, 0x26) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0xf2, 0x60, 0x8, 0x0, 0x8, 0x102, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp, 0x2100, 0x6cdf, 0x1, 0x6, 0xffffffff80000000, 0x1, 0xfe1b, 0x0, 0x8, 0x0, 0x34}, r4, 0xd, r1, 0x1) keyctl$link(0x8, r2, r3) r5 = fsopen(&(0x7f0000000180)='9p\x00', 0x0) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r6, 0x8) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) dup2(r6, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) [ 673.863205] EXT4-fs error (device loop6): ext4_fill_super:4967: inode #2: comm syz-executor.6: iget: special inode unallocated [ 673.871665] EXT4-fs (loop6): get root inode failed [ 673.872870] EXT4-fs (loop6): mount failed [ 673.879398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=6457 comm=syz-executor.7 [ 673.901986] loop7: detected capacity change from 0 to 262144 [ 673.908596] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 03:11:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 6) 03:11:51 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {0x0}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 673.980248] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 03:11:51 executing program 5: r0 = syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x0, 0x0) close(r3) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL, 0x1f) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 674.049797] FAULT_INJECTION: forcing a failure. [ 674.049797] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 674.052546] CPU: 0 PID: 6471 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 674.054110] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 674.056021] Call Trace: [ 674.056640] dump_stack+0x107/0x167 [ 674.057468] should_fail.cold+0x5/0xa [ 674.058327] __alloc_pages_nodemask+0x182/0x600 [ 674.059367] ? xa_load+0x12d/0x2c0 [ 674.060174] ? lock_downgrade+0x6d0/0x6d0 [ 674.061106] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 674.062499] alloc_pages_current+0x187/0x280 [ 674.063510] __page_cache_alloc+0x2d2/0x360 [ 674.064495] page_cache_ra_unbounded+0x207/0x6f0 [ 674.065585] ? read_pages+0xbc0/0xbc0 [ 674.066439] ? __lock_page_or_retry+0x4e0/0x4e0 [ 674.067517] ondemand_readahead+0x8e5/0x1150 [ 674.068525] page_cache_sync_ra+0x138/0x170 [ 674.069493] generic_file_buffered_read+0xc8e/0x2920 [ 674.070657] ? pagecache_get_page+0xc80/0xc80 [ 674.071665] ? kasan_save_stack+0x32/0x40 [ 674.072605] ? do_splice_direct+0x1c4/0x290 [ 674.073594] ? do_sendfile+0x553/0x11e0 [ 674.074486] ? __x64_sys_sendfile64+0x1d1/0x210 [ 674.075536] ? do_syscall_64+0x33/0x40 [ 674.076402] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 674.077593] ? perf_trace_lock+0xac/0x490 [ 674.078524] generic_file_read_iter+0x33f/0x490 [ 674.079576] ? __fsnotify_parent+0x47a/0xb10 [ 674.080580] ext4_file_read_iter+0x184/0x4c0 [ 674.081573] generic_file_splice_read+0x455/0x6d0 [ 674.082664] ? pipe_to_user+0x170/0x170 [ 674.083583] ? fsnotify_perm.part.0+0x22d/0x620 [ 674.084631] ? security_file_permission+0xb1/0xe0 [ 674.085731] ? pipe_to_user+0x170/0x170 [ 674.086627] do_splice_to+0x10e/0x160 [ 674.087498] splice_direct_to_actor+0x2fe/0x980 [ 674.088548] ? pipe_to_sendpage+0x380/0x380 [ 674.089520] ? do_splice_to+0x160/0x160 [ 674.090412] ? security_file_permission+0xb1/0xe0 [ 674.091526] do_splice_direct+0x1c4/0x290 [ 674.092458] ? splice_direct_to_actor+0x980/0x980 [ 674.093541] ? avc_policy_seqno+0x9/0x70 [ 674.094459] ? security_file_permission+0xb1/0xe0 [ 674.095567] do_sendfile+0x553/0x11e0 [ 674.096440] ? do_pwritev+0x270/0x270 [ 674.097301] ? wait_for_completion_io+0x270/0x270 [ 674.098387] ? rcu_read_lock_any_held+0x75/0xa0 [ 674.099432] ? vfs_write+0x354/0xb10 [ 674.100289] __x64_sys_sendfile64+0x1d1/0x210 [ 674.101305] ? __ia32_sys_sendfile+0x220/0x220 [ 674.102334] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 674.103519] ? syscall_enter_from_user_mode+0x1d/0x50 [ 674.104681] do_syscall_64+0x33/0x40 [ 674.105520] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 674.106670] RIP: 0033:0x7fe3014fcb19 [ 674.107508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 674.111664] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 674.113376] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 674.114982] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 674.116606] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 674.118215] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.119823] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 674.121676] hpet: Lost 3 RTC interrupts 03:11:51 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef465", 0xf, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 03:11:51 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000080)=[{&(0x7f00000001c0)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff6}, {&(0x7f0000000240)="0200d08767faef08c5586ded7d8700030000000004a9347cd41b80d9ab6ee6d87b18fdedd2e94720f59f0482b0d02e70366ed721e5eeb1256d8ece1fc4a53badb570dd4b06d7160a75db7b2a3eaa836d3dd58ab3d3d337cc1f96ca80f7881e558b", 0x61, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4705fe0f4c90000009f000000000400", 0x1d, 0x200}], 0x182022, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f82021a636172642c00"]) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r0, 0x8) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x6, 0x1, &(0x7f0000000400)=[{&(0x7f0000000300)="35ec70d2a646cf19e5c25cd70ca2e23b456c4afc93cec86ee92c2bd5a1284087baf213e52446bcfe5bb8e3677b63dbaeeb411a76592c0cb431e5562d5f0ade2b221ba88ee1c4bfc086902e58c652ae211296ba89f87e10cc7db247ab8b50061ed1a5e840d06411893700478b5516326d310764d026975d2345a9807a8755e7006b925bf63547e862dc3a43347f4c53cff5b6d499fe711014cf71ab797e91d749ffd07547a322f77f8cc92bf6295bd53c01d13dfed275d1a92519388eb5889626efbe4e33", 0xc4, 0x2}], 0x380c885, &(0x7f0000000440)={[{@session={'session', 0x3d, 0xe}}], [{@obj_role={'obj_role', 0x3d, 'rd\x00\xb5B\x81}\x05\x8c'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@dont_appraise}]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) fspick(r0, &(0x7f0000000140)='./file0\x00', 0x1) [ 674.177389] loop6: detected capacity change from 0 to 2102784 03:11:51 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {0x0}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 674.229189] loop7: detected capacity change from 0 to 135266304 03:11:51 executing program 5: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {0x0}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 674.254701] EXT4-fs error (device loop6): ext4_fill_super:4967: inode #2: comm syz-executor.6: iget: special inode unallocated [ 674.263439] EXT4-fs (loop6): get root inode failed [ 674.264629] EXT4-fs (loop6): mount failed [ 674.308920] loop7: detected capacity change from 0 to 135266304 03:12:08 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef465", 0xf, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 03:12:08 executing program 4: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xd21}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3e4bed71894973fa) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') fsmount(0xffffffffffffffff, 0x1, 0x71) 03:12:08 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x4}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:12:08 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000100)=0x8b, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) r2 = fork() tkill(r2, 0x26) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x8, 0x95, 0x4, 0x9, 0x0, 0x1, 0x8081, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0x100000001, 0xd2}, 0x485, 0x800, 0x7, 0x3, 0xd, 0x4, 0x3, 0x0, 0x4, 0x0, 0x1000}, r2, 0xf, r1, 0x2) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x2, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/154, 0x9a}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000300)=""/247, 0xf7}], 0x3) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:12:08 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x14a008, 0x0) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f00000006c0)='./file0\x00', 0x1, 0x4, &(0x7f0000001900)=[{&(0x7f0000000700)="5ae2874112849e6a8d775ca465420601e298815c8c08f55e77538133cd9aa631aa0d9216604c674027aa4719baa5d1b7b734636b6cca5affce80825465e77d888c458b60eb", 0x45, 0x8}, {&(0x7f0000000780)="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", 0x1000, 0x1}, {&(0x7f0000001780)="7e171d90f31c71b3171754d37e933c0c3f66a404", 0x14, 0x65d7}, {&(0x7f00000017c0)="a0035f0105baf412603b4c8cee11643e529d6c5e16d894d336114c0360d0dee29b8a6d5276379beb7316a40adf67aba7cb7ee24472d30a54df8c42f571b3380abb2aaa0975439759eb5b461dbd58c1f72b6b30460b0fed", 0x57, 0x3}], 0x1020000, &(0x7f0000001980)={[{'}'}, {'veth0_to_bridge\x00'}, {}, {'\x00'}, {'\\'}, {'nfs\x00'}, {'[/'}, {'\x00'}], [{@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, 'nfs\x00'}}, {@dont_measure}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@fsname={'fsname', 0x3d, 'veth0_to_bridge\x00'}}]}) statfs(&(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40)=""/207) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x8616) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) syz_io_uring_setup(0x495b, &(0x7f0000000240)={0x0, 0x4012, 0x10, 0x21, 0x1a4}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000080)) openat2(0xffffffffffffffff, 0x0, &(0x7f0000001880)={0x109002, 0xdb}, 0x18) [ 690.916606] loop6: detected capacity change from 0 to 2102784 03:12:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='status\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r2, 0x8) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x82000) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x201, 0x0) move_mount(r6, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000200)='./file0\x00', 0x74) preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r2, r3, r4, r5], 0x4) pread64(r0, &(0x7f0000000040)=""/133, 0x85, 0x0) 03:12:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001500210c00000000000000000af000000400000014000100ff01fc000000008c07becba123597401"], 0x2c}}, 0x0) 03:12:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 7) [ 690.956588] loop5: detected capacity change from 0 to 51712 [ 691.027707] FAULT_INJECTION: forcing a failure. [ 691.027707] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 691.030536] CPU: 1 PID: 6525 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 691.032270] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 691.034216] Call Trace: [ 691.034844] dump_stack+0x107/0x167 [ 691.035705] should_fail.cold+0x5/0xa [ 691.036599] __alloc_pages_nodemask+0x182/0x600 [ 691.037682] ? xa_load+0x12d/0x2c0 [ 691.038516] ? lock_downgrade+0x6d0/0x6d0 [ 691.039481] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 691.040901] alloc_pages_current+0x187/0x280 [ 691.041933] __page_cache_alloc+0x2d2/0x360 [ 691.042946] page_cache_ra_unbounded+0x207/0x6f0 [ 691.044073] ? read_pages+0xbc0/0xbc0 [ 691.044956] ? __lock_page_or_retry+0x4e0/0x4e0 [ 691.046063] ondemand_readahead+0x8e5/0x1150 [ 691.047193] page_cache_sync_ra+0x138/0x170 [ 691.048210] generic_file_buffered_read+0xc8e/0x2920 [ 691.049414] ? pagecache_get_page+0xc80/0xc80 [ 691.050454] ? kasan_save_stack+0x32/0x40 [ 691.051429] ? do_splice_direct+0x1c4/0x290 [ 691.052435] ? do_sendfile+0x553/0x11e0 [ 691.053366] ? __x64_sys_sendfile64+0x1d1/0x210 [ 691.054445] ? do_syscall_64+0x33/0x40 [ 691.055355] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 691.056618] ? perf_trace_lock+0xac/0x490 [ 691.057603] generic_file_read_iter+0x33f/0x490 [ 691.058696] ? __fsnotify_parent+0x47a/0xb10 [ 691.059737] ext4_file_read_iter+0x184/0x4c0 [ 691.060700] generic_file_splice_read+0x455/0x6d0 [ 691.061840] ? pipe_to_user+0x170/0x170 [ 691.062884] ? fsnotify_perm.part.0+0x22d/0x620 [ 691.064027] ? security_file_permission+0xb1/0xe0 [ 691.065195] ? pipe_to_user+0x170/0x170 [ 691.066149] do_splice_to+0x10e/0x160 [ 691.067076] splice_direct_to_actor+0x2fe/0x980 [ 691.068208] ? pipe_to_sendpage+0x380/0x380 [ 691.069266] ? do_splice_to+0x160/0x160 [ 691.070233] ? security_file_permission+0xb1/0xe0 [ 691.071413] do_splice_direct+0x1c4/0x290 [ 691.072438] ? splice_direct_to_actor+0x980/0x980 [ 691.073610] ? avc_policy_seqno+0x9/0x70 [ 691.074604] ? security_file_permission+0xb1/0xe0 [ 691.075793] do_sendfile+0x553/0x11e0 [ 691.076737] ? do_pwritev+0x270/0x270 [ 691.077751] ? wait_for_completion_io+0x270/0x270 [ 691.078881] ? rcu_read_lock_any_held+0x75/0xa0 [ 691.079885] ? vfs_write+0x354/0xb10 [ 691.080692] __x64_sys_sendfile64+0x1d1/0x210 [ 691.081654] ? __ia32_sys_sendfile+0x220/0x220 [ 691.082646] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 691.083783] ? syscall_enter_from_user_mode+0x1d/0x50 [ 691.084904] do_syscall_64+0x33/0x40 [ 691.085707] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 691.086799] RIP: 0033:0x7fe3014fcb19 [ 691.087604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 691.091575] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 691.093262] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 691.094828] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 691.096368] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 691.097894] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.099409] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 691.110948] EXT4-fs error (device loop6): ext4_fill_super:4967: inode #2: comm syz-executor.6: iget: special inode unallocated [ 691.117618] EXT4-fs (loop6): get root inode failed [ 691.118802] EXT4-fs (loop6): mount failed 03:12:08 executing program 3: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff810000ae}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x40, 0xa8, 0xfe, 0x5, 0x0, 0xaaa0, 0x10080, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0xffffffff}, 0x8, 0x0, 0x7, 0x9, 0x7, 0x3ffffffe, 0x4, 0x0, 0x1000003, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x8) 03:12:08 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000500)={'bridge_slave_1\x00', 0x0}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r0}, 0xfffffffffffffec8) fchmod(r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="5e9ed3"]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x406e2, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x34}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x98, r4, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "7419454e96d018bfc9528b37f95cb708"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b9aa326f5ebb7a743571bd6f3a01270c"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e55a697c780a74269389a3fead3925d8"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "9065e0ff15dc29f1b26b60df8611c579"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "80cc97da48b03dab004cd9ce349a0b74"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "cfb70bf84d965376f8b44ef787d790f2"}]}, 0x98}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8914, &(0x7f0000000140)={'lo\x00'}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1001, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00'}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x2, 0x0, 0x1004, 0x0, 0x0, 0xffffffff}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 691.162325] loop5: detected capacity change from 0 to 51712 03:12:08 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x4}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:12:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 8) 03:12:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c460400000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) io_uring_setup(0x7f23, &(0x7f0000000180)={0x0, 0xbe1a, 0x10, 0x2, 0x388, 0x0, r0}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0xe4102, 0x0) write$binfmt_script(r3, &(0x7f0000000140)={'#! ', './file0', [{0x20, '}}'}, {0x20, '\x00'}], 0xa, '6l5v'}, 0x14) 03:12:08 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef465", 0xf, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) [ 691.319215] FAULT_INJECTION: forcing a failure. [ 691.319215] name failslab, interval 1, probability 0, space 0, times 0 [ 691.321287] CPU: 0 PID: 6547 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 691.322539] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 691.324054] Call Trace: [ 691.324538] dump_stack+0x107/0x167 [ 691.325196] should_fail.cold+0x5/0xa [ 691.325893] ? create_object.isra.0+0x3a/0xa20 [ 691.326720] should_failslab+0x5/0x20 [ 691.327412] kmem_cache_alloc+0x5b/0x310 [ 691.328209] create_object.isra.0+0x3a/0xa20 [ 691.329002] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 691.329774] kmem_cache_alloc+0x159/0x310 [ 691.330409] xas_alloc+0x336/0x440 [ 691.330948] xas_create+0x60f/0x10d0 [ 691.331525] xas_store+0x8c/0x1c40 [ 691.332078] ? xas_find_conflict+0x4b5/0xa70 [ 691.332751] __add_to_page_cache_locked+0x708/0xc80 [ 691.333510] ? file_write_and_wait_range+0x130/0x130 [ 691.334284] ? lock_downgrade+0x6d0/0x6d0 [ 691.334926] ? memcg_drain_all_list_lrus+0x720/0x720 [ 691.335694] add_to_page_cache_lru+0xe6/0x2e0 [ 691.336361] ? add_to_page_cache_locked+0x40/0x40 [ 691.337199] ? __page_cache_alloc+0x10d/0x360 [ 691.337251] page_cache_ra_unbounded+0x419/0x6f0 [ 691.337274] ? read_pages+0xbc0/0xbc0 [ 691.337284] ? __lock_page_or_retry+0x4e0/0x4e0 [ 691.337307] ondemand_readahead+0x8e5/0x1150 [ 691.337327] page_cache_sync_ra+0x138/0x170 [ 691.337342] generic_file_buffered_read+0xc8e/0x2920 [ 691.337372] ? pagecache_get_page+0xc80/0xc80 [ 691.337381] ? kasan_save_stack+0x32/0x40 [ 691.337396] ? do_splice_direct+0x1c4/0x290 [ 691.337420] ? do_sendfile+0x553/0x11e0 [ 691.344854] ? __x64_sys_sendfile64+0x1d1/0x210 [ 691.344867] ? do_syscall_64+0x33/0x40 [ 691.344879] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 691.344890] ? perf_trace_lock+0xac/0x490 [ 691.344907] generic_file_read_iter+0x33f/0x490 [ 691.344922] ? __fsnotify_parent+0x47a/0xb10 [ 691.344943] ext4_file_read_iter+0x184/0x4c0 [ 691.344960] generic_file_splice_read+0x455/0x6d0 [ 691.344980] ? pipe_to_user+0x170/0x170 [ 691.351176] ? fsnotify_perm.part.0+0x22d/0x620 [ 691.351880] ? security_file_permission+0xb1/0xe0 [ 691.352586] ? pipe_to_user+0x170/0x170 [ 691.353165] do_splice_to+0x10e/0x160 [ 691.353727] splice_direct_to_actor+0x2fe/0x980 [ 691.354418] ? pipe_to_sendpage+0x380/0x380 [ 691.355053] ? do_splice_to+0x160/0x160 [ 691.355637] ? security_file_permission+0xb1/0xe0 [ 691.356362] do_splice_direct+0x1c4/0x290 [ 691.356967] ? splice_direct_to_actor+0x980/0x980 [ 691.357669] ? avc_policy_seqno+0x9/0x70 [ 691.358273] ? security_file_permission+0xb1/0xe0 [ 691.358989] do_sendfile+0x553/0x11e0 [ 691.359565] ? do_pwritev+0x270/0x270 [ 691.360135] ? wait_for_completion_io+0x270/0x270 [ 691.360848] ? rcu_read_lock_any_held+0x75/0xa0 [ 691.361514] ? vfs_write+0x354/0xb10 [ 691.362065] __x64_sys_sendfile64+0x1d1/0x210 [ 691.362714] ? __ia32_sys_sendfile+0x220/0x220 [ 691.363388] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 691.364170] ? syscall_enter_from_user_mode+0x1d/0x50 [ 691.364922] do_syscall_64+0x33/0x40 [ 691.365461] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 691.366201] RIP: 0033:0x7fe3014fcb19 [ 691.366742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 691.369402] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 691.370507] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 691.371538] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 691.372583] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 691.373603] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.374623] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 691.375893] hpet: Lost 3 RTC interrupts 03:12:08 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x14a008, 0x0) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f00000006c0)='./file0\x00', 0x1, 0x4, &(0x7f0000001900)=[{&(0x7f0000000700)="5ae2874112849e6a8d775ca465420601e298815c8c08f55e77538133cd9aa631aa0d9216604c674027aa4719baa5d1b7b734636b6cca5affce80825465e77d888c458b60eb", 0x45, 0x8}, {&(0x7f0000000780)="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", 0x1000, 0x1}, {&(0x7f0000001780)="7e171d90f31c71b3171754d37e933c0c3f66a404", 0x14, 0x65d7}, {&(0x7f00000017c0)="a0035f0105baf412603b4c8cee11643e529d6c5e16d894d336114c0360d0dee29b8a6d5276379beb7316a40adf67aba7cb7ee24472d30a54df8c42f571b3380abb2aaa0975439759eb5b461dbd58c1f72b6b30460b0fed", 0x57, 0x3}], 0x1020000, &(0x7f0000001980)={[{'}'}, {'veth0_to_bridge\x00'}, {}, {'\x00'}, {'\\'}, {'nfs\x00'}, {'[/'}, {'\x00'}], [{@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, 'nfs\x00'}}, {@dont_measure}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@fsname={'fsname', 0x3d, 'veth0_to_bridge\x00'}}]}) statfs(&(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40)=""/207) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000018c0)}, 0x8616) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) syz_io_uring_setup(0x495b, &(0x7f0000000240)={0x0, 0x4012, 0x10, 0x21, 0x1a4}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000080)) openat2(0xffffffffffffffff, 0x0, &(0x7f0000001880)={0x109002, 0xdb}, 0x18) [ 691.404612] loop6: detected capacity change from 0 to 2102784 [ 691.418823] loop5: detected capacity change from 0 to 51712 03:12:08 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@updpolicy={0xb8, 0x1d, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x100}, {0x0, 0x40000001, 0x0, 0x7fff, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x1}, 0x200, 0x0, 0x1}}, 0xb8}}, 0x40) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) sendmsg$nl_netfilter(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb4, 0xa, 0x7, 0x3, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x2}, [@generic="d808a1bb8c79b81465824f43dcf8c9f08c0f61f4e97131d76e1e94a529212d933393871235d44f7aac374a569e828dc9f8f82280e3ae80b06e13011cd9a2a98ecaaabcc458d5a84e2453e9abdcb9d826f97661d46518d4faa9a046ac818a464d2a5138303818f82cf58841c1936b9fdbafd2b3ff1c55b390cbab7dd6c3d3678e789c54fb138e961f206dc2c2043e9da91d69c66ba3ba615082c2480473c4"]}, 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) [ 691.468091] EXT4-fs error (device loop6): ext4_fill_super:4967: inode #2: comm syz-executor.6: iget: special inode unallocated [ 691.471339] EXT4-fs (loop6): get root inode failed [ 691.472634] EXT4-fs (loop6): mount failed 03:12:08 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x0, 0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x400400, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8922, &(0x7f0000000000)={'veth1_to_batadv\x00'}) [ 691.485771] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 691.499927] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. 03:12:08 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x4}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:12:08 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x1, 0xcf, 0xc0, 0x9, 0x0, 0x3, 0xa, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x3f}, 0x50502, 0x7fff, 0x7f, 0x9, 0x80000000, 0x8, 0x6, 0x0, 0x366b, 0x0, 0x40}, 0x0, 0x8, r0, 0xa) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(r1, r0, 0x0) fcntl$addseals(r1, 0x409, 0x8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000440)=0x7, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd_index=0xffffffff, 0x8, &(0x7f0000000140)="ef3003e7d4d5730dd9bc0d2116cbd2ec2d4cef0397c67262d0882d05da47c1147ab3a8e1b3dfac797791d00529f0be39c7c3024d4751fcbfb4d3ec4b7b6dc1", 0xfffffffffffffcdc, 0x1e, 0x1}, 0x9) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r2) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000480)='dns_resolver\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='\x00', r3) futimesat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) r4 = add_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000640)="18726d0eed55eaa57fc580dc3a0b12e0a5ee08da294ac8119c4c73f93694f2a935d17a81959d084839f846dca8739131e4a9c45c6509af44529537eae3a4a4793a9a0aacfd7a75f2b566b874939829b82a35d20d1985a92c5d7ba971251e89286f64438d080e8e214a050893fd3fa27a56032a79c1d099b5108ecb2e5f36d3e7e1c749ad35c2064fa087cf6359507a36eb69853e0cdd920cbb7586aedf5a2e5a9a1a6b8d3cb6ad16918b01d07c92179dfae1ef58835b5fa4be28fbd3b3eac1c9f3cf74fbe20900c55d23902439133eecfafb2e0f", 0xd4, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r4) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x48020200) [ 691.616361] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.5'. 03:12:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 9) [ 691.691032] FAULT_INJECTION: forcing a failure. [ 691.691032] name failslab, interval 1, probability 0, space 0, times 0 [ 691.692520] CPU: 0 PID: 6582 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 691.693295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 691.694239] Call Trace: [ 691.694549] dump_stack+0x107/0x167 [ 691.694966] should_fail.cold+0x5/0xa [ 691.695402] ? xas_alloc+0x336/0x440 [ 691.695839] should_failslab+0x5/0x20 [ 691.696273] kmem_cache_alloc+0x5b/0x310 [ 691.696743] ? SOFTIRQ_verbose+0x10/0x10 [ 691.697209] xas_alloc+0x336/0x440 [ 691.697617] xas_create+0x60f/0x10d0 [ 691.698054] xas_store+0x8c/0x1c40 [ 691.698463] ? xas_find_conflict+0x4b5/0xa70 [ 691.698972] __add_to_page_cache_locked+0x708/0xc80 [ 691.699549] ? file_write_and_wait_range+0x130/0x130 [ 691.700133] ? lock_downgrade+0x6d0/0x6d0 [ 691.700609] ? memcg_drain_all_list_lrus+0x720/0x720 [ 691.701195] add_to_page_cache_lru+0xe6/0x2e0 [ 691.701711] ? add_to_page_cache_locked+0x40/0x40 [ 691.702264] ? __page_cache_alloc+0x10d/0x360 [ 691.702855] page_cache_ra_unbounded+0x419/0x6f0 [ 691.703408] ? read_pages+0xbc0/0xbc0 [ 691.703894] ? __lock_page_or_retry+0x4e0/0x4e0 [ 691.704484] ondemand_readahead+0x8e5/0x1150 [ 691.705040] page_cache_sync_ra+0x138/0x170 [ 691.705584] generic_file_buffered_read+0xc8e/0x2920 [ 691.706243] ? pagecache_get_page+0xc80/0xc80 [ 691.706813] ? kasan_save_stack+0x32/0x40 [ 691.707334] ? do_splice_direct+0x1c4/0x290 [ 691.707882] ? do_sendfile+0x553/0x11e0 [ 691.708380] ? __x64_sys_sendfile64+0x1d1/0x210 [ 691.708919] ? do_syscall_64+0x33/0x40 [ 691.709402] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 691.710010] ? perf_trace_lock+0xac/0x490 [ 691.710535] generic_file_read_iter+0x33f/0x490 [ 691.711069] ? __fsnotify_parent+0x47a/0xb10 [ 691.711628] ext4_file_read_iter+0x184/0x4c0 [ 691.712143] generic_file_splice_read+0x455/0x6d0 [ 691.712697] ? pipe_to_user+0x170/0x170 [ 691.713158] ? fsnotify_perm.part.0+0x22d/0x620 [ 691.713699] ? security_file_permission+0xb1/0xe0 [ 691.714251] ? pipe_to_user+0x170/0x170 [ 691.714706] do_splice_to+0x10e/0x160 [ 691.715149] splice_direct_to_actor+0x2fe/0x980 [ 691.715692] ? pipe_to_sendpage+0x380/0x380 [ 691.716189] ? do_splice_to+0x160/0x160 [ 691.716645] ? security_file_permission+0xb1/0xe0 [ 691.717202] do_splice_direct+0x1c4/0x290 [ 691.717675] ? splice_direct_to_actor+0x980/0x980 [ 691.718225] ? avc_policy_seqno+0x9/0x70 [ 691.718750] ? security_file_permission+0xb1/0xe0 [ 691.719376] do_sendfile+0x553/0x11e0 [ 691.719872] ? do_pwritev+0x270/0x270 [ 691.720356] ? wait_for_completion_io+0x270/0x270 [ 691.720967] ? rcu_read_lock_any_held+0x75/0xa0 [ 691.721555] ? vfs_write+0x354/0xb10 [ 691.722030] __x64_sys_sendfile64+0x1d1/0x210 [ 691.722595] ? __ia32_sys_sendfile+0x220/0x220 [ 691.723179] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 691.723856] ? syscall_enter_from_user_mode+0x1d/0x50 [ 691.724504] do_syscall_64+0x33/0x40 [ 691.724975] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 691.725622] RIP: 0033:0x7fe3014fcb19 [ 691.726094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 691.728418] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 691.729372] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 691.730276] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 691.731182] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 691.732091] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.732993] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 691.734040] hpet: Lost 2 RTC interrupts [ 691.849245] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.5'. 03:12:29 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x40, r1, 0x201, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bond\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x40}}, 0x0) finit_module(r0, &(0x7f00000000c0)='nl80211\x00', 0x3) 03:12:29 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6ac860466aa5b6be7e8b7bbd43b96f75726e3b28ed244dcbb3425bd3ba8a2d616c5f6465763d30783030303066"]) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x80010, 0xffffffffffffffff, 0x10000000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r2, 0xca3, 0x2989, 0x2, &(0x7f0000000000), 0x8) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000005c0)=[{0x0, 0x49}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) syz_io_uring_submit(0x0, r4, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x6000, @fd=r7, 0x3, 0x8429, 0x0, 0x1, 0x1, {0x2}}, 0x6) r8 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1000) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r11, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}, 0x0, 0x0, 0x0, {0x0, r12}}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x6000, @fd=r1, 0x2, 0x4, 0x3, 0x6, 0x1, {0x3, r12}}, 0x400) 03:12:29 executing program 4: perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f00000002c0)='\x9f\xff\x1e\f\x1b\x1a\x88\xc3(q\x8b)H\xe8\x88\xe0\xb8o\xe4\xbc\x91xB\xfb\x8c/(\x92(\xc3\xf42x\xb9A\xb0\xfc\xd5\xc4\xeb\xcb?9\xdd\xcc\xb7\va6\x7f%\xab$\x16\x1e\xa22\xe5c\xa9\x86\x89M\xcd.\xab|\xda\xa1dB\xeeu \xbc+[\xe7\xe0iP\x84\xc5\x83\xa4{\x99\x8a\xf6\x17\x06M\xf59T\xd1O\x9bL\x05OP\x1f\xab\x9a\xbd\xdb\xc4\x84\xb4\xad\xb8=j\xba\xd5\x93o\xda$&\xa1y\x9e_', 0x2) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)}, {&(0x7f00000003c0)="f2a3b208a1c2993b81cb72c9084c2a70c8cb924de0951eaeb5c80b651e8e16297b633e7459ab23c6557346423f5a9518e35f24ad968a46d2ea0df51ec4486e8da7fedc2d86", 0x45}], 0x2, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {0x80}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x9, 0x7, 0x9}) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000100)) setxattr$security_selinux(0x0, &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:apt_var_lib_t:s0\x00', 0x23, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000440)={0x9, {{0xa, 0x4e23, 0x7, @private1, 0x8001}}}, 0x88) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000002100000132d78783000000000202000008000000", @ANYRES32=0x0, @ANYBLOB="6f46f500c857dcefe453f80d7a31322f54691ecd5a49b8a6c3d3099cd50b01344995f50cb1247f0165cc54f1b921bb8e41a58aa66f9653b08116c9986583db93596d9a5b3175cfa8aebcb105e2e9defa47c1172b4be475bd32f21e3cad1ae7c1771856238ef0a7a017c7e62a35fc8f8329c5b404d77c4021d643b4e0769cc4414daceb4847fab9727318715138ab6b094d3de7696233ad9b5ef96747f70bfdfb8463237b2aab9067da55dcbf33fb2e75b097ba1595e43d815472ad3f082c36b0b750296d326334df0650cb56511eebaa9f690ae6acc45068419a"], 0x1c}}, 0x0) fallocate(r3, 0x18, 0x7, 0xffff) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000380)=ANY=[@ANYBLOB="e7ef14000000010000001800", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 03:12:29 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) syz_usb_connect$hid(0x3, 0xfffffffffffffd85, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x2, 0x4b, {0x9, 0x21, 0x101, 0xf9, 0x1, {0x22, 0xdf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0x68, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x0, 0x9}, 0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="050fd40001cf1001b344bc324800ca420887f58960a7555297ed33f7f2c2d2cf2f2ea9e85a4474af00541bcc2874d331e74c3f01368ea8c872b1b5953b717287570a9cc3d52602c810d3299d91d6da2dcbc3496633110981b27e5a8b49d7b57097f1f60198288cf72ad8d7cf3418d2c3a4940f67793e76560c5c3183baa10f791d89b9a7df92cdc571ae0bc0b802e05019076402f1630305586e1e7a695449c12e040000000b43bf1e2a6603000000dc394f8305d3a85d6194c2bdc139a234d2ba8d5bdf54896b10f547b1c8a1d4c9b069058c74598018ef80d5ae3317e4e2bd06fb0d2c2b2eb2353b60f80902b372856e139949b57c"], 0x3, [{0x4, &(0x7f0000000540)=@string={0x0, 0x3, "b4fea0670d77ab09b25bc3dca8a05c49d406274d04c5537ed200e57c18860e675bc2129b54fc658c8576d8d092e5d2893c4edc7411ed282ff8264fbc634066f465428b1b38b631179974b8d04df626563339a1679b79396fbfb30f1ee1935a2a851690825d4a78992e8c68b85720fb83d6a078adbdec57abf0d493c606f4198dc957f226ee6fbd4851eb2cf0ac4f7c4366c08a8fa2b4bc8128d7e80d51df3954bfecf3664a64f085ddfa2c9e8abace2c1d8557cddad49ff00cf1b9208c66686e73a2c66d1daac3dca16aa55c23d267856e906312e3d656693fe1"}}, {0x81, &(0x7f0000000640)=@lang_id={0x0, 0x3, 0x41b}}, {0x30, &(0x7f0000000400)=@string={0x30, 0x3, "0e5754f82570f049ad9eb16a6aa4a6da931754e32b2e4059f4f097331f7de43ece6716711f03b60b45026ab71ea4"}}]}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:12:29 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {0x0}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:12:29 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f0000", 0x16, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 03:12:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x2e0, 0x0, 0x18, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "a22a63e1c314ae2481ebb1512d270a0af1b723646ce9338de755"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2000}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "a398d98d38f341a3a9a9aabc712f34b3565e6ff503068e2f46ddcb805094"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "d8b215c05e938e02ae382734d938b3cb7951cef581710e56a6b26ca072720e37ab"}}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8573}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4fc}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ba5}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x16e955e5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3df}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x2e0}}, 0x4040) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x18, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x4, 0xd}]}, 0x18}}, 0x0) 03:12:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 10) [ 711.821021] loop7: detected capacity change from 0 to 16776704 [ 711.825282] FAULT_INJECTION: forcing a failure. [ 711.825282] name failslab, interval 1, probability 0, space 0, times 0 [ 711.827862] CPU: 0 PID: 6598 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 711.829438] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 711.831347] Call Trace: [ 711.831964] dump_stack+0x107/0x167 [ 711.832805] should_fail.cold+0x5/0xa [ 711.833685] ? create_object.isra.0+0x3a/0xa20 [ 711.834741] should_failslab+0x5/0x20 [ 711.835621] kmem_cache_alloc+0x5b/0x310 [ 711.836568] create_object.isra.0+0x3a/0xa20 [ 711.837576] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 711.838100] loop6: detected capacity change from 0 to 2102784 [ 711.838748] kmem_cache_alloc+0x159/0x310 [ 711.838779] xas_alloc+0x336/0x440 [ 711.841949] xas_create+0x60f/0x10d0 [ 711.842827] xas_store+0x8c/0x1c40 [ 711.843648] ? xas_find_conflict+0x4b5/0xa70 [ 711.844683] __add_to_page_cache_locked+0x708/0xc80 [ 711.845843] ? file_write_and_wait_range+0x130/0x130 [ 711.847015] ? lock_downgrade+0x6d0/0x6d0 [ 711.847982] ? memcg_drain_all_list_lrus+0x720/0x720 [ 711.849164] add_to_page_cache_lru+0xe6/0x2e0 [ 711.850202] ? add_to_page_cache_locked+0x40/0x40 [ 711.851313] ? __page_cache_alloc+0x10d/0x360 [ 711.852363] page_cache_ra_unbounded+0x419/0x6f0 [ 711.853469] ? read_pages+0xbc0/0xbc0 [ 711.854346] ? __lock_page_or_retry+0x4e0/0x4e0 [ 711.855436] ondemand_readahead+0x8e5/0x1150 [ 711.856468] page_cache_sync_ra+0x138/0x170 [ 711.857466] generic_file_buffered_read+0xc8e/0x2920 [ 711.858666] ? pagecache_get_page+0xc80/0xc80 [ 711.859693] ? kasan_save_stack+0x32/0x40 [ 711.860683] ? do_splice_direct+0x1c4/0x290 [ 711.861681] ? do_sendfile+0x553/0x11e0 [ 711.862597] ? __x64_sys_sendfile64+0x1d1/0x210 [ 711.863668] ? do_syscall_64+0x33/0x40 [ 711.864573] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 711.865791] ? perf_trace_lock+0xac/0x490 [ 711.866755] generic_file_read_iter+0x33f/0x490 [ 711.867828] ? __fsnotify_parent+0x47a/0xb10 [ 711.868868] ext4_file_read_iter+0x184/0x4c0 [ 711.869887] generic_file_splice_read+0x455/0x6d0 [ 711.871003] ? pipe_to_user+0x170/0x170 [ 711.871946] ? fsnotify_perm.part.0+0x22d/0x620 [ 711.873022] ? security_file_permission+0xb1/0xe0 [ 711.874137] ? pipe_to_user+0x170/0x170 [ 711.875055] do_splice_to+0x10e/0x160 [ 711.875950] splice_direct_to_actor+0x2fe/0x980 [ 711.877035] ? pipe_to_sendpage+0x380/0x380 [ 711.878037] ? do_splice_to+0x160/0x160 [ 711.878954] ? security_file_permission+0xb1/0xe0 [ 711.880085] do_splice_direct+0x1c4/0x290 [ 711.881040] ? splice_direct_to_actor+0x980/0x980 [ 711.882149] ? avc_policy_seqno+0x9/0x70 [ 711.883092] ? security_file_permission+0xb1/0xe0 [ 711.884222] do_sendfile+0x553/0x11e0 [ 711.885120] ? do_pwritev+0x270/0x270 [ 711.885998] ? wait_for_completion_io+0x270/0x270 [ 711.887116] ? rcu_read_lock_any_held+0x75/0xa0 [ 711.888195] ? vfs_write+0x354/0xb10 [ 711.889062] __x64_sys_sendfile64+0x1d1/0x210 [ 711.890094] ? __ia32_sys_sendfile+0x220/0x220 [ 711.891156] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 711.892376] ? syscall_enter_from_user_mode+0x1d/0x50 [ 711.893570] do_syscall_64+0x33/0x40 [ 711.894429] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 711.895603] RIP: 0033:0x7fe3014fcb19 [ 711.896463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 711.900701] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 711.902458] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 711.904102] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 711.905733] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 711.907367] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 711.909009] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 711.911028] hpet: Lost 5 RTC interrupts [ 711.917667] EXT4-fs (loop7): Unrecognized mount option "jÈ`Fj¥¶¾~‹{½C¹ourn;(í$M˳B[ÓºŠ-al_dev=0x0000f" or missing value 03:12:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) clone3(&(0x7f0000001540)={0x1987d70bb3c501b, 0x0, 0x0, 0x0, {0x40000036}, 0x0, 0x0, 0x0, 0x0, 0x2e, {r1}}, 0xfffffffffffffeba) [ 711.938940] udc-core: couldn't find an available UDC or it's busy [ 711.940585] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 711.972024] EXT4-fs error (device loop6): ext4_fill_super:4967: inode #2: comm syz-executor.6: iget: special inode unallocated [ 711.975063] EXT4-fs (loop6): get root inode failed [ 711.976240] EXT4-fs (loop6): mount failed [ 711.998401] loop7: detected capacity change from 0 to 16776704 03:12:29 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {0x0}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 712.018970] EXT4-fs (loop7): Unrecognized mount option "jÈ`Fj¥¶¾~‹{½C¹ourn;(í$M˳B[ÓºŠ-al_dev=0x0000f" or missing value 03:12:29 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f0000", 0x16, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) [ 712.190446] loop6: detected capacity change from 0 to 2102784 [ 712.259705] EXT4-fs error (device loop6): ext4_fill_super:4967: inode #2: comm syz-executor.6: iget: special inode unallocated [ 712.264594] EXT4-fs (loop6): get root inode failed [ 712.265848] EXT4-fs (loop6): mount failed 03:12:45 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000400)={0x8}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x1e, 0xe21, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) lseek(r1, 0x3b6, 0x4) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) 03:12:45 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f0000", 0x16, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 03:12:45 executing program 1: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fadvise64(r4, 0x0, 0xfff, 0x4) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}}, 0x108) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x5, 0x600f, @fd=r4, 0x69, &(0x7f0000000780)="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", 0x1000, 0x4, 0x0, {0x0, r5}}, 0x0) dup2(r0, r1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_ID(r6, 0x80082407, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 03:12:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 11) 03:12:45 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') readv(r1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/235, 0xeb}], 0x1) r2 = gettid() r3 = dup(r0) r4 = socket$netlink(0x10, 0x3, 0x0) getpeername$netlink(r4, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) process_vm_readv(r2, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x1a1c01, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2c, &(0x7f00000003c0)={0x80, {{0x2, 0x4e21, @remote}}, {{0x2, 0x0, @loopback}}}, 0x108) 03:12:45 executing program 7: fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000001180)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x14050884) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1433, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x113}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000001300)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/4109, 0x100d}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0xc2d2, 0x2, 0xfffffffe, 0x38c}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r6) r7 = openat$cgroup_int(r0, &(0x7f0000001240)='net_cls.classid\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001280)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000011c0)="f2ed635a07b90f0828e1c62838b5793185bbe4c12f2edb7372ca342ac24fb3c0ac2b6ba6e1d64b0f35dea1beef3b7151c29a09397cd96ed8014fdd226b0e348553108cd3b3b6c128f098f4e676dbf222", 0x50, r7}, 0x68) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) 03:12:45 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {0x0}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:12:45 executing program 5: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0xc024, 0x1) creat(&(0x7f0000000000)='./file1\x00', 0x50) open(&(0x7f0000000080)='./file0\x00', 0x210000, 0x160) faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x1200) [ 728.343226] FAULT_INJECTION: forcing a failure. [ 728.343226] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 728.346364] CPU: 0 PID: 6649 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 728.347978] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 728.349943] Call Trace: [ 728.350571] dump_stack+0x107/0x167 [ 728.351435] should_fail.cold+0x5/0xa 03:12:45 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @multicast1}}) r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000004, 0x30, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x7d54c3, 0x5) r5 = syz_io_uring_setup(0x5548, &(0x7f00000002c0)={0x0, 0xf22b, 0x2, 0x2, 0x3cc, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000400)) r6 = inotify_init1(0x800) copy_file_range(r4, &(0x7f0000000180)=0x8, r6, &(0x7f0000000280)=0x714, 0x0, 0x0) accept$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c) syz_io_uring_setup(0x4d4f, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@ipv4={""/10, ""/2, @multicast2}, @in6=@private1}}, {{@in6=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000640)=0xe8) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, r4, 0x0, &(0x7f0000000440)="a5648e4d695b2551503cf7f8c076df64d065721731377049196fa5b7eab4da39106ece58b6c5c0f2f8d562b5001dee332a81c37cb91dabe4baec880fe68804965ac57c31dcfd0349e6ad16b81008158f3d075cb16d0214003783fe9f6b7c8afb540f48679c00efcedc1a271442e1edeaeb7c290085b455ec2f363a0ed5800b0d6006f4bba8f404763cec7500218f59851688a60651031ea939a3c59fd10f8dd0fc610c23fe940efaba7181c332c1edca6555e909984f4cd1baaff953b93c97c4c8c7667e721e9c7c18fa28ff315b4772edacec7806fadc4a744ef883b84e3aa4493278bc650407bd81cda70d", 0xec, 0x40002041, 0x1}, 0x4) lseek(r1, 0x1, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 728.352347] __alloc_pages_nodemask+0x182/0x600 [ 728.353586] ? xa_load+0x12d/0x2c0 [ 728.354426] ? lock_downgrade+0x6d0/0x6d0 [ 728.355403] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 728.356851] alloc_pages_current+0x187/0x280 [ 728.357896] __page_cache_alloc+0x2d2/0x360 [ 728.358925] page_cache_ra_unbounded+0x207/0x6f0 [ 728.360090] ? read_pages+0xbc0/0xbc0 [ 728.360988] ? __lock_page_or_retry+0x4e0/0x4e0 [ 728.362104] ondemand_readahead+0x8e5/0x1150 [ 728.363155] page_cache_sync_ra+0x138/0x170 [ 728.364193] generic_file_buffered_read+0xc8e/0x2920 [ 728.365425] ? pagecache_get_page+0xc80/0xc80 [ 728.366484] ? kasan_save_stack+0x32/0x40 [ 728.367468] ? do_splice_direct+0x1c4/0x290 [ 728.368504] ? do_sendfile+0x553/0x11e0 [ 728.369444] ? __x64_sys_sendfile64+0x1d1/0x210 [ 728.370539] ? do_syscall_64+0x33/0x40 [ 728.371456] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 728.372731] ? perf_trace_lock+0xac/0x490 [ 728.373712] generic_file_read_iter+0x33f/0x490 [ 728.374817] ? __fsnotify_parent+0x47a/0xb10 [ 728.375882] ext4_file_read_iter+0x184/0x4c0 [ 728.376956] generic_file_splice_read+0x455/0x6d0 [ 728.378121] ? pipe_to_user+0x170/0x170 [ 728.379095] ? fsnotify_perm.part.0+0x22d/0x620 [ 728.380232] ? security_file_permission+0xb1/0xe0 [ 728.381404] ? pipe_to_user+0x170/0x170 [ 728.382367] do_splice_to+0x10e/0x160 [ 728.383297] splice_direct_to_actor+0x2fe/0x980 [ 728.384441] ? pipe_to_sendpage+0x380/0x380 [ 728.385492] ? do_splice_to+0x160/0x160 [ 728.386452] ? security_file_permission+0xb1/0xe0 [ 728.387634] do_splice_direct+0x1c4/0x290 [ 728.388649] ? splice_direct_to_actor+0x980/0x980 [ 728.389818] ? avc_policy_seqno+0x9/0x70 [ 728.390814] ? security_file_permission+0xb1/0xe0 [ 728.391968] do_sendfile+0x553/0x11e0 [ 728.392907] ? do_pwritev+0x270/0x270 [ 728.393826] ? wait_for_completion_io+0x270/0x270 [ 728.395001] ? rcu_read_lock_any_held+0x75/0xa0 [ 728.396133] ? vfs_write+0x354/0xb10 [ 728.397036] __x64_sys_sendfile64+0x1d1/0x210 [ 728.398119] ? __ia32_sys_sendfile+0x220/0x220 [ 728.399236] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 728.400515] ? syscall_enter_from_user_mode+0x1d/0x50 [ 728.401764] do_syscall_64+0x33/0x40 [ 728.402665] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 728.403894] RIP: 0033:0x7fe3014fcb19 [ 728.404781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 728.409193] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 728.411026] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 728.412753] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 728.414461] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 728.416167] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 728.417870] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 728.419966] hpet: Lost 3 RTC interrupts 03:12:45 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x4}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:12:45 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x4}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 728.426748] loop6: detected capacity change from 0 to 2102784 [ 728.466980] EXT4-fs error (device loop6): ext4_fill_super:4967: inode #2: comm syz-executor.6: iget: special inode unallocated [ 728.473610] EXT4-fs (loop6): get root inode failed [ 728.474889] EXT4-fs (loop6): mount failed 03:13:00 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = getpid() perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x7, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(r1, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/235, 0xeb}, {&(0x7f0000000200)=""/240, 0xf0}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000700)=""/100, 0x64}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000680)=""/4, 0x4}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x0, 0x4, 0x7, 0xff, r3}) ptrace$peek(0x1, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) connect$inet6(r4, &(0x7f0000000000)={0xa, 0xfff8, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c) fork() syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) 03:13:00 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x28, 0x0, 0x0, 0x10000, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@name={'name', 0x3d, ','}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xf3cf6003cf395c7d, 0x0) 03:13:00 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r0, 0x8) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1000}]}, 0x34}}, 0x8000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000000)=""/26, 0x1a}], 0x1, 0xaf, 0x0) 03:13:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 12) 03:13:00 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000", 0x1a, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) [ 743.075756] FAULT_INJECTION: forcing a failure. [ 743.075756] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 743.077713] CPU: 1 PID: 6691 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 743.078975] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 743.080353] Call Trace: [ 743.080793] dump_stack+0x107/0x167 [ 743.081379] should_fail.cold+0x5/0xa [ 743.082012] __alloc_pages_nodemask+0x182/0x600 [ 743.082767] ? xa_load+0x12d/0x2c0 [ 743.083340] ? lock_downgrade+0x6d0/0x6d0 [ 743.084015] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 743.085014] alloc_pages_current+0x187/0x280 [ 743.085265] cgroup: Bad value for 'name' [ 743.085721] __page_cache_alloc+0x2d2/0x360 [ 743.085745] page_cache_ra_unbounded+0x207/0x6f0 [ 743.085771] ? read_pages+0xbc0/0xbc0 [ 743.088854] ? __lock_page_or_retry+0x4e0/0x4e0 [ 743.089611] ondemand_readahead+0x8e5/0x1150 [ 743.090328] page_cache_sync_ra+0x138/0x170 [ 743.091025] generic_file_buffered_read+0xc8e/0x2920 [ 743.091860] ? pagecache_get_page+0xc80/0xc80 [ 743.092582] ? kasan_save_stack+0x32/0x40 [ 743.093262] ? do_splice_direct+0x1c4/0x290 [ 743.094061] ? do_sendfile+0x553/0x11e0 [ 743.094712] ? __x64_sys_sendfile64+0x1d1/0x210 [ 743.095460] ? do_syscall_64+0x33/0x40 [ 743.095739] cgroup: Bad value for 'name' [ 743.096081] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 743.096103] ? perf_trace_lock+0xac/0x490 [ 743.098631] generic_file_read_iter+0x33f/0x490 [ 743.099380] ? __fsnotify_parent+0x47a/0xb10 [ 743.100090] ext4_file_read_iter+0x184/0x4c0 [ 743.100800] generic_file_splice_read+0x455/0x6d0 [ 743.101568] ? pipe_to_user+0x170/0x170 [ 743.102209] ? fsnotify_perm.part.0+0x22d/0x620 [ 743.102954] ? security_file_permission+0xb1/0xe0 [ 743.103759] ? pipe_to_user+0x170/0x170 [ 743.104400] do_splice_to+0x10e/0x160 [ 743.105012] splice_direct_to_actor+0x2fe/0x980 [ 743.105763] ? pipe_to_sendpage+0x380/0x380 [ 743.106456] ? do_splice_to+0x160/0x160 [ 743.107087] ? security_file_permission+0xb1/0xe0 [ 743.107863] do_splice_direct+0x1c4/0x290 [ 743.108563] ? splice_direct_to_actor+0x980/0x980 [ 743.109330] ? avc_policy_seqno+0x9/0x70 [ 743.110079] ? security_file_permission+0xb1/0xe0 [ 743.110854] do_sendfile+0x553/0x11e0 [ 743.111468] ? do_pwritev+0x270/0x270 [ 743.112076] ? wait_for_completion_io+0x270/0x270 [ 743.112856] ? rcu_read_lock_any_held+0x75/0xa0 [ 743.113591] ? vfs_write+0x354/0xb10 [ 743.114185] __x64_sys_sendfile64+0x1d1/0x210 [ 743.114899] ? __ia32_sys_sendfile+0x220/0x220 [ 743.115627] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 743.116465] ? syscall_enter_from_user_mode+0x1d/0x50 [ 743.117289] do_syscall_64+0x33/0x40 [ 743.117878] entry_SYSCALL_64_after_hwframe+0x67/0xd1 03:13:00 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x4}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 743.118695] RIP: 0033:0x7fe3014fcb19 03:13:00 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x0, 0x0, {0xe}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x3ffc, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401) r3 = getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000180)={0x0, 0x0, 0x7, 0xff, r3}) kcmp(r3, r3, 0xae20aea180142279, 0xffffffffffffffff, 0xffffffffffffffff) pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x1, 0x4, 0x9, 0x0, 0x0, 0xfffffffffffffff7, 0x800, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0xb}, 0x1023a, 0x8000, 0x9, 0x8, 0x0, 0x888c, 0x3ff, 0x0, 0x3, 0x0, 0x100}, r3, 0xb, r2, 0xa) syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) lseek(r1, 0x1, 0x4) unshare(0x48020200) close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r0]) execve(0x0, 0x0, &(0x7f0000000440)=[0x0]) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x4010, r0, 0x8000000) [ 743.119481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 743.122523] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 743.123708] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 743.124837] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 743.126054] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 743.127172] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 743.128300] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 743.132301] loop6: detected capacity change from 0 to 2102784 [ 743.188231] EXT4-fs error (device loop6): ext4_fill_super:4967: inode #2: comm syz-executor.6: iget: special inode unallocated [ 743.190357] EXT4-fs (loop6): get root inode failed [ 743.191201] EXT4-fs (loop6): mount failed 03:13:00 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r0, 0x8) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x9}, 0x1c) syz_emit_ethernet(0x16a, &(0x7f0000000080)={@link_local={0x11}, @local, @void, {@ipv4={0x800, @gre={{0x46, 0x4, 0x0, 0x0, 0x15c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @loopback, {[@lsrr={0x83, 0x23, 0x0, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty, @empty, @empty]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@private}, {@broadcast}]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@multicast1}, {@empty}]}, @cipso={0x86, 0x2f, 0x0, [{0x0, 0x8, "9597370df8f9"}, {0x0, 0x9, "eca9a9f0a2e30c"}, {0x0, 0x6, "8380b47a"}, {0x0, 0x12, "181f07c36e4eac01ae4bde8a7522ffbb"}]}, @rr={0x7, 0x23, 0x0, [@multicast1, @empty, @local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @loopback]}, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@multicast1}, {@remote}, {@multicast2}, {@remote}, {@empty}, {@remote}, {@loopback}]}, @generic={0x0, 0xf, "8e3e126e5bf59bd7fdccb298b1"}, @cipso={0x86, 0xe, 0x0, [{0x0, 0x8, "8b2fd6017104"}]}, @generic={0x0, 0x3, "e8"}]}}}}}}, 0x0) 03:13:00 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r0, 0x8) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x8a2c2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0xaa051543532a8be3, 0x103) sendfile(r2, r3, 0x0, 0x100000001) lseek(r1, 0x0, 0x4) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r4, 0x8) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x7fff}}, './file0\x00'}) [ 743.230255] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 03:13:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 13) 03:13:00 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000", 0x1a, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 03:13:00 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x4}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 743.317911] FAULT_INJECTION: forcing a failure. [ 743.317911] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 743.319675] CPU: 1 PID: 6718 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 743.320660] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 743.321867] Call Trace: [ 743.322248] dump_stack+0x107/0x167 [ 743.322778] should_fail.cold+0x5/0xa [ 743.323340] __alloc_pages_nodemask+0x182/0x600 [ 743.324018] ? xa_load+0x12d/0x2c0 [ 743.324548] ? lock_downgrade+0x6d0/0x6d0 [ 743.325143] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 743.326010] alloc_pages_current+0x187/0x280 [ 743.326638] __page_cache_alloc+0x2d2/0x360 [ 743.327295] page_cache_ra_unbounded+0x207/0x6f0 [ 743.327975] ? read_pages+0xbc0/0xbc0 [ 743.328636] ? __lock_page_or_retry+0x4e0/0x4e0 [ 743.329305] ondemand_readahead+0x8e5/0x1150 [ 743.329936] page_cache_sync_ra+0x138/0x170 [ 743.330549] generic_file_buffered_read+0xc8e/0x2920 [ 743.331293] ? pagecache_get_page+0xc80/0xc80 [ 743.331939] ? kasan_save_stack+0x32/0x40 [ 743.332552] ? do_splice_direct+0x1c4/0x290 [ 743.333169] ? do_sendfile+0x553/0x11e0 [ 743.333728] ? __x64_sys_sendfile64+0x1d1/0x210 [ 743.334392] ? do_syscall_64+0x33/0x40 [ 743.334944] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 743.335701] ? perf_trace_lock+0xac/0x490 [ 743.336309] generic_file_read_iter+0x33f/0x490 [ 743.336978] ? __fsnotify_parent+0x47a/0xb10 [ 743.337604] ext4_file_read_iter+0x184/0x4c0 [ 743.338231] generic_file_splice_read+0x455/0x6d0 [ 743.338914] ? pipe_to_user+0x170/0x170 [ 743.339484] ? fsnotify_perm.part.0+0x22d/0x620 [ 743.340147] ? security_file_permission+0xb1/0xe0 [ 743.340846] ? pipe_to_user+0x170/0x170 [ 743.341413] do_splice_to+0x10e/0x160 [ 743.341960] splice_direct_to_actor+0x2fe/0x980 [ 743.342632] ? pipe_to_sendpage+0x380/0x380 [ 743.343252] ? do_splice_to+0x160/0x160 [ 743.343843] ? security_file_permission+0xb1/0xe0 [ 743.344614] do_splice_direct+0x1c4/0x290 [ 743.345199] ? splice_direct_to_actor+0x980/0x980 [ 743.345867] ? avc_policy_seqno+0x9/0x70 [ 743.346434] ? security_file_permission+0xb1/0xe0 [ 743.347113] do_sendfile+0x553/0x11e0 [ 743.347654] ? do_pwritev+0x270/0x270 [ 743.348188] ? wait_for_completion_io+0x270/0x270 [ 743.348897] ? rcu_read_lock_any_held+0x75/0xa0 [ 743.349552] ? vfs_write+0x354/0xb10 [ 743.350086] __x64_sys_sendfile64+0x1d1/0x210 [ 743.350720] ? __ia32_sys_sendfile+0x220/0x220 [ 743.351378] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 743.352126] ? syscall_enter_from_user_mode+0x1d/0x50 [ 743.352878] do_syscall_64+0x33/0x40 [ 743.353397] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 743.354121] RIP: 0033:0x7fe3014fcb19 [ 743.354648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 743.357261] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 743.358324] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 743.359329] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 743.360413] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 743.361406] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 743.362394] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 743.379366] loop6: detected capacity change from 0 to 2102784 03:13:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000280)) r2 = syz_io_uring_setup(0x1fe5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x800}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r3 = io_uring_setup(0x20f1, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000180)=0x7) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000340)=""/129, 0x81}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_setup(0x3e79, &(0x7f00000004c0)={0x0, 0x7f29, 0x8, 0x0, 0x1da}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540), &(0x7f0000000580)) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) getsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000001c0), &(0x7f0000000400)=0x4) 03:13:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 14) [ 743.405871] loop1: detected capacity change from 0 to 262144 [ 743.447828] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 743.492476] EXT4-fs error (device loop6): ext4_fill_super:4967: inode #2: comm syz-executor.6: iget: special inode unallocated 03:13:00 executing program 7: fallocate(0xffffffffffffffff, 0x2, 0x9, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x4, 0xc1, 0xb4700000, 0x3ff, 0x73cf}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x3a74, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4000, 0x284}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {r3, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004d940)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}], 0x4, "711addf3f468ee"}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) dup(0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000007780)={0x0, 0x0, 0x0}, 0x20000000) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) [ 743.497560] EXT4-fs (loop6): get root inode failed [ 743.498827] EXT4-fs (loop6): mount failed [ 743.502713] FAULT_INJECTION: forcing a failure. [ 743.502713] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 743.504318] CPU: 1 PID: 6737 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 743.505238] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 743.506330] Call Trace: [ 743.506681] dump_stack+0x107/0x167 [ 743.507149] should_fail.cold+0x5/0xa [ 743.507646] __alloc_pages_nodemask+0x182/0x600 [ 743.508246] ? xa_load+0x12d/0x2c0 [ 743.508706] ? lock_downgrade+0x6d0/0x6d0 [ 743.509476] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 743.510504] alloc_pages_current+0x187/0x280 [ 743.511181] __page_cache_alloc+0x2d2/0x360 03:13:00 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f00000018c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)={0x11dc, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x7d0, 0x33, @data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xa, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x5214}, @broadcast, @from_mac, @broadcast, {0x6, 0x1}}, {0x9, 0x1, 0x1, 0x0, 0x9}}, {@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @initial, @from_mac=@broadcast, {0x4, 0xff9}}, {0x3, 0x1, 0x2, 0x1, 0x20}}}, @random="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"}}, @NL80211_ATTR_FRAME={0x140, 0x33, @mgmt_frame=@probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x76f0}, @device_b, @broadcast, @from_mac=@broadcast, {0x0, 0x5ae}}, @ver_80211n={0x0, 0x1, 0x3, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x50, @default, 0x8, @void, @val={0x1, 0x8, [{0x60, 0x1}, {0x12, 0x1}, {0x18, 0x1}, {0xc}, {0x56f08a6c1ee76a, 0x1}, {0xc, 0x1}, {0x24}, {0x9}]}, @void, @void, @val={0x6, 0x2, 0x40}, @void, @void, @void, [{0xdd, 0x95, "360d11ecf28c63d146abe81cd14e7d3f39cc8d7680ebda4acd0076fae31f2d1d0f572effe913f50c33d8473bf97200c728b0df7e8b0ce8b97aa86b7752559a24385fadc2d1a9603ddd1626ff0ac2c3435194d3446cc5a8aed7cc559d16c7c9fa8bdab3a3201b605fca34ace8d8bd08b6a7b5b313a330fb6610e48fd4c6e2dbf08b64834a635fa5c3d4d4e1ea8bb64973267e9a4daa"}, {0xdd, 0x6d, "4c9a57c9f5b7f7b769c9a16361d05bda6be28fc774ab39272f5f10c4a39c7101924ab11fd977b63ba19eba3bd85e188edb67bf9ff7e9585630f5717a6568d481aac521bdcc29ceff9e2539a8bab027922c6311d79b17268a661bac9c52f4de377e290f41b95d82b389ef8c0c42"}]}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x2}, @device_b}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x448, 0x33, @data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x16}, @from_mac, @device_b, @device_b, {0x4, 0xc4}}, {0xe, 0x1, 0x2, 0x0, 0x40}}, {@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @broadcast, @device_a, @from_mac=@device_b, {0x1, 0x81}}, {0x0, 0x1, 0x0, 0x1, 0x4}}}, @a_msdu=[{@device_a, @device_b, 0xc5, "fb9f7a99806d2ea88e929dd0d48ab1eaf139a668dc258f8d047b33aaa6132d4e75e904b7374098d91def63c614fabb1f82b22e21a006657a6a75b902dbf2016ec241939304241f1528eafad45a3819dd98de2857d07690d4b561b160fdfe2c839c7de6d158c1f1dfb760308596326574c125dbd51768c913093f5c72638f961144ff2c294ef4e128725e8db288db8e724d6ea1a85d65733bb4755c3754598560b6c2e0dfe8e5b711f93030d4d8b3ace70a4e09f7e5a915fe660cf9869928f895d32fe0bf12"}, {@broadcast, @broadcast, 0xeb, "18689e0242d604034fe0c2b9995dd9d6a6a4b739cac9f832bfc7ab493c100815ccb7aa68e3ed2f42dd993a63a21194bf550736de980c419ac9b390a475881966861def517be51700d964b41917814c9b53788a3ec48d21350d79c1b56353e75723350b9777b1d58fc78c0b218264d338d7ed929509cade71326d3b5e2e70226d716ba49465cf939d6efee6b3e68ad4242103ba48de80344f29ea1a28afae2c18ec029bb9685cfa9575adc08090d7a0b987b68ca4dfd929f95d80dd8a86e0330d5b1088c93ecbf426be56b206b8c489841719a3882ac5414cd8268775b4f412f80fc043e591a2869f09b60c"}, {@device_b, @device_b, 0xf5, "b1fcf074631a4c668634aa0078a3eb5354ae6b9a2b49172d86c5fa2a59d2e44505ef0a3f0837b92e51aa8831bfe6cc83203c05ee3d01de0fff404811746e7917aabc68b1c22b8914ce3f0a7bd0201e57f41bbf2689229e8185fd972feb00338372ae5a60dc428928c3ea4ac11780ed60c9a2aec5c82a0e936f37eb3d7f68defb66a2df56271d585191b3042e13f37f7688dbe2413211fbe5ba358145aeb0cbfcb4830f436a8f05492c1ddb2d8e427827a5f8acb4a43918279d2c4f79a82d2be2d6beff2fea2e5260b1ccb545999e7f3a67cd8271ab2691084a9964e558f4fb9935e94e12f78c805f882be275c82fa2bf5ede503380"}, {@broadcast, @device_a, 0x1c, "4fb65b2a16a572f50eedc6810e8958f7caa7eb869ab77b472f55e824"}, {@broadcast, @device_a, 0x9c, "731382e348c5b73d02ab6f484357d5badb53cb3072f88ecb98b156a65ad6af10fb6c745c28ba74958a4ff4c4bfefe826ff236e9fa9ec836f1598cc79930cb3e9207a362c17dd8e43b8bb5c517f419861dba62a7b1f9bdb4d5ca2b2478d77a3ac035b755ac4076e5ae78f9122405337e334798f70f4c81d4d4739154c9b2e2aee67d124873ecb8f11c0da3e5295af6ec626bb36c93282d27261be50a6"}, {@broadcast, @broadcast}, {@broadcast, @device_b, 0x1e, "82eb79325b4d3516ed05dcfb1482050cca97a79b03e1273ed8d6c8fe71b8"}, {@device_a, @device_a, 0x17, "7a7604023ab7d5c214c916690aa08ee278c61f1dce8711"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x3f9, 0x33, @mgmt_frame=@reassoc_req={@with_ht={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1c79}, @broadcast, @device_b, @initial, {0xf, 0x2}}, @ver_80211n={0x0, 0x1f, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, 0x401, 0x1, @device_a, {0x0, 0x6, @default_ap_ssid}, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x1, 0x0, {0x4, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x1, 0x8, 0x5}}, [{0xdd, 0xc0, "88ef7b7c5a8bb59ae378c0d893469db227efb93ce0dd334fa448786aef6d52ea76337058b629e34b1587c6ca8420546c6dbbf77a24e563f2b4ffed94952b6debca4774f993f4969228765cbe38bcfd8372e0c5cbec1ae3f8717d104c3ba9b4a0d9d579a8bf8e163dd22929f28367fddfa491eb2ded92a47bf6a9832e71b44a51e9b8fd8d21c1a27ff9c6ca98d2e9a2d41bf58deadbf2e83793c0d7ec9ae42350ef37d7b293d945b275cb64320f82b492b0c606f94946697efd2b7bd35b934de0"}, {0xdd, 0x55, "de98d432dff76f0c6f9e632bc7e4a8ae4f38034cd4df4a16e0aefe171686ddfc680fda3fccac3ab6b74847fc41e04650b3ef9697ac8cad2e900aa79c6cc5429c939e204667ddec5637cfc45920f5b506590a9d4371"}, {0xdd, 0x5e, "0171f52144dca30e55172d39d501ebd5f00e9c71ad5fd0f877c6101173dc37c819016855cdfbddb0bf97722d9d08019a1bbf83933e0f51864088a5b570d17b0c0b2cfee2b8ba3c13479d5f7ca249188233dd0d9efab067e9f5c64279906f"}, {0xdd, 0xb2, "08716cd9dbb913f13ab7294b17f98bab6c4a8a134f5a700fe282d81df6fdc9044fa8abb69e325f988b69d461feb3dea573ab7b7fa3f3feb8142b7256b4ca237cb647f91a9c07f5986eda0ebfa179d07ad813df86a3a228a10f6ba767a145a8922b1a8a25bb99995225780a8c4b43b9188e37bfab2eda92867a412e0242442ce9b57fcdaca2679a882fa712b39e0711f735fe9dd6162993426f96f3754c10ed1eef83261e867f36cca3330d4544810d3d3d34"}, {0xdd, 0x4c, "4c241dfc3283cd31e3840cf1e2095cd5574bf98423a8fae17e5949b64abff9c1a2f961f06682a061321c755565411c2e8bcde0cb3e3f98e99253a051cab00aa77478f324d0ae21eac28272a1"}, {0xdd, 0x60, "2d20bf9f1eaa8d8f1835f8fb7f5cddd995d23438d79ea9dd4b048e20d7d935545bc45404047914019452bc01c14d2b1e9763fd4cb36f6245de0e00194f284c54541d9cbe462b68457fddbca7e3b3269eac8835e22b1356046825a7412e2365c9"}, {0xdd, 0xcc, "4a62b2eba12e6bdd7a7bcdefa61b498475440eb09e4d223054fdb187afe3058d2560c0f3a3cea7773c6c6a127d73a860e4cf98260fdf1ada6c8a83df19aa78082b16a275eae5587f8b821a4a0ac635ce6ecfef07ec8f5b61bc3c544a36accbb434f83cfe2f07e89acd54ed24eaa2250b3b901bcf34a8100e63f152b6853b5d35978136cd5f8cb86aeb3aaf8636d134e5d87e0faf37cde193c495730e8dadb6ca90215ea6b00dbfb2900e13de56e5269886b02f1d6ac7e04ffa63d52ad9b74591ccaa043bb1dee6204ea36a18"}]}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x81}, @broadcast}}, @NL80211_ATTR_FRAME={0x25, 0x33, @mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {0x2}, @broadcast, @device_a, @initial, {0x1, 0x8}}, @addba_req={0x3, 0x0, {0x5, {0x0, 0x1, 0x2, 0x80}, 0x946, {0xc, 0x5}}}}}, @NL80211_ATTR_MAC={0xa}]}, 0x11dc}, 0x1, 0x0, 0x0, 0x40000}, 0x40) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1423ac00210000092cbd686b46f6470cb3a2ec0c77468efe5886d81b6ba804cdb4a5fbdb7875fba8d15b5ac6e68a732725035c47bb9f6eef0108f479e52f05e3aedb7819b38664d3be6ad16bdb1f05e6d3df1bc5d13400df3c6dd4c59b12065a606dccd7473488d708f59a463567236abda1ddf0894ab552bd59ea9d309472fdafad9501"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x20040000) r4 = socket$inet(0x2, 0x9aae2ce7d4d52829, 0x7ff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usbcore', 0x38002, 0x1) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) keyctl$restrict_keyring(0x1d, r5, 0x0, 0x0) unshare(0x48020200) 03:13:00 executing program 3: r0 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0x82, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x7f, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x33) syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) pipe2(&(0x7f0000000540), 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 743.511868] page_cache_ra_unbounded+0x207/0x6f0 [ 743.512684] ? read_pages+0xbc0/0xbc0 [ 743.513155] ? __lock_page_or_retry+0x4e0/0x4e0 [ 743.513757] ondemand_readahead+0x8e5/0x1150 [ 743.514325] page_cache_sync_ra+0x138/0x170 [ 743.514879] generic_file_buffered_read+0xc8e/0x2920 [ 743.515544] ? pagecache_get_page+0xc80/0xc80 [ 743.516203] ? kasan_save_stack+0x32/0x40 [ 743.516745] ? do_splice_direct+0x1c4/0x290 [ 743.517306] ? do_sendfile+0x553/0x11e0 [ 743.517818] ? __x64_sys_sendfile64+0x1d1/0x210 [ 743.518417] ? do_syscall_64+0x33/0x40 [ 743.518913] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 743.519591] ? perf_trace_lock+0xac/0x490 [ 743.520119] generic_file_read_iter+0x33f/0x490 [ 743.520716] ? __fsnotify_parent+0x47a/0xb10 [ 743.521277] ext4_file_read_iter+0x184/0x4c0 [ 743.521837] generic_file_splice_read+0x455/0x6d0 [ 743.522448] ? pipe_to_user+0x170/0x170 [ 743.522962] ? fsnotify_perm.part.0+0x22d/0x620 [ 743.523557] ? security_file_permission+0xb1/0xe0 [ 743.524171] ? pipe_to_user+0x170/0x170 [ 743.524688] do_splice_to+0x10e/0x160 [ 743.525187] splice_direct_to_actor+0x2fe/0x980 [ 743.525781] ? pipe_to_sendpage+0x380/0x380 [ 743.526329] ? do_splice_to+0x160/0x160 [ 743.526832] ? security_file_permission+0xb1/0xe0 [ 743.527447] do_splice_direct+0x1c4/0x290 [ 743.527970] ? splice_direct_to_actor+0x980/0x980 [ 743.528587] ? avc_policy_seqno+0x9/0x70 [ 743.529104] ? security_file_permission+0xb1/0xe0 [ 743.529727] do_sendfile+0x553/0x11e0 [ 743.530217] ? do_pwritev+0x270/0x270 [ 743.530701] ? wait_for_completion_io+0x270/0x270 [ 743.531385] ? rcu_read_lock_any_held+0x75/0xa0 [ 743.531985] ? vfs_write+0x354/0xb10 [ 743.532471] __x64_sys_sendfile64+0x1d1/0x210 [ 743.533042] ? __ia32_sys_sendfile+0x220/0x220 [ 743.533624] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 743.534290] ? syscall_enter_from_user_mode+0x1d/0x50 [ 743.534944] do_syscall_64+0x33/0x40 [ 743.535423] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 743.536073] RIP: 0033:0x7fe3014fcb19 [ 743.536559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 743.538887] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 743.539849] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 743.540755] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 743.541654] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 743.542556] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 743.543453] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 03:13:00 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x4}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 743.583929] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 743.605039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6747 comm=syz-executor.4 [ 743.859097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6747 comm=syz-executor.4 [ 743.900264] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 03:13:16 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x4}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:13:16 executing program 5: syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60000000000c2f00fe80000000000000000000000000000000000000000000aa0000000000ef0000a1f9880b"], 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@multicast, @broadcast, @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@llc={0x4, {@llc={0x42, 0x1, "f0dc", "a81e376f0cd7a0e6ed77c4f213815d049be6c96eb70011d23c1b70b080c3111a551a419cfa8f30fdd04d0fe2fcd861675e38922d479253d0166b2507345ecf0e2fc7a6fccb085f9a2a8abf938e9fadffd7985bd34aadcd80c9b831456fec269830d3600a6526dbb9"}}}}}, &(0x7f00000000c0)={0x3, 0x4, [0x6ec, 0xdfc, 0xfffffffd, 0xd47]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 03:13:16 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x580, 0x0, 0x0, 0xb9998546a837ad48, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) preadv2(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, 0x10001, 0x31, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) getpgid(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)) getpgrp(0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018005af0177c43639ab79b", @ANYRES32, @ANYBLOB="5230000001800005000000006c653000"]) 03:13:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 15) 03:13:16 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3f) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x0, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000040)) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000240)="08c0", 0x2}], 0x1) 03:13:16 executing program 1: ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x24508) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)=ANY=[@ANYBLOB="cd7162010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x7, 0x801, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfb21}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5aea}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000240)={0x1000, 0x33fb0000, 0x8, 0xfffff0a6, 0x85}) fallocate(0xffffffffffffffff, 0x0, 0x5, 0x1) 03:13:16 executing program 4: pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="04", 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x34}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000580)="c1f07683ab4e721b954274f9145e2226bc648551b12e0a3ef128922e634a57534f3619e835ca80e748c052cd213e97c7e08ff2467c221b004dcaf216985bf62aa766a27c07e168c1477e025c73dd1e8a8e8780cf581dea4f618b4426926dfb9856d001aa3068404117e73c0b4eb8abcba464205def90ea36498f52650e80f1b10d8f00afaed563", 0x87}, {&(0x7f0000000740)="3816a0d4fc0bf761da76ef7f3970a66c284cf98bec2f97f44d2922499d996f7387176beca191e90b75b76cac49530fe3bf657424bf40d3bedc0b87ccbf74e5a6e073ab0b61d42af81ecea65edb3c52268569af7ce9cdbd351ed501db3fc9a044340bbb92a67912eb9204cbce289f811a27009873f16b9b5726921963958d1b13d4679e637a1b2d6997956f51960f26c1a5d91621305757b38a15229f6104130b47c8a6a076e17c53d4f60faadfe65cd55c133a73d661cc6078bbfcfc2a2fcc94df467e01b8bf8563f566dc8b2a1f98c225be77106204539e8513215965b009d6916f88", 0xe3}], 0x2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x300000000, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000540)=0xefa7, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000380)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) dup3(r2, r2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fallocate(r0, 0x5, 0xffffffffffffffff, 0x1ff) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3402}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x20000000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="14de7b7c95090000000000000017c40bbad54056d00f249cc564118f72433496a2a67712cf1554459cab397864b1049fcdffbef72c66dadd7fd8071f54f76e7e06b584ed3f23cb"], 0x14}}, 0x0) 03:13:16 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000", 0x1a, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 03:13:16 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r0}}, 0x10001) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='comm\x00') r2 = getpgid(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x0, 0x0) readv(r4, &(0x7f0000000180)=[{&(0x7f0000000140)=""/45, 0x2d}, {&(0x7f0000000300)=""/201, 0xc9}], 0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0xffff) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r6, 0xc020662a, &(0x7f0000000100)={0xfffffffeffd, 0x4}) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x96, 0x7f, 0x4, 0xfd, 0x0, 0x8ab2, 0x1, 0xf, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x2, @perf_config_ext={0x20, 0x7}, 0x40884, 0x6, 0x9, 0xfcb1a2eb3cbb2e62, 0x7, 0x1, 0x4, 0x0, 0x7fff, 0x0, 0x1}, r2, 0xd, r6, 0x8) [ 758.968789] loop6: detected capacity change from 0 to 2102784 [ 758.981662] FAULT_INJECTION: forcing a failure. [ 758.981662] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 758.984434] CPU: 1 PID: 6783 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 758.986108] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 758.988012] Call Trace: [ 758.988638] dump_stack+0x107/0x167 [ 758.989479] should_fail.cold+0x5/0xa [ 758.990363] __alloc_pages_nodemask+0x182/0x600 [ 758.991429] ? xa_load+0x12d/0x2c0 [ 758.992247] ? lock_downgrade+0x6d0/0x6d0 [ 758.993207] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 758.994608] alloc_pages_current+0x187/0x280 [ 758.995624] __page_cache_alloc+0x2d2/0x360 [ 758.996634] page_cache_ra_unbounded+0x207/0x6f0 [ 758.997740] ? read_pages+0xbc0/0xbc0 [ 758.998612] ? __lock_page_or_retry+0x4e0/0x4e0 [ 758.999700] ondemand_readahead+0x8e5/0x1150 [ 759.000812] page_cache_sync_ra+0x138/0x170 [ 759.001808] generic_file_buffered_read+0xc8e/0x2920 [ 759.002997] ? pagecache_get_page+0xc80/0xc80 [ 759.004020] ? kasan_save_stack+0x32/0x40 [ 759.004986] ? do_splice_direct+0x1c4/0x290 [ 759.005974] ? do_sendfile+0x553/0x11e0 [ 759.006882] ? __x64_sys_sendfile64+0x1d1/0x210 [ 759.007948] ? do_syscall_64+0x33/0x40 [ 759.008852] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 759.010070] ? perf_trace_lock+0xac/0x490 [ 759.011028] generic_file_read_iter+0x33f/0x490 [ 759.012095] ? __fsnotify_parent+0x47a/0xb10 [ 759.013122] ext4_file_read_iter+0x184/0x4c0 [ 759.014135] generic_file_splice_read+0x455/0x6d0 [ 759.015246] ? pipe_to_user+0x170/0x170 03:13:16 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f00000002c0)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000180)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}, {&(0x7f00000000c0), 0x0, 0x5}], 0x0, &(0x7f0000000280)) [ 759.016258] ? fsnotify_perm.part.0+0x22d/0x620 [ 759.017464] ? security_file_permission+0xb1/0xe0 [ 759.018590] ? pipe_to_user+0x170/0x170 [ 759.019514] do_splice_to+0x10e/0x160 [ 759.020414] splice_direct_to_actor+0x2fe/0x980 [ 759.021505] ? pipe_to_sendpage+0x380/0x380 [ 759.022509] ? do_splice_to+0x160/0x160 [ 759.023428] ? security_file_permission+0xb1/0xe0 [ 759.024565] do_splice_direct+0x1c4/0x290 [ 759.025527] ? splice_direct_to_actor+0x980/0x980 [ 759.026642] ? avc_policy_seqno+0x9/0x70 [ 759.027595] ? security_file_permission+0xb1/0xe0 [ 759.028735] do_sendfile+0x553/0x11e0 [ 759.029637] ? do_pwritev+0x270/0x270 03:13:16 executing program 5: semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4004, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x609800000000, 0x1}, 0x10000, 0x15ad4462, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x0, 0x6, 0xffffffffffffffff, 0xb) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) r0 = semget$private(0x0, 0x4000, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x3, 0x0, 0x1000}, {0x1, 0x7fff, 0x1000}, {0x6, 0x2, 0x800}, {0x3, 0xff00}, {0x4, 0x6468}, {0x0, 0x5, 0x1000}, {0x3, 0x4, 0x1800}, {0x3, 0x9, 0x1800}], 0x8, &(0x7f0000000040)) semctl$SEM_STAT_ANY(r0, 0x2, 0x14, &(0x7f00000010c0)=""/79) semctl$IPC_RMID(r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f0000000100)=[{0x1, 0x9c9, 0x1800}, {0x3, 0xf9a1, 0x800}, {0x3, 0x1ff, 0x800}, {0x1, 0x9, 0x800}, {0x4, 0xe21c}, {0x4, 0x0, 0x800}, {0x1, 0x9}], 0x7, &(0x7f0000000180)={r1, r2+60000000}) r3 = semget$private(0x0, 0x6, 0x0) semop(r3, &(0x7f00000000c0)=[{0x3, 0x0, 0x1800}, {}, {0x2, 0x8, 0x800}, {0x4}], 0x4) semctl$SEM_INFO(r3, 0x5, 0x13, &(0x7f0000000080)=""/101) unshare(0x48020200) [ 759.030525] ? wait_for_completion_io+0x270/0x270 [ 759.031807] ? rcu_read_lock_any_held+0x75/0xa0 [ 759.032885] ? vfs_write+0x354/0xb10 [ 759.033748] __x64_sys_sendfile64+0x1d1/0x210 [ 759.034778] ? __ia32_sys_sendfile+0x220/0x220 [ 759.035835] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 759.037054] ? syscall_enter_from_user_mode+0x1d/0x50 [ 759.038240] do_syscall_64+0x33/0x40 [ 759.039094] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 759.040270] RIP: 0033:0x7fe3014fcb19 [ 759.041133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 759.045375] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 759.047202] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 759.048857] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 759.050497] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 759.052137] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 759.053786] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 03:13:16 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:13:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 16) [ 759.108507] EXT4-fs error (device loop6): ext4_fill_super:4967: inode #2: comm syz-executor.6: iget: special inode unallocated [ 759.110942] EXT4-fs (loop6): get root inode failed [ 759.111614] EXT4-fs (loop6): mount failed [ 759.132817] loop7: detected capacity change from 0 to 16776704 03:13:16 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x8, 0x0, 0x3, 0x4, 0x40}, 0x0, 0x9, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') getdents(0xffffffffffffffff, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x80002010}) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) unshare(0x48020200) [ 759.176033] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue 03:13:16 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f0000000000000400", 0x1c, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) [ 759.199442] FAULT_INJECTION: forcing a failure. [ 759.199442] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 759.201032] CPU: 0 PID: 6805 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 759.201895] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 759.202939] Call Trace: [ 759.203266] dump_stack+0x107/0x167 [ 759.203764] should_fail.cold+0x5/0xa [ 759.204246] __alloc_pages_nodemask+0x182/0x600 [ 759.204848] ? xa_load+0x12d/0x2c0 [ 759.205299] ? lock_downgrade+0x6d0/0x6d0 [ 759.205830] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 759.206603] alloc_pages_current+0x187/0x280 [ 759.207158] __page_cache_alloc+0x2d2/0x360 [ 759.207722] page_cache_ra_unbounded+0x207/0x6f0 [ 759.208324] ? read_pages+0xbc0/0xbc0 [ 759.208818] ? __lock_page_or_retry+0x4e0/0x4e0 [ 759.209424] ondemand_readahead+0x8e5/0x1150 [ 759.209983] page_cache_sync_ra+0x138/0x170 [ 759.210533] generic_file_buffered_read+0xc8e/0x2920 [ 759.211181] ? pagecache_get_page+0xc80/0xc80 [ 759.211747] ? kasan_save_stack+0x32/0x40 [ 759.212271] ? do_splice_direct+0x1c4/0x290 [ 759.212831] ? do_sendfile+0x553/0x11e0 [ 759.213326] ? __x64_sys_sendfile64+0x1d1/0x210 [ 759.213917] ? do_syscall_64+0x33/0x40 [ 759.214418] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 759.215080] ? perf_trace_lock+0xac/0x490 [ 759.215610] generic_file_read_iter+0x33f/0x490 [ 759.216193] ? __fsnotify_parent+0x47a/0xb10 [ 759.216769] ext4_file_read_iter+0x184/0x4c0 [ 759.217323] generic_file_splice_read+0x455/0x6d0 [ 759.217936] ? pipe_to_user+0x170/0x170 [ 759.218460] ? fsnotify_perm.part.0+0x22d/0x620 [ 759.219049] ? security_file_permission+0xb1/0xe0 [ 759.219731] ? pipe_to_user+0x170/0x170 [ 759.220358] do_splice_to+0x10e/0x160 [ 759.220970] splice_direct_to_actor+0x2fe/0x980 [ 759.221707] ? pipe_to_sendpage+0x380/0x380 [ 759.222385] ? do_splice_to+0x160/0x160 [ 759.223013] ? security_file_permission+0xb1/0xe0 [ 759.223781] do_splice_direct+0x1c4/0x290 [ 759.224438] ? splice_direct_to_actor+0x980/0x980 [ 759.225191] ? avc_policy_seqno+0x9/0x70 [ 759.225831] ? security_file_permission+0xb1/0xe0 [ 759.226604] do_sendfile+0x553/0x11e0 [ 759.227217] ? do_pwritev+0x270/0x270 [ 759.227815] ? wait_for_completion_io+0x270/0x270 [ 759.228585] ? rcu_read_lock_any_held+0x75/0xa0 [ 759.229313] ? vfs_write+0x354/0xb10 [ 759.229903] __x64_sys_sendfile64+0x1d1/0x210 [ 759.230607] ? __ia32_sys_sendfile+0x220/0x220 [ 759.231330] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 759.232154] ? syscall_enter_from_user_mode+0x1d/0x50 [ 759.232975] do_syscall_64+0x33/0x40 [ 759.233560] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 759.234369] RIP: 0033:0x7fe3014fcb19 [ 759.234952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 759.237825] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 759.239014] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 759.240126] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 759.241253] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 759.242375] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 759.243490] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 759.244753] hpet: Lost 2 RTC interrupts 03:13:16 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:13:16 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r0]) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000440)=[0x0]) syz_io_uring_submit(0x0, 0x0, 0x0, 0xe466) syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000005c0)=[{0x0, 0x49}], 0x1}, 0x0, 0x4084}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x3) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(r4, &(0x7f0000000340)=""/210, 0xd2) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x100000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x4) syz_io_uring_submit(r5, 0x0, &(0x7f0000000580)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x77359400}}, 0x5) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 03:13:16 executing program 3: timer_create(0x0, 0x0, &(0x7f0000000040)) r0 = fork() tkill(r0, 0x26) timer_create(0x5, &(0x7f00000010c0)={0x0, 0x23, 0x1, @tid=r0}, &(0x7f0000001100)=0x0) timer_getoverrun(r1) timer_settime(r1, 0x0, &(0x7f0000001340)={{0x77359400}, {0x77359400}}, 0x0) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r2) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={r0, r2, 0xee01}, 0xc) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1000) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000140)='./file0\x00', 0x200, 0x0, 0x0, {0x0, r7}}, 0x4) timer_settime(r1, 0x0, &(0x7f00000000c0), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@local, @in6=@initdev}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xe8) timer_settime(0x0, 0x0, &(0x7f0000000400), 0x0) [ 759.304251] loop6: detected capacity change from 0 to 2102784 [ 759.352934] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 759.353827] EXT4-fs (loop6): mount failed [ 759.426835] loop7: detected capacity change from 0 to 262144 [ 759.462614] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 759.491019] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 759.602869] loop7: detected capacity change from 0 to 262144 [ 759.607296] audit: type=1326 audit(1748056396.859:40): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6820 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6c237b19 code=0x7ffc0000 [ 759.610286] audit: type=1326 audit(1748056396.859:41): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6820 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6c237b19 code=0x7ffc0000 [ 759.633720] audit: type=1326 audit(1748056396.880:42): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6820 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcf6c237b19 code=0x7ffc0000 [ 759.636786] audit: type=1326 audit(1748056396.886:43): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6820 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6c237b19 code=0x7ffc0000 [ 759.639598] audit: type=1326 audit(1748056396.886:44): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6820 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6c237b19 code=0x7ffc0000 [ 759.642534] audit: type=1326 audit(1748056396.887:45): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6820 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7fcf6c237b19 code=0x7ffc0000 [ 759.654428] audit: type=1326 audit(1748056396.906:46): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6820 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6c237b19 code=0x7ffc0000 [ 759.658406] audit: type=1326 audit(1748056396.906:47): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6820 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6c237b19 code=0x7ffc0000 [ 759.664058] audit: type=1326 audit(1748056396.908:48): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6835 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6c237b19 code=0x7ffc0000 03:13:31 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40091) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8050) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000940)=ANY=[@ANYBLOB="95b50000018fd33a0000000000000000180000", @ANYRES32=r0, @ANYBLOB="04a500006ccf5e00a30878ffff75db00808ebf8b85b5363cdf1595a0bee6cc6ec57b594af05d2bcaace304ab11b2f0de03bff4371a9012ef1c32b4b5c6366f172a140b3c90f6de5877ef5a6a3a26844c4bc8c82413041c010b22156a4c9a107723a5f2df0884ac7b2d8cf48af5dc01fc3d1d08a58cc865e3f2f712e1a4eabdc0986bd04ce4c790d9de030b3ca0239c52c979afa3e6e8c80f01000eba254f7d13aa0b68306d66d92477fe946e898db0c1"]) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) openat(r3, &(0x7f0000000400)='./file1\x00', 0x0, 0x114) faccessat(r1, &(0x7f0000000000)='./file1\x00', 0xb0) read(r2, &(0x7f00000006c0)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x8e1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) creat(&(0x7f0000000040)='./file1\x00', 0x2) perf_event_open(&(0x7f0000000080)={0x220998a32b054e1b, 0x80, 0x0, 0x1, 0x5, 0x9, 0x0, 0x0, 0x68, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2dd, 0x2, @perf_bp={0x0}, 0x210, 0x80000000, 0x8, 0x0, 0x0, 0x9, 0x1, 0x0, 0x81, 0x0, 0xbe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0xb81, 0x9) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 03:13:31 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {r0}}, './file0\x00'}) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000980)=[{{&(0x7f0000000700), 0x6e, &(0x7f0000000900)=[{&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/147, 0x93}], 0x2, &(0x7f0000000940)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x1, 0x80000140, &(0x7f00000009c0)={0x0, 0x989680}) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d26bd701c53e0e80000000000"], 0x14}}, 0x0) read(r3, &(0x7f0000000080)=""/65, 0x41) timer_gettime(r2, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r6, r7+10000000}, {0x0, 0x3938700}}, &(0x7f0000000500)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:13:31 executing program 5: unshare(0x2c060e00) r0 = semget$private(0x0, 0x4, 0x100) semop(r0, &(0x7f00000000c0)=[{0x4, 0x20, 0x800}, {0x4, 0x4, 0x1000}, {0x3, 0xdc, 0x1000}, {0x4, 0x9, 0x1800}, {0x1, 0x8}, {0x2, 0x200}, {0x0, 0x8, 0x1000}, {0x1, 0x7, 0x1000}], 0x8) r1 = semget$private(0x0, 0x6, 0x0) semctl$IPC_SET(r1, 0x0, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000140)) unshare(0x800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x48020200) semctl$SEM_INFO(r0, 0x0, 0x13, &(0x7f0000000000)=""/24) 03:13:31 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:13:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 17) 03:13:31 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f0000000000000400", 0x1c, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 03:13:31 executing program 4: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:13:31 executing program 7: r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r0) syz_genetlink_get_family_id$SEG6(&(0x7f0000003180), 0xffffffffffffffff) [ 774.637950] FAULT_INJECTION: forcing a failure. [ 774.637950] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 774.639412] CPU: 0 PID: 6854 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 774.640406] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 774.641648] Call Trace: [ 774.641972] dump_stack+0x107/0x167 [ 774.642498] should_fail.cold+0x5/0xa [ 774.643053] __alloc_pages_nodemask+0x182/0x600 [ 774.643722] ? xa_load+0x12d/0x2c0 [ 774.644247] ? lock_downgrade+0x6d0/0x6d0 [ 774.644859] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 774.645731] alloc_pages_current+0x187/0x280 [ 774.646372] __page_cache_alloc+0x2d2/0x360 [ 774.647005] page_cache_ra_unbounded+0x207/0x6f0 [ 774.647698] ? read_pages+0xbc0/0xbc0 [ 774.648251] ? __lock_page_or_retry+0x4e0/0x4e0 [ 774.648932] ondemand_readahead+0x8e5/0x1150 [ 774.649573] page_cache_sync_ra+0x138/0x170 [ 774.650195] generic_file_buffered_read+0xc8e/0x2920 [ 774.650937] ? pagecache_get_page+0xc80/0xc80 [ 774.651585] ? kasan_save_stack+0x32/0x40 [ 774.652183] ? do_splice_direct+0x1c4/0x290 [ 774.652809] ? do_sendfile+0x553/0x11e0 [ 774.653377] ? __x64_sys_sendfile64+0x1d1/0x210 [ 774.654041] ? do_syscall_64+0x33/0x40 [ 774.654602] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 774.655363] ? perf_trace_lock+0xac/0x490 [ 774.655965] generic_file_read_iter+0x33f/0x490 [ 774.656639] ? __fsnotify_parent+0x47a/0xb10 [ 774.657277] ext4_file_read_iter+0x184/0x4c0 [ 774.657910] generic_file_splice_read+0x455/0x6d0 [ 774.658606] ? pipe_to_user+0x170/0x170 [ 774.659184] ? fsnotify_perm.part.0+0x22d/0x620 [ 774.659864] ? security_file_permission+0xb1/0xe0 [ 774.660574] ? pipe_to_user+0x170/0x170 [ 774.661162] do_splice_to+0x10e/0x160 [ 774.661712] splice_direct_to_actor+0x2fe/0x980 [ 774.662380] ? pipe_to_sendpage+0x380/0x380 [ 774.663000] ? do_splice_to+0x160/0x160 [ 774.663575] ? security_file_permission+0xb1/0xe0 [ 774.664277] do_splice_direct+0x1c4/0x290 [ 774.664880] ? splice_direct_to_actor+0x980/0x980 [ 774.665565] ? avc_policy_seqno+0x9/0x70 [ 774.666155] ? security_file_permission+0xb1/0xe0 [ 774.666849] do_sendfile+0x553/0x11e0 [ 774.667407] ? do_pwritev+0x270/0x270 [ 774.667961] ? wait_for_completion_io+0x270/0x270 [ 774.668669] ? rcu_read_lock_any_held+0x75/0xa0 [ 774.669337] ? vfs_write+0x354/0xb10 [ 774.669877] __x64_sys_sendfile64+0x1d1/0x210 [ 774.670528] ? __ia32_sys_sendfile+0x220/0x220 [ 774.671191] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 774.671939] ? syscall_enter_from_user_mode+0x1d/0x50 [ 774.672695] do_syscall_64+0x33/0x40 [ 774.673239] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 774.673978] RIP: 0033:0x7fe3014fcb19 [ 774.674515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 774.677176] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 774.678275] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 774.679293] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 774.680309] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 774.681339] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 774.682366] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 774.683580] hpet_rtc_timer_reinit: 16 callbacks suppressed [ 774.683585] hpet: Lost 2 RTC interrupts [ 774.685322] loop6: detected capacity change from 0 to 2102784 [ 774.691248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6862 comm=syz-executor.3 03:13:31 executing program 7: syz_emit_ethernet(0x137, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd6096153f01013afffe880000000000000000000000000001ff02000000000000000000000000000189009078000000000000000000000000000000000000000000000000000000000000000000000000021b1a083dfc6dc97fb93886715c5fa11096f8135d9e2481c4479149360e9c11c92e7caf3519c71f26f6337998a320a7e0ffccba4eefc65e7b7cafffc726466ffd5b94e8072d20d6390bd90084ea8da6fa3179b92e560c5a29f01633c03509541cce3cdac5b928bb3c632d5e1131065b665a8ac27a4f0cc49fef73536873e0c61bbb1bbb79101c5322be2546875c35804a54e0a3f7df38b5af9485bdce15b3693fa58f3fafcd2100a28dd6c3e3d84ee9d7ef699cf0c6a68881122b088f094a1dbb1430f11cd6081a7802a352d61d43369a64cbab0eb64ef620"], 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@canfd={0xd, {{0x4, 0x1, 0x1}, 0x20, 0x3, 0x0, 0x0, "b3bdb0e97cb07dd0d3b068ce94e5d38fcf6c87f00173258f07c5c79543525e01274dd319228e9825e38fef93cae54605c6d6f3013b4a45262c212fa60cb788b6"}}}}, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0xbd, 0x1, 0x0, 0x0, 0x7, 0x20404, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7e4, 0x0, @perf_config_ext={0xfffffffffffffffb, 0x9}, 0x51064, 0x8, 0x1, 0x0, 0x0, 0x10000, 0x5, 0x0, 0xb76, 0x0, 0xddf}, r0, 0x2, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @val={@val={0x9100, 0x7, 0x0, 0x1}, {0x8100, 0x2, 0x1, 0x4}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @local, @broadcast, @remote, @broadcast}}}}, &(0x7f0000000200)={0x1, 0x2, [0x70c, 0x3f9, 0xc1f, 0x204]}) 03:13:31 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 774.733842] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 774.793279] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 774.794383] EXT4-fs (loop6): mount failed [ 774.837853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.839233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.854127] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 03:13:32 executing program 7: io_destroy(0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000180021"], 0x1c}}, 0x0) recvmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000100), 0x1, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000180021"], 0x1c}}, 0x0) recvmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) io_submit(0x0, 0x3, &(0x7f0000000440)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x1, r0, &(0x7f0000000200)="d3a9cffdb07717b0944420a56a386be3ab883149ea54cc38513b976f5a9fe3f5c88d6458dbf85d0f7f2153407f53c30d28fd9f0608e7edae7b5739d271ad47cb371a9556786405485fe03e56dcd7879561f774f0353ec977a7f5750e8cc71b43f48bfaeff4d9e387690afe94834f0f15c23518c6100ccc4eee6c9d63a072a120b5aa9d36aa46914b94f4ee17b56f37da3da4553401559373568dbba3f3c7b463ceacf9dfedf4ef0cac1d5485acc76425abff48d1acbf152ebf69ffc2bb6ac3c2fa872bec2fba2c15e6a050ecaf56a6611a5ec7641797796aedea809c9fd1de9896d09ee95b65e1ec5142a4a941f4d2fec79f408973", 0xf5, 0x1, 0x0, 0x2, r1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x7ff, r2, &(0x7f0000000300)="8696e5624168ebe13e720e2d97e04214a1e4a493c03599ec43bcbcfe36682a5160000dc27246a3051ee819ea731e15f06cc29d4830bacd9ee517d9586604ebf3679a719b116fb58f6b85804a8875ad55dcfdefc489bc8e0b6cfbc50eb36f573de91e23be414a8163668ab9996539eee9560290e8843420b4839dce6277a309ae808f6fcbabab0cbfcac5a70afc52ba2df5d49689703df80b8008efa7d6819e96246a8c362beb52a2d48bb322b0bf5ed81488ec822d4a7b3031df358f8d2cee951c1c75815f546204fce9fa1e06a9", 0xce, 0x2, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5d76706e7819feff, 0x2, r3, &(0x7f00000005c0)="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", 0x1000, 0x7, 0x0, 0x1, r5}]) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x5, 0x0, 0x0, 0x1, [@generic='H']}]}, 0x24}}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) [ 774.892187] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 774.909320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6853 comm=syz-executor.3 [ 774.956626] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 03:13:45 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x3, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r2 = getpid() munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) getpgid(r2) fallocate(r3, 0x0, 0x0, 0x8800000) 03:13:45 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)) write$binfmt_elf64(r1, 0x0, 0x14b0) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x89, 0x2) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000040)) 03:13:45 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r2, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0xffffffff}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x2, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x0, r0, 0x3) r3 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r3, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2, 0x0, 0x8}, 0x6a}}, 0x18) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000440)=[{0x0, 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000000000000400", 0x1c, 0x2100}], 0x200c040, &(0x7f0000000200)=ANY=[@ANYBLOB="008a26026809b7b170705ec8cdf8adc80000031a7351e4dc"]) getpid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0xfffffffffffffe01, 0x480240) fstat(r4, &(0x7f0000000380)) r5 = eventfd2(0x7fff, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r5, 0x8030942b, &(0x7f0000000180)={0x401, {0x36, 0xfff, 0x3, 0xff, 0x5}}) 03:13:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100001000000000000037008000080003005e507e9c664a167019b774f4b5a2a01c15da0b705cfa8a5ef9a068b73708462d0b729ce3a8a4c2e346136c61f49db271c13512a5929d03cb31d9c3da34969b0399690e8ad02de1d5a229756c0d8ff0d333ac9415798fa0b28c21f6ccb9708c7799", @ANYRES32=r2, @ANYBLOB="08002600000000000800570001010000"], 0x2c}}, 0x0) 03:13:45 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f0000000000000400", 0x1c, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 03:13:45 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:13:45 executing program 1: syz_io_uring_setup(0x5f6e, &(0x7f0000000840)={0x0, 0xdc7, 0x1, 0x0, 0x282}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f00000008c0)=0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000980)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0xff, 0xfffffffb, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x8000, 0x7, 0x81}}) syz_io_uring_submit(0x0, r0, &(0x7f0000000ac0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r1, 0x80, &(0x7f0000000a40)=@can={0x1d, r2}, 0x0, 0x0, 0x1}, 0x0) syz_read_part_table(0x0, 0xa, &(0x7f0000000700)=[{&(0x7f0000000000)="6ed1f59b3a6747b12563a54c60fa9082351200a4b8097b6e1e320d3e2b357ec597338822d8eb378de5c4fd3e929b883f55044d6988a54663672da9f594bf1ee7ce4d3197dcb869dec962e09793f694f6a8959f53c8fdf8aab51f29e3bba2900f1100df8b604544133a29708a434244cf895b4103b33fc91a2a8d9e820686c12e8b1df3aa0e09535b5988f40eaf2842a24b43550008eff07cec5bb6f266e4ec0ff0a3cc4fcd17bfacd372f44ce98584137840f6064db298992ca318e10759a08c3173db98a4967032eb", 0xc9, 0xfffffffffffffea0}, {&(0x7f0000000100)="456e10fe9e202fa95a83f4db234e336534204db238851183df94fb98a2d55156f9c5e7e12e20a2bb6473641ec4fdd9439f0d22aff2ba7497762f0dfb9659ac2d66e4e1c19f64467a0d7141d6da57023f17c4cda72ad4944eca70c3c74c8ecee992266df55ef55ecb46d0222110d213b4eb7eac8b01640f9c69dbc3eb90740bb14dc746473db43e510f10c257f70751b1c25c595aa56b0418632c1312752b00a820f31582d102ee1d5160cf54612519527f69837d36eebb6fcccf19646b1266947bbdeba331dff8c00094d4e427d0d09dfdb13ac6b0afb2", 0xd7, 0xfffffffffffffff7}, {&(0x7f0000000200)="ce71a2de83455b3a2789feaf7ea0cb1f8c61688a611d4dfeab66c0cd438085205f200fe05d03a296625ac61d856614bc1aef1cc596e526c34b68b3ece22286bd0d917448c56c2952e6c7799ee86f8e40fe53b50be5205ee7b11ac3527520e32d24caea2b3a7488e4a1409e3f5f4c2d8f6d1c11711bbcb636f61fe5962ac6812f15deab3528cc74d2fe1a4201f603d5a3396a5bdca52141eddddb84eeeb94", 0x9e, 0x8000}, {&(0x7f0000000800)="9a8d41a532bc8510461994796cabe3019e4ca093f769f8ab09bb3dcb788cb2a92f4de2f2aa45fe4ed993", 0x2a, 0x3ff}, {&(0x7f0000000300)="b8daa02458af8fa1f8c5cdebabe0e34f2eeab7e7b29daa434de59cb40511768cb7958b7d7ac624989bf55befe6da926db044573e7e9667cbe31384dc07f4cf9f7c6c59880bbfa37e5f557c921800a053856c944ceb372b942ab27b6869511252bfa5fc1261db661cab0b6c08204dd78da73778a490ae7153d5cc3d47bab9b913", 0x80, 0x1}, {&(0x7f0000000380)="dcf396ede1aefe02654152a6f4c551b988c495fcd55fcfd588900aed1aa67f2472fd7d1baf924a6611baebfa09e55e2cb54f6290e4ba3a4f5467fab3e5d74859cf69214c8afc48dda56042f949ecc4d7f4a7e670778f4dada1c99a3d3c8b69b2762afa5618d0f15e0f108d766e4e6c38c2cd88e5f5", 0x75}, {&(0x7f0000000400)="3f3913e7e1ff014ddff1a59b8650dbfbb0f66c637a1fa551cf50ba7c4d2bf2d6475cbd4ef70a942cd9694463869c79ec8384cb78e7f5f44f015bebf2f69ac456cc6a7f3f88bff99556def51121004cc0bbad241222e8e3d3b281d36f6c229ed0005e51cba6511555ad48611212e7948a24e3317863cee6d21cb7d35c8bd5d4b52f80fb4c40c577abc18d15f4e09dd61a5991aafe023e5b214ffefbfdadcc0120ea754b7118a8d47559", 0xa9, 0x9}, {&(0x7f00000004c0)="7280bb3c3f621a42b294b90db1796ed7dd2b6b1c3947c3aa5650e48c351be0989b54668857231e2c", 0x28, 0x8000000000000}, {&(0x7f0000000500)="f2fbbf9111aaec18324ee167da9c89b9f820933b6c71d58728542ef524a135d09b4ea179bd0dc1c1f3ff8fe2129f420fb7214c5bddf30032927962d5c9e6444b05273ba4792be47a55098ed02592cd6c03688c8300d7bd6be2af263071567b30d53324c06cdcb4051a40d88c6e9bcbb958d2e040f4dc261f76cafba070186b3cc50ae8b6cf7e9264239e57da86829d0895188cedca5bbebfedcaa8721104eb07ca145829d6b9f74a400dcf2c1333c5e8c730534954b2b65cb5714df65e251835295e57baee394f9f4f8219614d0b21", 0xcf, 0x400}, {&(0x7f0000000600)="5525dde069894ee7d8e74bce2263ff6b46b5e9f112688c9cbff106850b650f09f764a0f6d1777aca427cee11ffdb30adc070e166195ac02258b790bb67717ac1a1c359cf82811cad2cf69eaeeafebc3b98e34029fe0aff6186eab0325d784711155bf942c8eae79cdf204299e5d93bddd8f3bb5c1eb5ab1c40ad0dab1b0979911c1ea3cc0cb1fc80e32d62e29cd0c91b7af33d9c9ec0c2b4f3a3bc0ab6b9feb67aba5181cba8afb29b58d42d20e581c1a6c7a6f7506784cfb7e5b03a851f390fb14e912d21e240ec009fadb8c7349f21458a4494f596d063eebf08a82b32a4ea41dad125f97eb304708729", 0xeb, 0x4}]) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r3, 0x8) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r1) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000000bc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000001500)=ANY=[@ANYBLOB="4800ef52e06b9bac52bd08f8f83985c2a225bd327991a99c3d7d1e5c3ea21713e4875ce26809c43d07e692d6d144708f0d268e0ca6335e67657d28a847f85d08002e0bffd0db535897ef739f2ed78740210000000000", @ANYRES16=r4, @ANYBLOB="00022dbd7000fedbdf258600000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900b30700006400000008002201ac00000005001801010000000800a1003f0000000800a100ff030000"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4040800) [ 788.302096] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 03:13:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 18) [ 788.322396] loop6: detected capacity change from 0 to 2102784 [ 788.332380] FAULT_INJECTION: forcing a failure. [ 788.332380] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 788.334260] CPU: 0 PID: 6901 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 788.335324] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 788.336605] Call Trace: [ 788.337046] dump_stack+0x107/0x167 [ 788.337607] should_fail.cold+0x5/0xa [ 788.338201] __alloc_pages_nodemask+0x182/0x600 [ 788.338907] ? xa_load+0x12d/0x2c0 [ 788.339447] ? lock_downgrade+0x6d0/0x6d0 [ 788.340077] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 788.341012] alloc_pages_current+0x187/0x280 [ 788.341691] __page_cache_alloc+0x2d2/0x360 [ 788.342360] page_cache_ra_unbounded+0x207/0x6f0 [ 788.343240] ? read_pages+0xbc0/0xbc0 [ 788.343812] ? __lock_page_or_retry+0x4e0/0x4e0 [ 788.344562] ondemand_readahead+0x8e5/0x1150 [ 788.345372] page_cache_sync_ra+0x138/0x170 [ 788.346037] generic_file_buffered_read+0xc8e/0x2920 [ 788.346977] ? pagecache_get_page+0xc80/0xc80 [ 788.347647] ? kasan_save_stack+0x32/0x40 [ 788.348391] ? do_splice_direct+0x1c4/0x290 [ 788.349053] ? do_sendfile+0x553/0x11e0 [ 788.349673] ? __x64_sys_sendfile64+0x1d1/0x210 [ 788.350378] ? do_syscall_64+0x33/0x40 [ 788.350963] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 788.351765] ? perf_trace_lock+0xac/0x490 [ 788.352398] generic_file_read_iter+0x33f/0x490 [ 788.353110] ? __fsnotify_parent+0x47a/0xb10 [ 788.353781] ext4_file_read_iter+0x184/0x4c0 [ 788.354448] generic_file_splice_read+0x455/0x6d0 [ 788.355188] ? pipe_to_user+0x170/0x170 [ 788.355805] ? fsnotify_perm.part.0+0x22d/0x620 [ 788.356652] ? security_file_permission+0xb1/0xe0 [ 788.357396] ? pipe_to_user+0x170/0x170 [ 788.357997] do_splice_to+0x10e/0x160 [ 788.358572] splice_direct_to_actor+0x2fe/0x980 [ 788.359287] ? pipe_to_sendpage+0x380/0x380 [ 788.359950] ? do_splice_to+0x160/0x160 [ 788.360555] ? security_file_permission+0xb1/0xe0 [ 788.361306] do_splice_direct+0x1c4/0x290 [ 788.361936] ? splice_direct_to_actor+0x980/0x980 [ 788.362663] ? avc_policy_seqno+0x9/0x70 [ 788.363285] ? security_file_permission+0xb1/0xe0 [ 788.364158] do_sendfile+0x553/0x11e0 [ 788.364756] ? do_pwritev+0x270/0x270 [ 788.365452] ? wait_for_completion_io+0x270/0x270 [ 788.366227] ? rcu_read_lock_any_held+0x75/0xa0 [ 788.367078] ? vfs_write+0x354/0xb10 [ 788.367688] __x64_sys_sendfile64+0x1d1/0x210 [ 788.368374] ? __ia32_sys_sendfile+0x220/0x220 [ 788.369094] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 788.369892] ? syscall_enter_from_user_mode+0x1d/0x50 [ 788.370685] do_syscall_64+0x33/0x40 [ 788.371253] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 788.372038] RIP: 0033:0x7fe3014fcb19 [ 788.372601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 788.375385] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 788.376537] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 788.377628] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 788.378704] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 788.379780] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 788.380866] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 788.382087] hpet: Lost 2 RTC interrupts 03:13:45 executing program 4: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/177, 0xb1}], 0x1) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r2, 0x8) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) io_uring_enter(r2, 0x79a3, 0x5cbc, 0x2, &(0x7f0000000280)={[0x3]}, 0x8) connect$802154_dgram(r1, &(0x7f0000000080)={0x24, @short}, 0x14) sendmmsg$sock(r1, &(0x7f00000021c0)=[{{0x0, 0x2303, 0x0}}], 0x324, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x80, 0x5c, 0x3, 0xff, 0x0, 0x4, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x400, 0x101, 0x67a9, 0x3, 0x9d, 0x100, 0x100, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xe, r0, 0x3) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000240)={0x7, 'veth1_virt_wifi\x00', {0x2}, 0xa8dd}) [ 788.395172] loop1: detected capacity change from 0 to 16777216 03:13:45 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000009c0)={0x0, 0x0}) setpgid(0x0, r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRES16], 0xfdef) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r3 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000300)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x391202, 0x0) r4 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r4, 0x4008941a, &(0x7f0000000300)) r5 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x40}, 0x18) fadvise64(0xffffffffffffffff, 0x0, 0xfff, 0x4) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}}, 0x108) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)="548a8d9a4eb514d1cda073f2c1c4b88720b7ccbc0801bfc9a6bcf58e2c56d94930fc6dc61d8caa6b1ca7a40c94e8200a47c5313f694e56fe06a2897d60b3487d704a5a2ff2a8e3107a298f89a7086dcba940e89afaeba8b73dbc930547bfbd0f496ae81baa3b1a7f15304fe77645a8ba38ae0f629568080fc9c7af156d27c62b45bdc0eca5174e44420834f191b5b52ad0279c7c487e3ebaea05469d874c3cf5c15f8ac640bbe2c85dcf0f07003ebb5f1a24b9ffa6b6f702d23d34d5ad378b406d60323941b4818ee8291414cc918a701080052604e878e68614f884987a3c9f590975a846c9", 0xe6}, 0x68) preadv2(r5, 0x0, 0x0, 0x0, 0x0, 0x0) openat(r5, &(0x7f0000000100)='./file0\x00', 0x600100, 0x0) fstat(r3, &(0x7f0000000200)) [ 788.471751] loop3: detected capacity change from 0 to 16896 [ 788.480272] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 788.481694] EXT4-fs (loop6): mount failed 03:13:45 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x3, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r2 = getpid() munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) getpgid(r2) fallocate(r3, 0x0, 0x0, 0x8800000) 03:13:45 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x60) flock(0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x80, 0x1}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r1 = inotify_init() openat$cgroup_ro(r0, &(0x7f0000000200)='blkio.bfq.empty_time\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r2, 0x8) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) r3 = socket$netlink(0x10, 0x3, 0x0) getpeername$netlink(r3, &(0x7f0000000040), &(0x7f0000000080)=0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000240)=0x2, 0xfffffffffffffe3b) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000180)) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x203, 0x273}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:13:45 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:13:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 19) [ 788.596191] loop3: detected capacity change from 0 to 16896 [ 788.604773] blktrace: Concurrent blktraces are not allowed on loop2 03:13:45 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x0, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:13:45 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) [ 788.688820] FAULT_INJECTION: forcing a failure. [ 788.688820] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 788.690296] CPU: 0 PID: 6934 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 788.691117] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 788.692136] Call Trace: [ 788.692475] dump_stack+0x107/0x167 [ 788.692950] should_fail.cold+0x5/0xa [ 788.693435] __alloc_pages_nodemask+0x182/0x600 [ 788.693989] ? xa_load+0x12d/0x2c0 [ 788.694430] ? lock_downgrade+0x6d0/0x6d0 [ 788.694964] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 788.695692] alloc_pages_current+0x187/0x280 [ 788.696213] __page_cache_alloc+0x2d2/0x360 [ 788.696761] page_cache_ra_unbounded+0x207/0x6f0 [ 788.697340] ? read_pages+0xbc0/0xbc0 [ 788.697792] ? __lock_page_or_retry+0x4e0/0x4e0 [ 788.698388] ondemand_readahead+0x8e5/0x1150 [ 788.698936] page_cache_sync_ra+0x138/0x170 [ 788.699449] generic_file_buffered_read+0xc8e/0x2920 [ 788.700069] ? lock_downgrade+0x6d0/0x6d0 [ 788.700571] ? pagecache_get_page+0xc80/0xc80 [ 788.701107] ? trace_hardirqs_on+0x5b/0x180 [ 788.701619] ? finish_task_switch+0x126/0x5d0 [ 788.702163] ? finish_task_switch+0xef/0x5d0 [ 788.702722] ? __switch_to+0x572/0xf70 [ 788.703210] ? __switch_to_asm+0x3a/0x60 [ 788.703767] ? __switch_to_asm+0x34/0x60 [ 788.704250] generic_file_read_iter+0x33f/0x490 [ 788.704815] ? __fsnotify_parent+0x47a/0xb10 [ 788.705348] ext4_file_read_iter+0x184/0x4c0 [ 788.705872] generic_file_splice_read+0x455/0x6d0 [ 788.706450] ? pipe_to_user+0x170/0x170 [ 788.706923] ? fsnotify_perm.part.0+0x22d/0x620 [ 788.707499] ? security_file_permission+0xb1/0xe0 [ 788.708104] ? pipe_to_user+0x170/0x170 [ 788.708597] do_splice_to+0x10e/0x160 [ 788.709072] splice_direct_to_actor+0x2fe/0x980 [ 788.709628] ? pipe_to_sendpage+0x380/0x380 [ 788.710140] ? do_splice_to+0x160/0x160 [ 788.710626] ? security_file_permission+0xb1/0xe0 [ 788.711210] do_splice_direct+0x1c4/0x290 [ 788.711745] ? splice_direct_to_actor+0x980/0x980 [ 788.712315] ? avc_policy_seqno+0x9/0x70 [ 788.712808] ? security_file_permission+0xb1/0xe0 [ 788.713389] do_sendfile+0x553/0x11e0 [ 788.713846] ? do_pwritev+0x270/0x270 [ 788.714309] ? wait_for_completion_io+0x270/0x270 [ 788.714887] ? rcu_read_lock_any_held+0x75/0xa0 [ 788.715433] ? vfs_write+0x354/0xb10 [ 788.715901] __x64_sys_sendfile64+0x1d1/0x210 [ 788.716430] ? __ia32_sys_sendfile+0x220/0x220 [ 788.717004] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 788.717623] ? syscall_enter_from_user_mode+0x1d/0x50 [ 788.718251] do_syscall_64+0x33/0x40 [ 788.718719] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 788.719332] RIP: 0033:0x7fe3014fcb19 [ 788.719805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 788.722097] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 788.723014] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 788.723887] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 788.724753] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 788.725655] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 788.726504] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 788.727737] hpet: Lost 1 RTC interrupts [ 788.740986] loop6: detected capacity change from 0 to 2102784 [ 788.781892] EXT4-fs error (device loop6): ext4_fill_super:4967: inode #2: comm syz-executor.6: iget: special inode unallocated [ 788.784844] EXT4-fs (loop6): get root inode failed [ 788.786013] EXT4-fs (loop6): mount failed 03:14:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 20) 03:14:00 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="24000000100001001d0000000000abb7ba8ca237621ddf85c40d009600005a0005004000000000000500008048000000ae346500040000000000008c8ab2631be7f3730baa34cf429263a3010000005645fc5b40843984c65a4f45997b47edac086f507f5e698625f820236fe298de3a716bc17cb25fe0e7602cd2de491e1232e53d9450d8acde98deb5310a184c387fa6a2ee3cb80efe7170c577bf08ddcdd6340344c6ab3d1e988e52ff5679bc8e2fd775"], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000b40)=ANY=[@ANYBLOB="95b50000018fd33a76f1d2328800000018000000", @ANYRES32=r0, @ANYBLOB="04a500006ccf5e00a30878ffff75db00808ebf8b85b5363cdf1595a0bee6cc6ec57b594ad75d4ecaace304ab11b2f0de03bff4371a9012ef1c32b4b5c6366f172a140b3c90fe1b3177ef5a6a3a26844c4bc8c82413041c010b22156a4c9a107723a501fc3d1d08a58cc865e3f2f712e1a4eabdc0986bd04ce4c790d9de030b3ca0239c52c979afa3e6e8c80f01000eba254f7d13aa0b68306d66d92477fe946e898db0c1000000000000000000000000834a46ab6154582e507e35c9ece6a966ffb2e54f4ffa5a8af648eaa05d222f111dcd08fd7e492a59b4434f173ed19b5430e492d21d1e27032ad500000efdb9476d2643e2f774fa89a209a2d1ce4d22bb655f868d54993677fa7547fed03262374b5f9a94c678facfde09b6c70921ba908d387c739b722327f7fdbacef3bf7f959cea53bd89c7633a996d15b55df8912583cedb2a76e8945edeb2dd39c874e83bb606ae3d5e04fb0ff4edfa307cb761ea8557444ba05a7dd9b91dbd45efe7736ded57c96ea56b9dd171b916094c1bf2f11b139848d24cc01f3fcf6bae455431f65c002dc5def8e72dcb9d0c0af5efe4aa603bde2d49a272114a36"]) r3 = fsmount(0xffffffffffffffff, 0x1, 0x8d) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) syz_io_uring_setup(0x262, &(0x7f0000000500)={0x0, 0xe58e, 0x38, 0x1, 0x2a1, 0x0, r4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) openat(r5, &(0x7f0000000100)='./file1\x00', 0x107703, 0x13b) openat(r5, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) faccessat(r1, &(0x7f0000000000)='./file1\x00', 0xb0) read(r2, &(0x7f00000006c0)=""/135, 0x87) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90, 0x0, 0x80000000}, 0x0, 0xfffffffffeffffff, 0xffffffffffffffff, 0xa) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0x0, 0x4) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r6, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) [ 803.345408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=6948 comm=syz-executor.5 03:14:00 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 03:14:00 executing program 4: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/4\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x806c2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, @out_args}, './file1\x00'}) sendfile(r3, r1, &(0x7f0000000380)=0xffffffff00000000, 0x400) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000001f0000000200"/20], 0x14}}, 0x0) r4 = syz_io_uring_setup(0x277f, &(0x7f0000000080)={0x0, 0x5276, 0x8, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000400)=0x0) eventfd(0x0) syz_io_uring_setup(0xabb, &(0x7f0000000200)={0x0, 0xd992, 0x20, 0x1, 0x29d, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000300)) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4) io_uring_enter(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0) mq_timedsend(r7, 0x0, 0xff7f, 0x0, 0x0) r8 = getpid() syz_open_procfs(r8, &(0x7f0000000100)='net/vlan/vlan1\x00') ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r7, @out_args}, './file1\x00'}) fcntl$setstatus(r2, 0x4, 0x6400) write(r2, &(0x7f0000001200), 0xffffff45) 03:14:00 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd75656"]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000010080000000000000000009600e909000500"/36], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x7, 0xb1, 0x20, 0x40, 0x0, 0xffff, 0x80006, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f00000002c0), 0x8}, 0x10210, 0x1000, 0x2d, 0x7, 0x7fff, 0xfffffffa, 0x1, 0x0, 0x8, 0x0, 0x100000001}, 0x0, 0xe, 0xffffffffffffffff, 0xf) fstat(r0, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x105600, 0x210) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0x4) sendmsg$nl_generic(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a0011cd"], 0x1c}}, 0x0) readv(r6, &(0x7f0000000400)=[{&(0x7f0000000180)=""/43, 0x2b}], 0x1) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 03:14:00 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0xb, 0x7) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000040)={'dummy0\x00', {0x2, 0x0, @empty}}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x40a100, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000000018000000", @ANYRES32=r2, @ANYBLOB='\x00\b\x00\x00\x00\x00\x00\x00./file0\x00']) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x14, &(0x7f0000000140)=ANY=[]) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000002c0)={0x0, 0x2, 0x1}) flock(r4, 0x8) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000280)='-^.&$\x00') sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x24, 0x18, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @nested={0x8, 0x8, 0x0, 0x1, [@typed={0x4}]}]}, 0x24}}, 0x0) lseek(r3, 0xfffffffffffffff7, 0x1) socket$unix(0x1, 0x5, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x14e4, {{0x2, 0x4e21, @local}}}, 0x88) 03:14:00 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x0, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:14:00 executing program 7: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x82100, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000100)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r1, 0x8) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000b, 0x12, r1, 0xe78) [ 803.371141] FAULT_INJECTION: forcing a failure. [ 803.371141] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 803.372994] CPU: 1 PID: 6957 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 803.373973] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 803.375153] Call Trace: [ 803.375533] dump_stack+0x107/0x167 [ 803.376157] should_fail.cold+0x5/0xa [ 803.376715] __alloc_pages_nodemask+0x182/0x600 [ 803.377393] ? xa_load+0x12d/0x2c0 [ 803.377902] ? lock_downgrade+0x6d0/0x6d0 [ 803.378497] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 803.379380] alloc_pages_current+0x187/0x280 [ 803.380013] __page_cache_alloc+0x2d2/0x360 [ 803.380649] page_cache_ra_unbounded+0x207/0x6f0 [ 803.381350] ? read_pages+0xbc0/0xbc0 [ 803.381902] ? __lock_page_or_retry+0x4e0/0x4e0 [ 803.382590] ondemand_readahead+0x8e5/0x1150 [ 803.383226] page_cache_sync_ra+0x138/0x170 [ 803.383858] generic_file_buffered_read+0xc8e/0x2920 [ 803.384606] ? pagecache_get_page+0xc80/0xc80 [ 803.385251] ? kasan_save_stack+0x32/0x40 [ 803.385857] ? do_splice_direct+0x1c4/0x290 [ 803.386477] ? do_sendfile+0x553/0x11e0 [ 803.387034] ? __x64_sys_sendfile64+0x1d1/0x210 [ 803.387694] ? do_syscall_64+0x33/0x40 [ 803.388243] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 803.389014] ? perf_trace_lock+0xac/0x490 [ 803.389605] generic_file_read_iter+0x33f/0x490 [ 803.390266] ? __fsnotify_parent+0x47a/0xb10 [ 803.390894] ext4_file_read_iter+0x184/0x4c0 [ 803.391635] generic_file_splice_read+0x455/0x6d0 [ 803.392320] ? pipe_to_user+0x170/0x170 [ 803.392902] ? fsnotify_perm.part.0+0x22d/0x620 [ 803.393574] ? security_file_permission+0xb1/0xe0 [ 803.394266] ? pipe_to_user+0x170/0x170 [ 803.394830] do_splice_to+0x10e/0x160 [ 803.395383] splice_direct_to_actor+0x2fe/0x980 [ 803.396049] ? pipe_to_sendpage+0x380/0x380 [ 803.396680] ? do_splice_to+0x160/0x160 [ 803.397291] ? security_file_permission+0xb1/0xe0 [ 803.397982] do_splice_direct+0x1c4/0x290 [ 803.398579] ? splice_direct_to_actor+0x980/0x980 [ 803.399266] ? avc_policy_seqno+0x9/0x70 [ 803.399851] ? security_file_permission+0xb1/0xe0 [ 803.400561] do_sendfile+0x553/0x11e0 [ 803.401122] ? do_pwritev+0x270/0x270 [ 803.401682] ? wait_for_completion_io+0x270/0x270 [ 803.402384] ? rcu_read_lock_any_held+0x75/0xa0 [ 803.403059] ? vfs_write+0x354/0xb10 [ 803.403594] __x64_sys_sendfile64+0x1d1/0x210 [ 803.404225] ? __ia32_sys_sendfile+0x220/0x220 [ 803.404893] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 803.405655] ? syscall_enter_from_user_mode+0x1d/0x50 [ 803.406159] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 803.406405] do_syscall_64+0x33/0x40 [ 803.409550] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 803.410282] RIP: 0033:0x7fe3014fcb19 [ 803.410814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 803.413455] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 803.414525] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 803.415533] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 803.416547] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 803.417561] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 803.418565] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 803.437107] loop6: detected capacity change from 0 to 2102784 [ 803.444421] loop3: detected capacity change from 0 to 262144 [ 803.450222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=6948 comm=syz-executor.5 [ 803.457048] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 03:14:00 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0xe164, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x98, 0x4, 0x0, 'queue1\x00', 0x5}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000300)={0x4, 0x80, 0x0, 0x0, 0x8, 0xff, 0x0, 0xfffffffffffff801, 0x10000, 0xa, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x3, @perf_bp={&(0x7f0000000040), 0x1}, 0x5000, 0x100000001, 0x80000000, 0x4, 0x4, 0x6, 0x400, 0x0, 0x6, 0x0, 0x5f53}) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x80, "5fabd34a60e47f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054c00)={0xffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x1, "336545c2542a4c"}) r8 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) [ 803.471746] EXT4-fs error (device loop6): ext4_fill_super:4967: inode #2: comm syz-executor.6: iget: special inode unallocated [ 803.473625] EXT4-fs (loop6): get root inode failed [ 803.474315] EXT4-fs (loop6): mount failed [ 803.521580] loop3: detected capacity change from 0 to 262144 03:14:00 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, 0x0) pipe(0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000005b40)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe0, 0x3, 0x1, 0x81, 0x0, 0xda48, 0x800, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040), 0x13}, 0x80, 0x100000001, 0x1, 0x5, 0x10001, 0x7ff, 0x9, 0x0, 0x1000, 0x0, 0x8}, 0x0, 0x7, r0, 0x2) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0097050000000000000057ed7f00460000545339173b0d2546bbbe15bab694755428ce383f5979782138a3d604673e7e0fa70b538f162ecd3400086c8557272d8e15be1585707ea59507008de767a62af0161a705f1b5bfa3db4767101cda1b1ffb61675ace35c9b5f795f30cf08f4"], 0x14}}, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x27c]}, 0x8, 0x80000) fsetxattr$trusted_overlay_nlink(r5, 0x0, 0x0, 0xfffffffffffffd69, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) dup2(r5, r6) unshare(0x48020200) 03:14:00 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x0, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:14:00 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) [ 803.547466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.549823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.552023] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 803.559424] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 803.574832] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 803.597051] loop6: detected capacity change from 0 to 2102784 03:14:00 executing program 1: statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2c00, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x82307201, &(0x7f0000000300)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x711300, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xe0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x4d, 0x3}, 0x7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="ff010000000000002e2f66696c653100"]) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRESHEX], 0xaf2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) r3 = socket$netlink(0x10, 0x3, 0x0) getpeername$netlink(r3, &(0x7f0000000040), &(0x7f0000000080)=0xc) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000019c0)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, r3, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=@x25, 0x80, &(0x7f0000001840)=[{&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000280)="993d392dc6c388d44ec74250645657ec7ee87859d09e3e6979217356fd4ec440f09c93b26c569d35de7238ab792f73b70e5288bd1806cadde62586dec380f6e9d5234f0614a44ea977e359359b728ee4489170cb6eedf61f9a67345f3222fa94ddf68840b7c510335eb6785ffc232e72d81ef6b952c0cb", 0x77}, {&(0x7f0000000340)="1b0d6878d39e4beba1501b42d21cca96421d434c1fa1411aabbe7bcbb42f924a1356c27f09d0ef9f86039a2eaccc88f6b57e2f9456b9179fbb31d682fa06f95e36c705127816a1285220aa34f0e9354cd8415d0362c6a2ba817b0bf491471c18b1f91fbfd6f8457feb67dbe54cc9c6387aaa1cc7a09e81a98e2ed1d55d898d8d225f115e59e49abe744caf961805f4535f1fc3cf048a73d351cf2dbdbf0b370b617fe8405c887809d1e82e53d5", 0xad}, {&(0x7f0000001640)="5ae60895ea2d2dc75328ddce17c8adee765ce4c801a556415ef3c1c1c72954a355a21ec4de2d2b3dbac7637bf43dd5105073085435036446e2a02c91f413daf3edf8dd644a90d2d0ba582b690a8fc30b6779f3b33c9ed34d2a6b3a8208dad141437a213a34f979febc11f1fa7c52ff884a64d13b5d62ad92ca66aae54c13c03bc7d9384982dd45500cb4a087b301cbbd81fbab869bb8f88af036acb780b0c51f19fba7b5e0095abefff3954aae56c9221d2659eb5ba46b0c92f5153bfdcea4d3821a9b82c0df580617870355880e6823a2d0139256cfcb8029ebf565cadd", 0xde}, {&(0x7f0000000400)="bf1b5be2d2d2493f1df35a5ea6f3086e50d39e0a408f4827c3473c7ed0", 0x1d}, {&(0x7f0000001740)="a52f7278a7aa24eeaac6170880030215e7918a96cc8ecafa4942b9f3b790604abdd38bb2be67feed14e45e5d3c5e0fc8a04d453c786b646a818beb5043051761b5c95f40b4ebdca0b33e6afb6d344d49ea46a2a43b2d668327aec89fe902fcb6e0a8676b4bf05c0b42720560ef00572007fb17230a1cc904d1b640a4f33558bde6d65f1fa6f31e5e3854a104e77af49afafb33de60d3ce91c479b1ba12b7431d7d1ed9f873d6ee4342f777b6fa5de12d82737b532bf5fc0e1a35686678ec0b40607379", 0xc3}, {&(0x7f0000001e00)="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", 0x1000}], 0x7, &(0x7f00000018c0)=[{0xa0, 0x117, 0x78, "b8305f292cf19d3efbcaef5296b649c0607c04ce3d1d6ea6ddf44ae58248dd1c9d6a0bed97ce355655a1a92a1cee0ac60e40ede79a28b99ad5fb4ee9c97f937273d38425b3a22f0e22538699395a38275ca5ac287f3983ed2ac11b30bcf62fa6a1e907543f14cde613448270439f59c19a507745700ec474dca808618680f71d28b66186a11c17be6beca7ca971a56"}, {0x38, 0x111, 0x8001000, "6f2104ef28a17e0f749c773faec541494ffc332967d6b4c96522498a03650ddd65569a9126"}, {0x20, 0x10b, 0xffffff80, "bf7bac5219856135919f46df39"}], 0xf8}, 0x0, 0x4004040, 0x0, {0x0, r4}}, 0x82a4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r5 = io_uring_setup(0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 803.732122] loop1: detected capacity change from 0 to 41948160 03:14:01 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, 0x0) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:14:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 21) [ 803.788032] FAULT_INJECTION: forcing a failure. [ 803.788032] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 803.789565] CPU: 1 PID: 6992 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 803.790384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 803.791387] Call Trace: [ 803.791713] dump_stack+0x107/0x167 [ 803.792156] should_fail.cold+0x5/0xa [ 803.792684] __alloc_pages_nodemask+0x182/0x600 [ 803.793335] ? xa_load+0x12d/0x2c0 [ 803.793772] ? lock_downgrade+0x6d0/0x6d0 [ 803.794388] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 803.795130] alloc_pages_current+0x187/0x280 [ 803.795777] __page_cache_alloc+0x2d2/0x360 [ 803.795989] EXT4-fs error (device loop6): ext4_fill_super:4967: inode #2: comm syz-executor.6: iget: special inode unallocated [ 803.796295] page_cache_ra_unbounded+0x207/0x6f0 [ 803.799754] ? read_pages+0xbc0/0xbc0 [ 803.800201] ? __lock_page_or_retry+0x4e0/0x4e0 [ 803.800760] ondemand_readahead+0x8e5/0x1150 [ 803.801288] page_cache_sync_ra+0x138/0x170 [ 803.801797] generic_file_buffered_read+0xc8e/0x2920 [ 803.802406] ? pagecache_get_page+0xc80/0xc80 [ 803.802940] ? kasan_save_stack+0x32/0x40 [ 803.803432] ? do_splice_direct+0x1c4/0x290 [ 803.803947] ? do_sendfile+0x553/0x11e0 [ 803.804415] ? __x64_sys_sendfile64+0x1d1/0x210 [ 803.804973] ? do_syscall_64+0x33/0x40 [ 803.805434] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 803.806062] ? perf_trace_lock+0xac/0x490 [ 803.806557] generic_file_read_iter+0x33f/0x490 [ 803.807111] ? __fsnotify_parent+0x47a/0xb10 [ 803.807638] ext4_file_read_iter+0x184/0x4c0 [ 803.808161] generic_file_splice_read+0x455/0x6d0 [ 803.808728] ? pipe_to_user+0x170/0x170 [ 803.809210] ? fsnotify_perm.part.0+0x22d/0x620 [ 803.809760] ? security_file_permission+0xb1/0xe0 [ 803.810327] ? pipe_to_user+0x170/0x170 [ 803.810795] do_splice_to+0x10e/0x160 [ 803.811251] splice_direct_to_actor+0x2fe/0x980 [ 803.811806] ? pipe_to_sendpage+0x380/0x380 [ 803.812315] ? do_splice_to+0x160/0x160 [ 803.812786] ? security_file_permission+0xb1/0xe0 [ 803.813468] do_splice_direct+0x1c4/0x290 [ 803.813958] ? splice_direct_to_actor+0x980/0x980 [ 803.814529] ? avc_policy_seqno+0x9/0x70 [ 803.815018] ? security_file_permission+0xb1/0xe0 [ 803.815590] do_sendfile+0x553/0x11e0 [ 803.816045] ? do_pwritev+0x270/0x270 [ 803.816493] ? wait_for_completion_io+0x270/0x270 [ 803.817076] ? rcu_read_lock_any_held+0x75/0xa0 [ 803.817623] ? vfs_write+0x354/0xb10 [ 803.818060] __x64_sys_sendfile64+0x1d1/0x210 [ 803.818587] ? __ia32_sys_sendfile+0x220/0x220 [ 803.819128] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 803.819746] ? syscall_enter_from_user_mode+0x1d/0x50 [ 803.820349] do_syscall_64+0x33/0x40 [ 803.820786] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 803.821389] RIP: 0033:0x7fe3014fcb19 [ 803.821830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 803.823989] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 803.824901] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 803.825871] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 803.826705] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 803.827663] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 803.828604] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 803.833213] EXT4-fs (loop6): get root inode failed [ 803.834499] EXT4-fs (loop6): mount failed 03:14:01 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x67}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = signalfd4(r0, &(0x7f0000000300)={[0x9]}, 0x8, 0x800) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0xda, 0x0, 0x2, 0xc6, 0x0, 0x7fffffff, 0x4400, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5b697fc5, 0x4, @perf_bp={&(0x7f0000000240), 0x7}, 0x8000, 0x3, 0x7a8, 0x2, 0x800, 0x1, 0x400, 0x0, 0x3438682e, 0x0, 0xecc}, r1, 0x1, r2, 0x8) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000200), 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000180)=0x1, &(0x7f00000001c0)=0x1) flock(0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3f, 0x0, 0x5, 0xff, 0x0, 0x8, 0x80000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xd9a, 0x1, @perf_bp={&(0x7f0000000340), 0xc}, 0x0, 0x6, 0xd0, 0x7, 0x7fc00, 0x7, 0x1000, 0x0, 0xe8, 0x0, 0x3ff}, r1, 0xd, 0xffffffffffffffff, 0x18) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r4, r3, 0x0, 0x9bbb) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x92, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xd}, 0x26048, 0x0, 0x8001, 0x0, 0x2, 0xc858, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r3, 0xa) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 03:14:17 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, 0x0) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:14:17 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 03:14:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) r1 = dup2(r0, r0) ioctl$KDADDIO(r1, 0x4b34, 0x5) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r0, 0x4b47, &(0x7f0000001000)) 03:14:17 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000280)='./file1\x00', 0x0, 0x0) stat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x6, 0x0, &(0x7f0000000080), 0x2890410, &(0x7f00000012c0)={[{@huge_always}, {@nr_blocks={'nr_blocks', 0x3d, [0x6d, 0x70, 0x32]}}, {@mode={'mode', 0x3d, 0x9}}, {@huge_within_size}, {@mode={'mode', 0x3d, 0x4}}, {@gid={'gid', 0x3d, r0}}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x25]}}], [{@dont_appraise}, {@dont_measure}]}) 03:14:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x388, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x4}, @ETHTOOL_A_EEE_MODES_OURS={0xc0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa0, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x30}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ext4\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ext4\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xcf7}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_MASK={0x5, 0x5, "02"}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x401}, @ETHTOOL_A_EEE_MODES_OURS={0x15c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ext4\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ext4\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x10, 0x5, "57c9b6368cfcbe43adc99fcf"}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x9b, 0x5, "4638d938ad8f716fce0296ddd810477dd4f17bc10a80d106ace9515146b23c7e53f26a1f4f4a93b5e87b26d0f4d911dad39da37cf07595cdc71d2b7a24eb6f6d3216644192bff19adfbd66aebff0e6e9c7eb61ae0818c7075332f1c810b7d6f2010c01a281a9894a5d1042f6dc936bb0403c24cf3b1219fa533384ea05b483ee16d5e2df0e97c21dd0e869a621a0174c024e4685e351cd"}, @ETHTOOL_A_BITSET_VALUE={0x29, 0x4, "a3cda229bd1954b15a812f844a65203ffd35202eac66fe2cac580ce1703b721fb1321bd595"}, @ETHTOOL_A_BITSET_VALUE={0x20, 0x4, "f19512e7078ac9c6203f22dbafe7e642db6edfd1472bdbb99969ea25"}]}, @ETHTOOL_A_EEE_MODES_OURS={0x130, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x9a, 0x5, "fc9c1ffe163bb24f3e9fd7efed920248f45f93531d722016d71453639cc512a4367bc17f57f8d5f24fba0e675aa1275568284c08d73c6923446b304a558b1250cd7c4b59828f476a5c5f758934234bea81e311bacb894e0b50cec86d138037019ae97d1c96d64db40ab58d5c40e5f0fe89cc5aaea4ea07bb155abd28e1ad198050cc07117b1f705e41f452af9ced803fa4b8ecca5c6b"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x77, 0x5, "a33118922c8f45ecc74e90df496b9a4a52c5a1a558e18d093ca8e8e3e4eae22ecf1944161e930539a44862e04fb3828d36fe033483a50e1ff18cc3e7391cb8f14b2837f5ea0a98a26be182e8d3e0ebef917fe52c695711294fe729304fdc2b615bdeacb3b6cc415a2ae4882932f48a12f0e0e0"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x101}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x388}}, 0x11) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000140)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000200)="0012", 0x2, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000000040)="ed41000000100000d4f4653cfe5bd5c9736a7286775fd5f4655fd5f465", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) 03:14:17 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x800000004, 0x88126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x62, 0x58}, 0x0, 0xfffffffffffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x0) fork() preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x810, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x65fa, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x227}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r2, 0xca3, 0x2989, 0x2, &(0x7f0000000000), 0x8) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000005c0)=[{0x0, 0x49}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r7 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xc) syz_io_uring_submit(0x0, r9, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1000) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}, 0x0, 0x0, 0x0, {0x0, r11}}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1, {0x0, r11}}, 0xbd) 03:14:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 22) 03:14:17 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000006000000180000f3aa687755007be11a38c2426a8b47109b16f0d11f23c53eec8f1d8606f5cc46f74e373b85514119a96fa87c2bd00650ecf47104b727051e8564c903cd2648ea26438e33cb62ecbe84b10662137d5cdd69adf48710e39757c1a77e04fdd2b5f0d9500fff98fdb04203de01ffdd0bb08e1f4d4b81684e384ac7a4ded987", @ANYRES32, @ANYBLOB="ffff0000000000002e2f7d696c653000"]) setsockopt$inet6_int(r4, 0x29, 0xa6, &(0x7f0000000080)=0x402, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x800, 0x0, 0x0, 0x10, 0x0, {0x1}}, 0xffff) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) r5 = fork() tkill(r5, 0x26) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000200)={0x2, 'syz_tun\x00', {0x4}, 0xfd87}) kcmp(0xffffffffffffffff, r5, 0x3, r3, r6) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 819.902174] FAULT_INJECTION: forcing a failure. [ 819.902174] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 819.903043] loop6: detected capacity change from 0 to 131072 [ 819.905086] CPU: 0 PID: 7019 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 819.905105] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 819.910152] Call Trace: [ 819.910797] dump_stack+0x107/0x167 [ 819.911689] should_fail.cold+0x5/0xa [ 819.912625] __alloc_pages_nodemask+0x182/0x600 [ 819.913774] ? xa_load+0x12d/0x2c0 [ 819.914638] ? lock_downgrade+0x6d0/0x6d0 [ 819.915644] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 819.917138] alloc_pages_current+0x187/0x280 [ 819.918214] __page_cache_alloc+0x2d2/0x360 [ 819.919274] page_cache_ra_unbounded+0x207/0x6f0 [ 819.920435] ? read_pages+0xbc0/0xbc0 [ 819.921362] ? __lock_page_or_retry+0x4e0/0x4e0 [ 819.922510] ondemand_readahead+0x8e5/0x1150 [ 819.923592] page_cache_sync_ra+0x138/0x170 [ 819.924656] generic_file_buffered_read+0xc8e/0x2920 [ 819.925936] ? pagecache_get_page+0xc80/0xc80 [ 819.927029] ? kasan_save_stack+0x32/0x40 [ 819.928026] ? do_splice_direct+0x1c4/0x290 [ 819.929094] ? do_sendfile+0x553/0x11e0 [ 819.930057] ? __x64_sys_sendfile64+0x1d1/0x210 [ 819.931182] ? do_syscall_64+0x33/0x40 [ 819.932142] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 819.933438] ? perf_trace_lock+0xac/0x490 [ 819.934465] generic_file_read_iter+0x33f/0x490 [ 819.935608] ? __fsnotify_parent+0x47a/0xb10 [ 819.936691] ext4_file_read_iter+0x184/0x4c0 [ 819.937782] generic_file_splice_read+0x455/0x6d0 [ 819.938944] ? pipe_to_user+0x170/0x170 [ 819.939910] ? fsnotify_perm.part.0+0x22d/0x620 [ 819.941060] ? security_file_permission+0xb1/0xe0 [ 819.942241] ? pipe_to_user+0x170/0x170 [ 819.943203] do_splice_to+0x10e/0x160 [ 819.944139] splice_direct_to_actor+0x2fe/0x980 [ 819.945269] ? pipe_to_sendpage+0x380/0x380 [ 819.946321] ? do_splice_to+0x160/0x160 [ 819.947332] ? security_file_permission+0xb1/0xe0 [ 819.948507] do_splice_direct+0x1c4/0x290 [ 819.949524] ? splice_direct_to_actor+0x980/0x980 [ 819.950688] ? avc_policy_seqno+0x9/0x70 [ 819.951670] ? security_file_permission+0xb1/0xe0 [ 819.952854] do_sendfile+0x553/0x11e0 [ 819.953802] ? do_pwritev+0x270/0x270 [ 819.954720] ? wait_for_completion_io+0x270/0x270 [ 819.955889] ? rcu_read_lock_any_held+0x75/0xa0 [ 819.957012] ? vfs_write+0x354/0xb10 [ 819.957930] __x64_sys_sendfile64+0x1d1/0x210 [ 819.959006] ? __ia32_sys_sendfile+0x220/0x220 [ 819.960120] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 819.961401] ? syscall_enter_from_user_mode+0x1d/0x50 [ 819.962648] do_syscall_64+0x33/0x40 [ 819.963548] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 819.964787] RIP: 0033:0x7fe3014fcb19 [ 819.965698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 819.970185] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 819.972035] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 819.973783] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 819.975522] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 819.977270] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 819.979006] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 819.981123] hpet: Lost 4 RTC interrupts [ 819.992961] loop5: detected capacity change from 0 to 2097152 [ 820.013687] EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (128 blocks) [ 820.032461] EXT4-fs error (device loop5): ext4_quota_enable:6459: comm syz-executor.5: Bad quota inum: 4608, type: 0 [ 820.050624] EXT4-fs warning (device loop5): ext4_enable_quotas:6504: Failed to enable quota tracking (type=0, err=-117, ino=4608). Please run e2fsck to fix. 03:14:17 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, 0x0) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:14:17 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 03:14:17 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004200210e000040000000000000000000"], 0x14}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000340)=""/270, 0x10e}], 0x1, 0x0, 0x2) r3 = getegid() keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000300)=@keyring) keyctl$chown(0x4, 0x0, 0xee01, r3) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000500)={0x0, "a74b2c0552b70742b9db28581e53b26b0c0d06112b9707519041c1f13cf93acc6b3c335e7fd35e7f1080857d6684be6f5dc7d18df59829a3f2f2aad2e07506ea", 0x1a}, 0x48, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r4, r5, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x0, 0x0) fsetxattr$system_posix_acl(r1, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32, @ANYBLOB="02000600", @ANYRES32=r0, @ANYRES16=r3, @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32, @ANYRES16=r6, @ANYRESOCT=r7, @ANYRESOCT], 0x4c, 0x2) [ 820.126572] EXT4-fs (loop5): mount failed [ 820.143211] loop6: detected capacity change from 0 to 131072 [ 820.153397] EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (128 blocks) 03:14:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 23) 03:14:17 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) dup2(r1, r0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xf4d3}) mount$9p_unix(0x0, 0x0, &(0x7f0000001280), 0x20, &(0x7f0000001640)={'trans=unix,', {[{@posixacl}, {@afid={'afid', 0x3d, 0xfffffffffffff801}}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@appraise_type}, {@pcr={'pcr', 0x3d, 0x19}}, {@euid_lt}, {@seclabel}]}}) syz_io_uring_setup(0x1433, &(0x7f0000000080)={0x0, 0x4772, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000180)={0x30002004}) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendto$unix(r5, &(0x7f0000000200)="bab04c8800941162e5fdfbfceb5529451d1dbb5d214eef2fc1ef4f58745e669f9e65bf0e1424d4a24b86", 0x2a, 0x8000, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f00000014c0)) r6 = fork() tkill(r6, 0x26) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x7f, 0x20, 0x20, 0x3, 0x0, 0x6e2a, 0x63420, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x7fff}, 0x4800, 0x3ff, 0x101, 0x0, 0x4, 0x2, 0xa6c, 0x0, 0x911, 0x0, 0x2e}, r6, 0xc, r4, 0x8) 03:14:17 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) [ 820.365944] FAULT_INJECTION: forcing a failure. [ 820.365944] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 820.368724] CPU: 1 PID: 7059 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 820.368736] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 820.368742] Call Trace: [ 820.368769] dump_stack+0x107/0x167 [ 820.368793] should_fail.cold+0x5/0xa [ 820.368820] __alloc_pages_nodemask+0x182/0x600 [ 820.368838] ? xa_load+0x12d/0x2c0 [ 820.368860] ? lock_downgrade+0x6d0/0x6d0 [ 820.368881] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 820.368927] alloc_pages_current+0x187/0x280 [ 820.368951] __page_cache_alloc+0x2d2/0x360 [ 820.368983] page_cache_ra_unbounded+0x207/0x6f0 [ 820.369019] ? read_pages+0xbc0/0xbc0 [ 820.369035] ? __lock_page_or_retry+0x4e0/0x4e0 [ 820.369084] ondemand_readahead+0x8e5/0x1150 [ 820.369115] page_cache_sync_ra+0x138/0x170 [ 820.369140] generic_file_buffered_read+0xc8e/0x2920 [ 820.387391] ? pagecache_get_page+0xc80/0xc80 [ 820.388401] ? kasan_save_stack+0x32/0x40 [ 820.389353] ? do_splice_direct+0x1c4/0x290 [ 820.390331] ? do_sendfile+0x553/0x11e0 [ 820.391230] ? __x64_sys_sendfile64+0x1d1/0x210 [ 820.392420] ? do_syscall_64+0x33/0x40 [ 820.393312] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 820.394530] ? perf_trace_lock+0xac/0x490 [ 820.395486] generic_file_read_iter+0x33f/0x490 [ 820.396544] ? __fsnotify_parent+0x47a/0xb10 [ 820.397564] ext4_file_read_iter+0x184/0x4c0 [ 820.398565] generic_file_splice_read+0x455/0x6d0 [ 820.399666] ? pipe_to_user+0x170/0x170 [ 820.400580] ? fsnotify_perm.part.0+0x22d/0x620 [ 820.401644] ? security_file_permission+0xb1/0xe0 [ 820.402743] ? pipe_to_user+0x170/0x170 [ 820.403640] do_splice_to+0x10e/0x160 [ 820.404511] splice_direct_to_actor+0x2fe/0x980 [ 820.405578] ? pipe_to_sendpage+0x380/0x380 [ 820.406557] ? do_splice_to+0x160/0x160 [ 820.407563] ? security_file_permission+0xb1/0xe0 [ 820.408671] do_splice_direct+0x1c4/0x290 [ 820.409620] ? splice_direct_to_actor+0x980/0x980 [ 820.410726] ? avc_policy_seqno+0x9/0x70 [ 820.411665] ? security_file_permission+0xb1/0xe0 [ 820.412770] do_sendfile+0x553/0x11e0 [ 820.413668] ? do_pwritev+0x270/0x270 [ 820.414535] ? wait_for_completion_io+0x270/0x270 [ 820.415643] ? rcu_read_lock_any_held+0x75/0xa0 [ 820.416698] ? vfs_write+0x354/0xb10 [ 820.417564] __x64_sys_sendfile64+0x1d1/0x210 [ 820.418590] ? __ia32_sys_sendfile+0x220/0x220 [ 820.419627] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 820.420830] ? syscall_enter_from_user_mode+0x1d/0x50 [ 820.422016] do_syscall_64+0x33/0x40 [ 820.422947] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 820.424108] RIP: 0033:0x7fe3014fcb19 [ 820.424953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 820.429175] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 820.430923] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 820.432534] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 820.434171] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 820.435804] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 820.437451] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 03:14:17 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 820.455012] loop6: detected capacity change from 0 to 131072 [ 820.473610] EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (128 blocks) 03:14:17 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000080)=0x1000, 0x4) syz_emit_ethernet(0x56, &(0x7f0000000140)={@multicast, @broadcast, @void, {@canfd={0xd, {{0x4, 0x0, 0x1}, 0xb, 0x0, 0x0, 0x0, "9cfd38011804cef9b5a55550638dceb6a6731bb9130e5014239da80940a11796188e73dc00"}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x3ff, @remote}, 0x1c) 03:14:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000240)="2000000080000000060000006a0000000fff0700000000000100000001000200004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6c8da34c3addc2d6271f1706d4d7d446fa91e1505d53bacca1a8632713d31ad8f2147efe25b04522f0a62c7031aa03e871d3cffc372d79aa68d9472a5f9905e439e933cdb7"]) [ 820.563985] loop4: detected capacity change from 0 to 2048 [ 820.597596] EXT4-fs (loop4): Invalid log cluster size: 131073 03:14:17 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 820.612215] loop4: detected capacity change from 0 to 2048 [ 820.622229] EXT4-fs (loop4): Invalid log cluster size: 131073 03:14:17 executing program 3: r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r1, 0x5451) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0005000000000000040106142b9384acc194db5e0212fa866035729354d71dcc1f0d512f7733e70fb2d4631cffffffff0000000000000000"], 0x38) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000180)={0x9, 0x7, 0x0, 0x4c3b, 0x7fffffff, 0x8}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000008540)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000400)="0a753fea", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="24000000000000002900000032000000fe880000000000000000000000000001cc"], 0x28}}], 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x2, 0x1) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80) 03:14:17 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x3f}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) [ 820.708156] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 820.723489] loop6: detected capacity change from 0 to 131072 [ 820.742717] EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (128 blocks) [ 820.771731] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:14:18 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:14:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 24) 03:14:31 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1811c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) signalfd4(r1, &(0x7f0000000180)={[0x4]}, 0x8, 0x80000) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') fdatasync(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000080)) fallocate(r2, 0x0, 0x0, 0x8000) r5 = syz_io_uring_setup(0x3a75, &(0x7f0000000340)={0x0, 0xb55c, 0x2, 0xfffffffe, 0xb9}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x13, r5, 0x0) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x300) openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x200c0, 0x2d) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f0000000440)=ANY=[@ANYBLOB="09000000000099b763dbf50080f28c98f2d37cb936e70000827474c21f00000000000000e6b7bd1fde9d661f1d704590132809bbab3fdb0000000000000a5b121e575e244770995d975c889b611007baee536def6f23b444344881045c8fcd5544abfdd24d19977a38c39a827af4480236dabee85a5ca25f0f9de01d71df95f6a1b67b3812439b36"]) bind$packet(r0, &(0x7f0000000140)={0x11, 0xeb, 0x0, 0x1, 0x7f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x14) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xffff}, 0x2308, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 03:14:31 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x3f}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) [ 834.715644] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 03:14:31 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:14:31 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5e, 0x10210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x2100) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000b40)=ANY=[@ANYBLOB="95b50000018fd33a76f1d2328800000018000000", @ANYRES32=r0, @ANYBLOB="04a500006ccf5e00a30878ffff75db00808ebf8b85b5363cdf1595a0bee6cc6ec57b594ad75d4ecaace304ab11b2f0de03bff4371a9012ef1c32b4b5c6366f172a140b3c90fe1b3177ef5a6a3a26844c4bc8c82413041c010b22156a4c9a107723a501fc3d1d08a58cc865e3f2f712e1a4eabdc0986bd04ce4c790d9de030b3ca0239c52c979afa3e6e8c80f01000eba254f7d13aa0b68306d66d92477fe946e898db0c1000000000000000000000000834a46ab6154582e507e35c9ece6a966ffb2e54f4ffa5a8af648eaa05d222f111dcd08fd7e492a59b4434f173ed19b5430e492d21d1e27032ad500000efdb9476d2643e2f774fa89a209a2d1ce4d22bb655f868d54993677fa7547fed03262374b5f9a94c678facfde09b6c70921ba908d387c739b722327f7fdbacef3bf7f959cea53bd89c7633a996d15b55df8912583cedb2a76e8945edeb2dd39c874e83bb606ae3d5e04fb0ff4edfa307cb761ea8557444ba05a7dd9b91dbd45efe7736ded57c96ea56b9dd171b916094c1bf2f11b139848d24cc01f3fcf6bae455431f65c002dc5def8e72dcb9d0c0af5efe4aa603bde2d49a272114a36"]) syz_io_uring_setup(0x7dd, &(0x7f0000000500)={0x0, 0xb7a8, 0x4, 0x803, 0x333}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000002c0)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x107703, 0x13b) openat(r3, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) faccessat(r1, &(0x7f0000000000)='./file1\x00', 0xb0) read(r2, &(0x7f00000006c0)=""/135, 0x87) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000002e40)=[{&(0x7f0000000300)=""/163, 0xa3}, {&(0x7f0000000580)=""/191, 0xbf}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000880)=""/69, 0x45}, {&(0x7f0000000040)=""/28, 0x1c}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000000900)=""/223, 0xdf}, {&(0x7f0000000a00)=""/186, 0xba}, {&(0x7f0000001d40)=""/210, 0xd2}, {&(0x7f0000001e40)=""/4096, 0x1000}], 0xa, 0x85, 0x20000000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 03:14:31 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0x13, 0x4) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f0000000680)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="24000000000000002900000032000000200100"/32, @ANYRES32=0x0, @ANYBLOB="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"], 0x40}}], 0x1, 0x0) 03:14:31 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f00000009c0)={0x0, 0x0}) setpgid(0x0, r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000005e000000004f41668432aa85c20beebc0000", @ANYRES32, @ANYRES64, @ANYRES64, @ANYBLOB="0000006efa1f16e5bccb4fabc6b05bbd762b0000000000"]) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}}, 0x108) r3 = fork() tkill(r3, 0x26) r4 = getegid() sendmmsg$unix(r0, &(0x7f0000000780)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000200)="3ec9586f150d9af7a076f78997ad63fe851f0637d10b89c39b9d4ccf9c0626b5750aa908e63140ae98dc5c8f6f2726656f0bd7c7590b590bc3aeb1969c03395b4ec91f13b0c24331df5b639c57263cf414702140f9f23d83ab7aadfc1d2cbac6a4c086", 0x63}, {&(0x7f0000000300)="a64380237d1ca02cbe3dc223756b39d7465eec9fc4ee24d278856cb3795c26dbbcc49d0fe6a1e51be02530161a395e138ef0d4cf826c245d90c7f940ef33f1b293a6d8c81ffa7fd6dc0055c9e4950137177906a0482a6f0b2655a7a57ded3ad5d7f165a09146a175ab59d3bf929adb59fa7c326b3bb3787e46e3081e114fab9eef3c0fc1", 0x84}], 0x2, &(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002de1f420c22000000721346132ef19eabe374d06fda90b1fcfb031112ef0f70f3fea365045c02eb903ca2583fc774bb0a0cd882ea22888adab216539b5fd4fbd2cb115d82f833a58f62f0e235317f16d88f59978280ef5496fb73f6d59cd162844880485a918b3cb0b2b41cc22be00ec19ea87645c82c07b6a33e0ed448542f54ee2b45d0fad0b9919c71a46b33c17a522cd1e7a7840791fe0b0b1dc47aa2", @ANYRES32=r3, @ANYRES32=0xee00, @ANYRES32=r4, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x130, 0x10}}], 0x1, 0x30000005) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0xfdef) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) r6 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x40, 0xee}, 0x18) preadv2(r6, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x48020200) unshare(0x50000) 03:14:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, &(0x7f0000000000)=0x6e, 0x80800) fcntl$setlease(r0, 0x400, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 834.745119] loop1: detected capacity change from 0 to 262144 [ 834.751402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.753338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.755339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 03:14:32 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r0]) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000440)=[0x0]) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1, 0x0, {0x0, r2}}, 0xe466) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r4, 0x29, 0x6, 0x0, &(0x7f0000000380)) listen(r4, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000300)=@nfc_llcp, &(0x7f0000000380)=0x80) setreuid(0x0, 0xee01) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x88a4a5c437512118, 0x0, @fd=r1, 0x5, 0x0, 0x3ff, 0x1, 0x0, {0x0, r2}}, 0x101) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x1cd) [ 834.763976] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 834.790901] FAULT_INJECTION: forcing a failure. [ 834.790901] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 834.794075] CPU: 0 PID: 7103 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 834.795836] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 834.798024] Call Trace: [ 834.798706] dump_stack+0x107/0x167 [ 834.799647] should_fail.cold+0x5/0xa [ 834.800635] __alloc_pages_nodemask+0x182/0x600 [ 834.801844] ? xa_load+0x12d/0x2c0 [ 834.802760] ? lock_downgrade+0x6d0/0x6d0 [ 834.803822] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 834.805397] alloc_pages_current+0x187/0x280 [ 834.806533] __page_cache_alloc+0x2d2/0x360 [ 834.807642] page_cache_ra_unbounded+0x207/0x6f0 [ 834.808867] ? read_pages+0xbc0/0xbc0 [ 834.809847] ? __lock_page_or_retry+0x4e0/0x4e0 [ 834.811048] ondemand_readahead+0x8e5/0x1150 [ 834.812180] page_cache_sync_ra+0x138/0x170 [ 834.813289] generic_file_buffered_read+0xc8e/0x2920 [ 834.814605] ? pagecache_get_page+0xc80/0xc80 [ 834.815738] ? kasan_save_stack+0x32/0x40 [ 834.816795] ? do_splice_direct+0x1c4/0x290 03:14:32 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x3, 0x2, 0x0, 0x0, 0x1d, 0x1, {0x0, r1}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff6f0c, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) [ 834.817903] ? do_sendfile+0x553/0x11e0 [ 834.819070] ? __x64_sys_sendfile64+0x1d1/0x210 [ 834.820250] ? do_syscall_64+0x33/0x40 [ 834.821252] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 834.822605] ? perf_trace_lock+0xac/0x490 [ 834.823669] generic_file_read_iter+0x33f/0x490 [ 834.824849] ? __fsnotify_parent+0x47a/0xb10 [ 834.825976] ext4_file_read_iter+0x184/0x4c0 [ 834.827092] generic_file_splice_read+0x455/0x6d0 [ 834.828307] ? pipe_to_user+0x170/0x170 [ 834.829326] ? fsnotify_perm.part.0+0x22d/0x620 [ 834.830496] ? security_file_permission+0xb1/0xe0 [ 834.831710] ? pipe_to_user+0x170/0x170 [ 834.832707] do_splice_to+0x10e/0x160 [ 834.833677] splice_direct_to_actor+0x2fe/0x980 [ 834.834851] ? pipe_to_sendpage+0x380/0x380 [ 834.835936] ? do_splice_to+0x160/0x160 [ 834.836931] ? security_file_permission+0xb1/0xe0 [ 834.838159] do_splice_direct+0x1c4/0x290 [ 834.839200] ? splice_direct_to_actor+0x980/0x980 [ 834.840407] ? avc_policy_seqno+0x9/0x70 [ 834.841447] ? security_file_permission+0xb1/0xe0 [ 834.842669] do_sendfile+0x553/0x11e0 [ 834.843639] ? do_pwritev+0x270/0x270 [ 834.844595] ? wait_for_completion_io+0x270/0x270 [ 834.845820] ? rcu_read_lock_any_held+0x75/0xa0 [ 834.846983] ? vfs_write+0x354/0xb10 [ 834.847921] __x64_sys_sendfile64+0x1d1/0x210 [ 834.849035] ? __ia32_sys_sendfile+0x220/0x220 [ 834.850186] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 834.851487] ? syscall_enter_from_user_mode+0x1d/0x50 [ 834.852774] do_syscall_64+0x33/0x40 [ 834.853710] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 834.854987] RIP: 0033:0x7fe3014fcb19 [ 834.855916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 834.860515] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 834.862423] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 834.864201] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 834.865992] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 834.867761] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 834.869535] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 834.869783] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 834.871811] hpet: Lost 4 RTC interrupts [ 834.880034] loop3: detected capacity change from 0 to 262144 [ 834.891387] loop6: detected capacity change from 0 to 131072 [ 834.898319] EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (128 blocks) [ 834.917803] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 834.948207] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem 03:14:32 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:14:32 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x3f}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 03:14:32 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 25) [ 835.013267] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 835.015755] loop6: detected capacity change from 0 to 131072 [ 835.022206] EXT4-fs (loop6): bad geometry: block count 512 exceeds size of device (128 blocks) 03:14:32 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) [ 835.151366] FAULT_INJECTION: forcing a failure. [ 835.151366] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 835.152828] CPU: 1 PID: 7147 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 835.153651] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 835.154624] Call Trace: [ 835.154940] dump_stack+0x107/0x167 [ 835.155374] should_fail.cold+0x5/0xa [ 835.155832] __alloc_pages_nodemask+0x182/0x600 [ 835.156382] ? xa_load+0x12d/0x2c0 [ 835.156805] ? lock_downgrade+0x6d0/0x6d0 [ 835.157371] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 835.158091] alloc_pages_current+0x187/0x280 [ 835.158610] __page_cache_alloc+0x2d2/0x360 [ 835.159131] page_cache_ra_unbounded+0x207/0x6f0 [ 835.159695] ? read_pages+0xbc0/0xbc0 [ 835.160142] ? __lock_page_or_retry+0x4e0/0x4e0 [ 835.160700] ondemand_readahead+0x8e5/0x1150 [ 835.161234] page_cache_sync_ra+0x138/0x170 [ 835.161744] generic_file_buffered_read+0xc8e/0x2920 [ 835.162355] ? pagecache_get_page+0xc80/0xc80 [ 835.162881] ? kasan_save_stack+0x32/0x40 [ 835.163374] ? do_splice_direct+0x1c4/0x290 [ 835.163883] ? do_sendfile+0x553/0x11e0 [ 835.164348] ? __x64_sys_sendfile64+0x1d1/0x210 [ 835.164896] ? do_syscall_64+0x33/0x40 [ 835.165370] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 835.165998] ? perf_trace_lock+0xac/0x490 [ 835.166490] generic_file_read_iter+0x33f/0x490 [ 835.167040] ? __fsnotify_parent+0x47a/0xb10 [ 835.167562] ext4_file_read_iter+0x184/0x4c0 [ 835.168082] generic_file_splice_read+0x455/0x6d0 [ 835.168656] ? pipe_to_user+0x170/0x170 [ 835.169132] ? fsnotify_perm.part.0+0x22d/0x620 [ 835.169696] ? security_file_permission+0xb1/0xe0 [ 835.170264] ? pipe_to_user+0x170/0x170 [ 835.170735] do_splice_to+0x10e/0x160 [ 835.171188] splice_direct_to_actor+0x2fe/0x980 [ 835.171741] ? pipe_to_sendpage+0x380/0x380 [ 835.172254] ? do_splice_to+0x160/0x160 [ 835.172724] ? security_file_permission+0xb1/0xe0 [ 835.173372] do_splice_direct+0x1c4/0x290 [ 835.173862] ? splice_direct_to_actor+0x980/0x980 [ 835.174429] ? avc_policy_seqno+0x9/0x70 [ 835.174910] ? security_file_permission+0xb1/0xe0 [ 835.175484] do_sendfile+0x553/0x11e0 [ 835.175943] ? do_pwritev+0x270/0x270 [ 835.176395] ? wait_for_completion_io+0x270/0x270 [ 835.176971] ? rcu_read_lock_any_held+0x75/0xa0 [ 835.177525] ? vfs_write+0x354/0xb10 [ 835.177968] __x64_sys_sendfile64+0x1d1/0x210 [ 835.178495] ? __ia32_sys_sendfile+0x220/0x220 [ 835.179034] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 835.179653] ? syscall_enter_from_user_mode+0x1d/0x50 [ 835.180265] do_syscall_64+0x33/0x40 [ 835.180702] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 835.181321] RIP: 0033:0x7fe3014fcb19 [ 835.181757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 835.183926] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 835.184828] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 835.185677] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 835.186520] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 835.187360] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 835.188203] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 835.202259] loop6: detected capacity change from 0 to 2102784 [ 835.302061] EXT4-fs error (device loop6): __ext4_get_inode_loc:4406: comm syz-executor.6: Invalid inode table block 0 in block_group 0 [ 835.306998] EXT4-fs (loop6): get root inode failed [ 835.307620] EXT4-fs (loop6): mount failed [ 849.239409] sg_write: data in/out 327644/1768 bytes for SCSI command 0x0-- guessing data in; [ 849.239409] program syz-executor.7 not setting count and/or reply_len properly [ 849.252268] sg_write: data in/out 327644/1768 bytes for SCSI command 0x0-- guessing data in; [ 849.252268] program syz-executor.7 not setting count and/or reply_len properly 03:14:46 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 03:14:46 executing program 5: open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@FILEID_BTRFS_WITH_PARENT={0x28, 0x4e, {0x2, 0x2, 0xff, 0x7, 0x4, 0x1}}, 0x100) r0 = syz_io_uring_setup(0x1d, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0xfc292a8c574ae91a}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x6f3b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r3, 0x80, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x2710, @my=0x1}, 0x0, 0x0, 0x1}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x1) io_uring_enter(r0, 0x186e, 0x0, 0x0, 0x0, 0x0) 03:14:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 26) 03:14:46 executing program 3: getresuid(&(0x7f0000000000), &(0x7f0000000180), &(0x7f00000001c0)) unlinkat(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) finit_module(r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="015e00d65a1c78c592c06d00", @ANYRES32=r2, @ANYBLOB='?\x00\x00\x00\x00\x00\x00\x00./file0\x00', @ANYRES16]) lseek(r2, 0x20, 0x3) open_by_handle_at(r1, &(0x7f0000000200)=@OVL_FILEID_V1={0x1018, 0xf8, {'\x00', {0x0, 0xfb, 0x1015, 0x6, 0x9, "0ed24540a56c07b77505a7ff5a779748", "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"/4096}}}, 0x444502) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x82000) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x204040, 0x0) 03:14:46 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000a00)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7}, 0x0, 0x0, 0x1}, 0xffffff81) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0xfffffffffffffde1}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f00000008c0)="071e9f7358ec922343d9786f3a5ffc4951d0a6a9f38dda8a9bae8f6f3734e082993d557367e24150405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7b69b7185e6784ba4ef00"/105, 0x69) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/194, 0xc2}, {&(0x7f00000004c0)=""/215, 0xd7}, {&(0x7f00000005c0)=""/252, 0xfc}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4077, 0xfed}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000780)=""/139, 0x8b}], 0x7) r2 = getpid() syz_open_procfs(r2, &(0x7f0000000200)='net/sco\x00') mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000040)='fdinfo\x00') 03:14:46 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:14:46 executing program 4: writev(0xffffffffffffffff, &(0x7f0000001540)=[{0x0}, {0x0}], 0x2) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x13b7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x83}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x8, 0x0, 0x3c, 0xb, 0x0, 0x6, 0x2010, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0xfd, 0xfff}, 0x0, 0x6e35, 0x1, 0x0, 0x0, 0x400, 0x1ff, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x2, r0, 0x8) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x7}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f00000001c0)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:14:46 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f00000002c0)) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) preadv(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x1, 0xc) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x8000000, 0x3}]}, 0x14, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) write$binfmt_elf64(r1, &(0x7f0000001080)=ANY=[@ANYBLOB="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"/1822], 0x712) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x77359400}, {r2, r3+10000000}}, &(0x7f0000000440)) timer_delete(0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000100)) [ 849.287270] loop6: detected capacity change from 0 to 2102784 [ 849.297301] FAULT_INJECTION: forcing a failure. [ 849.297301] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 849.299419] CPU: 0 PID: 7177 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 849.300447] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 849.301711] Call Trace: [ 849.302116] dump_stack+0x107/0x167 [ 849.302666] should_fail.cold+0x5/0xa [ 849.303248] __alloc_pages_nodemask+0x182/0x600 [ 849.303983] ? xa_load+0x12d/0x2c0 [ 849.304525] ? lock_downgrade+0x6d0/0x6d0 [ 849.305158] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 849.306098] alloc_pages_current+0x187/0x280 [ 849.306759] __page_cache_alloc+0x2d2/0x360 [ 849.307409] page_cache_ra_unbounded+0x207/0x6f0 [ 849.308121] ? read_pages+0xbc0/0xbc0 [ 849.308683] ? __lock_page_or_retry+0x4e0/0x4e0 [ 849.309396] ondemand_readahead+0x8e5/0x1150 [ 849.310089] page_cache_sync_ra+0x138/0x170 [ 849.310732] generic_file_buffered_read+0xc8e/0x2920 [ 849.311535] ? pagecache_get_page+0xc80/0xc80 [ 849.312231] ? kasan_save_stack+0x32/0x40 [ 849.312858] ? do_splice_direct+0x1c4/0x290 [ 849.313522] ? do_sendfile+0x553/0x11e0 [ 849.314176] ? __x64_sys_sendfile64+0x1d1/0x210 [ 849.314908] ? do_syscall_64+0x33/0x40 [ 849.315503] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 849.316305] ? perf_trace_lock+0xac/0x490 [ 849.316940] generic_file_read_iter+0x33f/0x490 [ 849.317675] ? __fsnotify_parent+0x47a/0xb10 [ 849.318358] ext4_file_read_iter+0x184/0x4c0 [ 849.319028] generic_file_splice_read+0x455/0x6d0 [ 849.319758] ? pipe_to_user+0x170/0x170 [ 849.320357] ? fsnotify_perm.part.0+0x22d/0x620 [ 849.321091] ? security_file_permission+0xb1/0xe0 [ 849.321870] ? pipe_to_user+0x170/0x170 [ 849.322476] do_splice_to+0x10e/0x160 [ 849.323064] splice_direct_to_actor+0x2fe/0x980 [ 849.323769] ? pipe_to_sendpage+0x380/0x380 [ 849.324429] ? do_splice_to+0x160/0x160 [ 849.325046] ? security_file_permission+0xb1/0xe0 [ 849.325796] do_splice_direct+0x1c4/0x290 [ 849.326426] ? splice_direct_to_actor+0x980/0x980 [ 849.327176] ? avc_policy_seqno+0x9/0x70 [ 849.327819] ? security_file_permission+0xb1/0xe0 [ 849.328541] do_sendfile+0x553/0x11e0 [ 849.329147] ? do_pwritev+0x270/0x270 [ 849.329760] ? wait_for_completion_io+0x270/0x270 [ 849.330511] ? rcu_read_lock_any_held+0x75/0xa0 [ 849.331225] ? vfs_write+0x354/0xb10 [ 849.331806] __x64_sys_sendfile64+0x1d1/0x210 [ 849.332485] ? __ia32_sys_sendfile+0x220/0x220 [ 849.333195] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 849.333989] ? syscall_enter_from_user_mode+0x1d/0x50 [ 849.334794] do_syscall_64+0x33/0x40 [ 849.335377] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 849.336169] RIP: 0033:0x7fe3014fcb19 [ 849.336730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 849.339540] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 849.340709] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 849.341811] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 849.342924] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 849.344001] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 849.345088] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 849.346368] hpet: Lost 2 RTC interrupts [ 849.356116] EXT4-fs error (device loop6): __ext4_get_inode_loc:4406: comm syz-executor.6: Invalid inode table block 0 in block_group 0 [ 849.360279] EXT4-fs (loop6): get root inode failed [ 849.361551] EXT4-fs (loop6): mount failed 03:14:46 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:14:46 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 03:14:46 executing program 7: listen(0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgrp(0x0) pidfd_open(r1, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x0, 0x4, 0x7, 0xff, r1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000140)={0x4, 0x9, 0x3, 0x5, 0x0, [0x0, 0x3f, 0x8001, 0xffffffff]}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000c00), 0x1312) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r2) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000001500)=ANY=[@ANYBLOB="88190000f70ec79de92c7c8bb7b4e737f409bedb3a7d1e667e7d3625e1b9fd7dc0213bc08ef3117dbc5df4d4373d3def37914b336ac1e816bc2d58167065b01c877dafd47114dfc3ca364984ec779ec4f25d9f8a3251dbe2a70a584716ebc7059e79c919297839d20a162d73269790f8299458be0ddcd0d455cebdaea35e1816eca67fce29b3", @ANYRES16=r3, @ANYBLOB="000129bd7000ffdbdf250a000000080006003d0000001c000280080009000800000006000b000a000000080008000200000008000600b1ad0000080006006962000008000400070000003800038006000400040000001400060000000000000000000000ffffe000000206000400050000000800030001000000060007004e210000"], 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) flock(r2, 0x8) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) syz_io_uring_setup(0x3c1f, &(0x7f00000001c0)={0x0, 0xcccf, 0x20, 0x1, 0x1a8, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x8040, 0x0, 0x400, 0x0, 0x6, 0xc0c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000080)={@rand_addr=0x64010102, @broadcast, @multicast2}, 0xc) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/77, 0x4d, 0x9) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0xffffff95, &(0x7f0000000480)={&(0x7f0000000340)={0x14, 0x21, 0xc21, 0x0, 0x0, {0x44, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 03:14:46 executing program 5: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="a1ae8fb5c4de3f79ba461cafc93df8e6f8", 0x11}], 0x1}}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x8000)=nil, 0x8000, 0x3, 0x11, r5, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0x7) 03:14:46 executing program 3: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000300)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x2000, 0x1002, 0x0, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000003c0)) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x49) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) r3 = syz_io_uring_setup(0x3e01, &(0x7f0000000280)={0x0, 0x100018d7, 0x10, 0x1, 0x376, 0x0, r2}, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fed000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000340)) fcntl$setlease(r3, 0x400, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fstatfs(r1, &(0x7f0000002e00)=""/4102) dup2(0xffffffffffffffff, r0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x1a8) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 03:14:46 executing program 1: r0 = socket$inet(0x2, 0x3, 0xff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r3, 0x8) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x5, 0x4000, @fd=r3, 0x3, &(0x7f0000000040)="92d278a3a9e9e38e0c03167f9d00a1082f50ffe1c0615ab0aa5deec29a9ae91865970f217dab12820c", 0x29, 0x0, 0x1, {0x0, r4}}, 0x4d4) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000000)="b683ae40f3fdac402b01fa055e4299bd37dddcc878d124b8", 0x18}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @multicast1}}}], 0x40}, 0x0) 03:14:46 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 03:15:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 27) 03:15:00 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:15:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x639}, 0x4) io_submit(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000001140)=[{&(0x7f0000000080)="f2", 0x1}], 0x1, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x8020}) write$binfmt_aout(r0, &(0x7f0000000180)={{0x107, 0x20, 0xf9, 0x327, 0xe4, 0x7, 0x91, 0x1f}, "9fa923d0033a4d46316a8df2b6c8624cf5b922e5dfd6f76c65cdcceabef11d4ab2d296", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x943) r2 = socket$netlink(0x10, 0x3, 0x0) getpeername$netlink(r2, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000140)={0x0, 0x3, r2, 0x6}) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x100, @remote, 0x2}, 0x1c) close(r1) [ 863.479755] FAULT_INJECTION: forcing a failure. [ 863.479755] name fail_page_alloc, interval 1, probability 0, space 0, times 0 03:15:00 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000200)={'ip6tnl0\x00', r1, 0x2f, 0x6, 0xf5, 0x295faaa0, 0x30, @remote, @empty, 0x1, 0x700, 0x3, 0xffffafaf}}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x8923, &(0x7f0000000000)={'sit0\x00', 0x0}) syz_io_uring_setup(0x39e8, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x2, 0x137}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "c009b39830e4109622d7a29d0bd42e6d365c8384f665a2104b6faaa5427626b93311e77f0de4211e1217bc355a5246327eb7ba126bf7e4adb45535a4d9757c77f555e42c9254e9f9089be590271f821f5f6b632da2dabf1d6e618629da57a34a33f5e913338e628f32d84f60dbb9f94b70f1828e7d652bb2443c02901738d15cd72d14288f0d47dfe96e49988d0402f96628f97be361723e018daf71ab695fa4726664c00ec9aa53b8c092760da4cd088f03fad6504eceb8949dc35abc6c9f51916777bc38aa3669fb220546dbd1024eb87da205b46ec35180a8fcb898160855b5044023da75f2b1f285c1462a8afa95492a14be3f42052ff535612d226506a0", "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"}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x90) sendto$inet6(r5, &(0x7f0000000380)="9a8b0667680dd7c76529d128f7a0b3e3febb97084d28fe4afe3542aecdba4713518ea248116b77c15a74070c404930107ece776d3974875bcdb333c5679a10fcfd0c894013426597b527cda5013babbcb0a3f5e97e9a4281bdcc59c1a322d0fa560049", 0x63, 0xa1, &(0x7f0000000400)={0xa, 0x4e21, 0x2, @local, 0x7}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x4, "9755154351ac9a"}) 03:15:00 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x2c100, 0xbab14a452e47cc0f) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2802c2, 0x1cc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000900)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x33, 0x0, "4fb2386f65a856b6930930052d7d4e52fc4032fe98f268baabdf34269819ec36e44c87f906b59567acb1dd5aa5ba7be8ecc7069f172fddc076e97b1bb7ad34493270d4dbba4a2ca52cc13ca18e08c805"}, 0xd8) [ 863.482031] CPU: 1 PID: 7221 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 863.483223] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 863.484469] Call Trace: [ 863.484873] dump_stack+0x107/0x167 [ 863.485431] should_fail.cold+0x5/0xa [ 863.486107] __alloc_pages_nodemask+0x182/0x600 [ 863.486812] ? xa_load+0x12d/0x2c0 [ 863.487357] ? lock_downgrade+0x6d0/0x6d0 [ 863.487989] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 863.488922] alloc_pages_current+0x187/0x280 [ 863.489614] __page_cache_alloc+0x2d2/0x360 [ 863.490271] page_cache_ra_unbounded+0x207/0x6f0 [ 863.490992] ? read_pages+0xbc0/0xbc0 [ 863.491563] ? __lock_page_or_retry+0x4e0/0x4e0 [ 863.492276] ondemand_readahead+0x8e5/0x1150 [ 863.492954] page_cache_sync_ra+0x138/0x170 [ 863.493628] generic_file_buffered_read+0xc8e/0x2920 [ 863.494411] ? pagecache_get_page+0xc80/0xc80 [ 863.495261] ? kasan_save_stack+0x32/0x40 [ 863.496064] ? do_splice_direct+0x1c4/0x290 [ 863.496843] ? do_sendfile+0x553/0x11e0 [ 863.497635] ? __x64_sys_sendfile64+0x1d1/0x210 [ 863.498382] ? do_syscall_64+0x33/0x40 [ 863.498967] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 863.499780] ? perf_trace_lock+0xac/0x490 [ 863.500406] generic_file_read_iter+0x33f/0x490 [ 863.501097] ? __fsnotify_parent+0x47a/0xb10 [ 863.501885] ext4_file_read_iter+0x184/0x4c0 [ 863.502552] generic_file_splice_read+0x455/0x6d0 [ 863.503436] ? pipe_to_user+0x170/0x170 [ 863.504049] ? fsnotify_perm.part.0+0x22d/0x620 [ 863.504776] ? security_file_permission+0xb1/0xe0 [ 863.505532] ? pipe_to_user+0x170/0x170 [ 863.506124] do_splice_to+0x10e/0x160 [ 863.506719] splice_direct_to_actor+0x2fe/0x980 [ 863.507416] ? pipe_to_sendpage+0x380/0x380 [ 863.508051] ? do_splice_to+0x160/0x160 [ 863.508657] ? security_file_permission+0xb1/0xe0 [ 863.509395] do_splice_direct+0x1c4/0x290 [ 863.510052] ? splice_direct_to_actor+0x980/0x980 [ 863.510787] ? avc_policy_seqno+0x9/0x70 [ 863.511409] ? security_file_permission+0xb1/0xe0 [ 863.512154] do_sendfile+0x553/0x11e0 [ 863.512738] ? do_pwritev+0x270/0x270 [ 863.513330] __x64_sys_sendfile64+0x1d1/0x210 [ 863.513999] ? __ia32_sys_sendfile+0x220/0x220 [ 863.514690] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 863.515488] ? syscall_enter_from_user_mode+0x1d/0x50 [ 863.516247] do_syscall_64+0x33/0x40 [ 863.516807] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 863.517608] RIP: 0033:0x7fe3014fcb19 [ 863.518174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 863.520946] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 863.522112] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 863.523198] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 863.524270] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 863.525342] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 863.526429] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 863.565807] loop4: detected capacity change from 0 to 2103296 ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f000000eec0)=ANY=[@ANYBLOB="a808000000000000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008d5e204ca6b92bc600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f33af39000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e184d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004ddc04f2eff1058055a7dbd6e666f0ec5cb274093ebd6d4cbdc55612da7474c887789d1b1ca958241b03e1059eaddae04f5ea6e2dd324d6d3d596becf9442dd626a9cadaf5d8c280470596d9c87cff67601146404eafc0be0b866a5d4b8e8b6d4d91f9da97d3892817f5c3b8c464181df3f37c0cb7b890375bc3e835bab19bc48347ca7b8f0d30691797a660a8a649fb70c682a3ce810bc114400b947aea5cfb7ee7d0f5217ad5d0d0ca430d31ca45eb03f357fd046121b326972f22afaea5"]) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index, 0x0, 0x0, 0x3ff, 0x1, 0x1}, 0x10000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x20d315) 03:15:00 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 03:15:00 executing program 1: semget$private(0x0, 0x4, 0x100) semop(0xffffffffffffffff, &(0x7f00000001c0)=[{0x4, 0x3, 0x1000}, {0x4, 0x651}, {0x1, 0x5a22, 0x800}, {0x4, 0x7f, 0x2800}, {0x4, 0x4, 0x800}, {0x0, 0x6, 0x1800}, {0x5, 0x0, 0x1800}, {0x0, 0x4, 0x1800}], 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) r0 = semget$private(0x0, 0x4000, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x3, 0x0, 0x1000}, {0x1, 0x7fff, 0x1000}, {0x6, 0x2, 0x800}, {0x3, 0xff00}, {0x4, 0x6468}, {0x0, 0x5, 0x1000}, {0x3, 0x4, 0x1800}, {0x3, 0x9, 0x1800}], 0x8, &(0x7f0000000040)) semctl$SEM_STAT_ANY(r0, 0x2, 0x14, &(0x7f00000010c0)=""/79) semctl$IPC_RMID(r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) semtimedop(0xffffffffffffffff, &(0x7f0000000100)=[{0x1, 0x9c9, 0x1800}, {0x3, 0xf9a1, 0x800}, {0x3, 0x1ff, 0x800}, {0x1, 0x9, 0x800}, {0x4, 0xe21c}, {0x4, 0x0, 0x800}, {0x1, 0x9}], 0x7, &(0x7f0000000180)={r1, r2+60000000}) r3 = semget$private(0x0, 0x6, 0x0) semop(r3, &(0x7f00000000c0)=[{0x3, 0x0, 0x1800}, {}, {0x2, 0x8, 0x800}, {0x4}], 0x4) semctl$SEM_INFO(r3, 0x5, 0x13, &(0x7f0000000080)=""/101) unshare(0x48020200) 03:15:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="090000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41002000040000ddf4655fdef4655fdef4655f000000000000045f20", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=unix,', {[{@access_any}], [{@pcr={'pcr', 0x3d, 0x27}}, {@hash}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\-$**.'}}]}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f00000002c0)='./file0/file0/../file0\x00', 0x0, 0x5, &(0x7f0000000640)=[{&(0x7f0000000300)="5b36fe04cee0277d61c762062ed61df0ab5e08d7b4fb84804104ad60b2590c4fd0ad891cc44d2f956446a73a6866b90902fbd7000f88ee05c93ae0f4a99547be6a97112b8ec8b4b6b188ad6454c93052bd1dd04db203339bbfc1720d33e78bdbe7eab8bcf03ac37e567c0bd22c490310974c4d4c854a3e1d83e2e203da5f0881ad1de53a4c91cc90d80028a64bbbfd224bb004cf8ab898e0bc678c1dc3a5ad27ac5b0c155c7410826c5f17a5e589a59782005c02c2cd16a16202a259521d50ffb93845f3ad99fd9e9c833ce8831bd886016467145845c9661da1c56a56a862a434ee29fa717e0bb5192a12b638f33f2cf94774e4652606d98d", 0xf9, 0x9}, {&(0x7f0000000400)="408de163d853983e27a790f4ae78a2c14224d907f3c55ccdd028005e399e3da77ae48bdc77a1bb45bdc322950d07968da1a3d2b9147ba659b4cf651c95c90ef11c2445c219f983f32c627336535c7dd3a96d3d124aaedada8119bb2513e89d53d361138705aa59c478b9ae70751b5416eccdb5b89d09db86e897443b6108b7d3eb59f45d72f52dcf6fc0ac15c4afa3a839adfbadcf03e0e930290f28eed5b87476c3dad67c191cfc075f118fddee00131fbea0080278489d5d8724f6318f447c6d54f7f0ec27b18de87c0c43dc8b46ab693c1f1b02e79309110c059ae62271c4e7e6b0923d9e5f5018e69b7a", 0xec, 0x3}, {&(0x7f0000000500)="4962b46508c95cac7cf221157e9460915c8f9698322c00920bb7", 0x1a, 0xfffffffffffffff8}, {&(0x7f0000000540)="474860a5c24ba87b86ecf255f0e45d0093ecbafbd2fb0721f11e063c71067766753d2ad8905d7b82e22c046c3ef1ba41efe02c2990c5b137c756e066390b96e4466193a1ea7f145f", 0x48, 0x5a}, {&(0x7f00000005c0)="2b3ba1e420e9fc30d949b2db39c7838a2a9ac9251961ca826a24c376ea7906cd9e40cd8fd2ada21a11b9cfc25904e660fbf70950b556aa0b6e0d3f4ad88a7583ba9172dd8e64f11e28769146118cdab0b4dbbe7a6d447768cae7fed77b9143c5f79f19695a503f359fdbc8baa17d3b2b44", 0x71, 0x80000001}], 0xc1410, &(0x7f0000000800)={[{@abort}, {@commit={'commit', 0x3d, 0x18}}, {@journal_dev={'journal_dev', 0x3d, 0x1ff}}, {@max_batch_time={'max_batch_time', 0x3d, 0x9}}, {@data_err_abort}], [{@subj_role={'subj_role', 0x3d, '*/^Z@/$/@#*'}}, {@uid_eq={'uid', 0x3d, r0}}, {@obj_type={'obj_type', 0x3d, '\xc2'}}]}) [ 863.649773] loop6: detected capacity change from 0 to 2102784 03:15:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x840e0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000240)='./file0/file1\x00') 03:15:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 28) [ 863.735083] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 863.739841] ext4 filesystem being mounted at /syzkaller-testdir310322921/syzkaller.sB5x4d/84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 863.745109] EXT4-fs error (device loop6): __ext4_get_inode_loc:4406: comm syz-executor.6: Invalid inode table block 0 in block_group 0 [ 863.747453] EXT4-fs (loop6): get root inode failed [ 863.748206] EXT4-fs (loop6): mount failed 03:15:01 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:15:01 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x40000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d20202020202020202020202020202020202020202020202020202000000000000000002101000000000121000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000180c010000000000000000010e00000000220014", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002101000000000121252f45", 0x5b, 0x8820}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0]) [ 863.879994] FAULT_INJECTION: forcing a failure. [ 863.879994] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 863.881617] CPU: 1 PID: 7254 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 863.882576] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 863.883812] Call Trace: [ 863.884150] dump_stack+0x107/0x167 [ 863.884674] should_fail.cold+0x5/0xa [ 863.885253] __alloc_pages_nodemask+0x182/0x600 [ 863.885846] ? xa_load+0x12d/0x2c0 [ 863.886320] ? lock_downgrade+0x6d0/0x6d0 [ 863.886959] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 863.887876] alloc_pages_current+0x187/0x280 [ 863.888556] __page_cache_alloc+0x2d2/0x360 [ 863.889101] page_cache_ra_unbounded+0x207/0x6f0 [ 863.889707] ? read_pages+0xbc0/0xbc0 [ 863.890185] ? __lock_page_or_retry+0x4e0/0x4e0 [ 863.890776] ondemand_readahead+0x8e5/0x1150 [ 863.891331] page_cache_sync_ra+0x138/0x170 [ 863.891865] generic_file_buffered_read+0xc8e/0x2920 [ 863.892579] ? pagecache_get_page+0xc80/0xc80 [ 863.893133] ? kasan_save_stack+0x32/0x40 [ 863.893662] ? do_splice_direct+0x1c4/0x290 [ 863.894196] ? do_sendfile+0x553/0x11e0 [ 863.894694] ? __x64_sys_sendfile64+0x1d1/0x210 [ 863.895280] ? do_syscall_64+0x33/0x40 [ 863.895764] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 863.896419] ? perf_trace_lock+0xac/0x490 [ 863.896940] generic_file_read_iter+0x33f/0x490 [ 863.897515] ? __fsnotify_parent+0x47a/0xb10 [ 863.898075] ext4_file_read_iter+0x184/0x4c0 [ 863.898621] generic_file_splice_read+0x455/0x6d0 [ 863.899218] ? pipe_to_user+0x170/0x170 [ 863.899721] ? fsnotify_perm.part.0+0x22d/0x620 [ 863.900300] ? security_file_permission+0xb1/0xe0 [ 863.900904] ? pipe_to_user+0x170/0x170 [ 863.901399] do_splice_to+0x10e/0x160 [ 863.901906] splice_direct_to_actor+0x2fe/0x980 [ 863.902623] ? pipe_to_sendpage+0x380/0x380 [ 863.903265] ? do_splice_to+0x160/0x160 [ 863.903824] ? security_file_permission+0xb1/0xe0 [ 863.904522] do_splice_direct+0x1c4/0x290 [ 863.905147] ? splice_direct_to_actor+0x980/0x980 [ 863.905829] ? avc_policy_seqno+0x9/0x70 [ 863.906463] ? security_file_permission+0xb1/0xe0 [ 863.907060] do_sendfile+0x553/0x11e0 [ 863.907557] ? do_pwritev+0x270/0x270 [ 863.908071] ? wait_for_completion_io+0x270/0x270 [ 863.908766] ? rcu_read_lock_any_held+0x75/0xa0 [ 863.909421] ? vfs_write+0x354/0xb10 [ 863.909908] __x64_sys_sendfile64+0x1d1/0x210 [ 863.910465] ? __ia32_sys_sendfile+0x220/0x220 [ 863.911033] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 863.911683] ? syscall_enter_from_user_mode+0x1d/0x50 [ 863.912321] do_syscall_64+0x33/0x40 [ 863.912780] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 863.913415] RIP: 0033:0x7fe3014fcb19 [ 863.913882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 863.916447] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 863.917575] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 863.918532] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 863.919407] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 863.920277] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 863.921151] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 03:15:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2c, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d2420100120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37343139313330323700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b47010040000c00000000000000daf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000004600000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000010500)="ff030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000daf4655fdaf4655fdaf4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011600)="ed41000000080000daf4655fddf4655fddf4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2100}, {&(0x7f0000011700)="20000000541597055415970500000000daf4655f00"/32, 0x20, 0x2180}, {&(0x7f0000011800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000030000000", 0x40, 0x2200}, {&(0x7f0000011900)="20000000000000000000000000000000daf4655f00"/32, 0x20, 0x2280}, {&(0x7f0000011a00)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040000000", 0x40, 0x2300}, {&(0x7f0000011b00)="20000000000000000000000000000000daf4655f00"/32, 0x20, 0x2380}, {&(0x7f0000011c00)="c041000000400000daf4655fdaf4655fdaf4655f00000000000002004000000000000800000000000af301000400000000000000000000000800000020000000", 0x40, 0x2a00}, {&(0x7f0000011d00)="20000000000000000000000000000000daf4655f00"/32, 0x20, 0x2a80}, {&(0x7f0000011e00)="ed41000000080000ddf4655fddf4655fddf4655f00000000000002004000000000000800030000000af301000400000000000000000000000100000050000000000000000000000000000000000000000000000000000000000000000000000000000000eb7155bc00000000000000000000000000000000000000000000000020000000541597055415970554159705ddf4655f541597050000000000000000", 0xa0, 0x2b00}, {&(0x7f0000011f00)="ed8100001a040000ddf4655fddf4655fddf4655f00000000000001004000000000000800010000000af301000400000000000000000000000100000060000000000000000000000000000000000000000000000000000000000000000000000000000000af6989a500000000000000000000000000000000000000000000000020000000541597055415970554159705ddf4655f541597050000000000000000", 0xa0, 0x2c00}, {&(0x7f0000012000)="ffa1000026000000ddf4655fddf4655fddf4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3734313931333032372f66696c65302f66696c653000000000000000000000000000000000000000000000725ed7c600000000000000000000000000000000000000000000000020000000541597055415970554159705ddf4655f541597050000000000000000", 0xa0, 0x2d00}, {&(0x7f0000012100)="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", 0x1a0, 0x2e00}, {&(0x7f0000012300)="ed81000064000000ddf4655fddf4655fddf4655f00000000000001004000000000000800010000000af3010004000000000000000000000001000000900000000000000000000000000000000000000000000000000000000000000000000000000000003e5e55c600000000000000000000000000000000000000000000000020000000541597055415970554159705ddf4655f541597050000000000000000", 0xa0, 0x3000}, {&(0x7f0000012400)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000012500)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x20, 0x10000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000012700)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000012800)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000012a00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012b00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13000}, {&(0x7f0000012c00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13800}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x18000}, {&(0x7f0000012e00)="0200"/32, 0x20, 0x18400}, {&(0x7f0000012f00)="0300"/32, 0x20, 0x18800}, {&(0x7f0000013000)="0400"/32, 0x20, 0x18c00}, {&(0x7f0000013100)="0500"/32, 0x20, 0x19000}, {&(0x7f0000013200)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000800300"/96, 0x60, 0x19400}, {&(0x7f0000013300)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x20000}, {&(0x7f0000013400)="0200"/32, 0x20, 0x20400}, {&(0x7f0000013500)="0300"/32, 0x20, 0x20800}, {&(0x7f0000013600)="0400"/32, 0x20, 0x20c00}, {&(0x7f0000013700)="0500"/32, 0x20, 0x21000}, {&(0x7f0000013800)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000800300"/96, 0x60, 0x21400}, {&(0x7f0000013900)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x28000}, {&(0x7f0000013a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}, {&(0x7f0000013f00)='syzkallers\x00'/32, 0x20, 0x38000}, {&(0x7f0000014000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x48000}], 0x0, &(0x7f0000014100)) rmdir(&(0x7f0000000040)='./file0\x00') 03:15:01 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 03:15:01 executing program 5: r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, r0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x56de, &(0x7f0000001840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd=r1, 0x0, 0x0, 0x7fffffff, 0x2, 0x1, {0x0, 0x0, r1}}, 0x0) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) keyctl$chown(0x4, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x4778, 0xe81f, 0x3, &(0x7f00000001c0)={[0x4]}, 0x8) [ 863.972227] loop3: detected capacity change from 0 to 135266304 [ 864.019776] loop3: detected capacity change from 0 to 135266304 [ 864.029342] loop6: detected capacity change from 0 to 2102784 03:15:01 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 864.078003] loop4: detected capacity change from 0 to 1048576 03:15:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x1a1880, 0x1, 0x1}, 0x18) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000000000000000050186e77a108000300", @ANYRES32=r2], 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x200000c0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_io_uring_setup(0x3a75, &(0x7f0000000340), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x4000000}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r6, 0x8000000) syz_io_uring_submit(r9, r8, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r6, 0x58ab, 0x0, 0x0, 0x0, 0x300) [ 864.165769] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 864.228545] EXT4-fs error (device loop6): __ext4_get_inode_loc:4406: comm syz-executor.6: Invalid inode table block 0 in block_group 0 [ 864.236780] EXT4-fs (loop6): get root inode failed [ 864.238329] EXT4-fs (loop6): mount failed [ 864.274333] loop4: detected capacity change from 0 to 1048576 [ 864.287866] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 03:15:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 29) 03:15:15 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300), 0x0, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 03:15:15 executing program 4: [ 878.479081] loop6: detected capacity change from 0 to 2102784 syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2c, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d2420100120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37343139313330323700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b47010040000c00000000000000daf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000004600000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000010500)="ff030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000daf4655fdaf4655fdaf4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011600)="ed41000000080000daf4655fddf4655fddf4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2100}, {&(0x7f0000011700)="20000000541597055415970500000000daf4655f00"/32, 0x20, 0x2180}, {&(0x7f0000011800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000030000000", 0x40, 0x2200}, {&(0x7f0000011900)="20000000000000000000000000000000daf4655f00"/32, 0x20, 0x2280}, {&(0x7f0000011a00)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040000000", 0x40, 0x2300}, {&(0x7f0000011b00)="20000000000000000000000000000000daf4655f00"/32, 0x20, 0x2380}, {&(0x7f0000011c00)="c041000000400000daf4655fdaf4655fdaf4655f00000000000002004000000000000800000000000af301000400000000000000000000000800000020000000", 0x40, 0x2a00}, {&(0x7f0000011d00)="20000000000000000000000000000000daf4655f00"/32, 0x20, 0x2a80}, {&(0x7f0000011e00)="ed41000000080000ddf4655fddf4655fddf4655f00000000000002004000000000000800030000000af301000400000000000000000000000100000050000000000000000000000000000000000000000000000000000000000000000000000000000000eb7155bc00000000000000000000000000000000000000000000000020000000541597055415970554159705ddf4655f541597050000000000000000", 0xa0, 0x2b00}, {&(0x7f0000011f00)="ed8100001a040000ddf4655fddf4655fddf4655f00000000000001004000000000000800010000000af301000400000000000000000000000100000060000000000000000000000000000000000000000000000000000000000000000000000000000000af6989a500000000000000000000000000000000000000000000000020000000541597055415970554159705ddf4655f541597050000000000000000", 0xa0, 0x2c00}, {&(0x7f0000012000)="ffa1000026000000ddf4655fddf4655fddf4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3734313931333032372f66696c65302f66696c653000000000000000000000000000000000000000000000725ed7c600000000000000000000000000000000000000000000000020000000541597055415970554159705ddf4655f541597050000000000000000", 0xa0, 0x2d00}, {&(0x7f0000012100)="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", 0x1a0, 0x2e00}, {&(0x7f0000012300)="ed81000064000000ddf4655fddf4655fddf4655f00000000000001004000000000000800010000000af3010004000000000000000000000001000000900000000000000000000000000000000000000000000000000000000000000000000000000000003e5e55c600000000000000000000000000000000000000000000000020000000541597055415970554159705ddf4655f541597050000000000000000", 0xa0, 0x3000}, {&(0x7f0000012400)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000012500)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x20, 0x10000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000012700)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000012800)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000012a00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012b00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13000}, {&(0x7f0000012c00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13800}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x18000}, {&(0x7f0000012e00)="0200"/32, 0x20, 0x18400}, {&(0x7f0000012f00)="0300"/32, 0x20, 0x18800}, {&(0x7f0000013000)="0400"/32, 0x20, 0x18c00}, {&(0x7f0000013100)="0500"/32, 0x20, 0x19000}, {&(0x7f0000013200)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000800300"/96, 0x60, 0x19400}, {&(0x7f0000013300)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x20000}, {&(0x7f0000013400)="0200"/32, 0x20, 0x20400}, {&(0x7f0000013500)="0300"/32, 0x20, 0x20800}, {&(0x7f0000013600)="0400"/32, 0x20, 0x20c00}, {&(0x7f0000013700)="0500"/32, 0x20, 0x21000}, {&(0x7f0000013800)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000800300"/96, 0x60, 0x21400}, {&(0x7f0000013900)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x28000}, {&(0x7f0000013a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}, {&(0x7f0000013f00)='syzkallers\x00'/32, 0x20, 0x38000}, {&(0x7f0000014000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x48000}], 0x0, &(0x7f0000014100)) rmdir(&(0x7f0000000040)='./file0\x00') 03:15:15 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(0xffffffffffffffff, 0x0, 0xfff, 0x4) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}}, 0x108) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x290d) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) timer_create(0x3, &(0x7f0000000240)={0x0, 0x2b, 0x0, @tid=r1}, &(0x7f00000002c0)) socket$inet6_udplite(0xa, 0x2, 0x88) timer_create(0x6, &(0x7f0000000300)={0x0, 0x1f, 0x4, @thr={&(0x7f00000003c0)="f547a3579efdc5a1842d2359b118aeefd26b23886cc66b9fb49926be32b8d0cc60a1ba0bf062194dddf7cf269c9d32af85d0d7dbe6a74721289ce54e56c17a928d8eefe1cf455e536790f5b2ac17722eabf7b4e5a411d2e471f06623f01a9669a0d5cb13f6e5ce891df47e78a95448cba86b3ac34d45c9674cd919ce9b80a643bd74259b6b93cfc8cf7765d1e31ffc64e15a798ceb6e1761fdaa4a06836e82639a69e866e66dc82cb2869219cae76515b9b6ba123751", &(0x7f00000004c0)="bf046798d926b975f0d7e87e8a203161e7d85b8e89b2a60d9ec6fe9cf3f800463cc9eeae5c83c578a3867860a34a035665c26a04ddc7ce8b3f3f41c991b84dce505cc9f2de88a2e1c476fbb9fe40b955183b3d2daff8f1f2bdbc"}}, &(0x7f0000000340)=0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/bus/machinecheck', 0x6281, 0x19) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0xe132, 0x10000, 0x0, 0x0, 0x0, 0x10004}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)) timer_delete(r2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1114}, 0x1, 0x0, 0x0, 0x80000}, 0x40) clone3(&(0x7f00000001c0)={0xc8182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:15:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fadvise64(r0, 0x1000, 0x1, 0x5) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000400)) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) dup(r1) syz_io_uring_setup(0x44a7, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x0, 0x800}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000004c0), &(0x7f0000000100)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) 03:15:15 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:15:15 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x4}}, 0x0, 0xd, 0xffffffffffffffff, 0xf) lsetxattr$security_selinux(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), &(0x7f0000000340)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7f, 0x40000) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10010, r1, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x110, r0, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r4}}, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, @in_args={0x2}}, './file0\x00'}) 03:15:15 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6d7cf708bc06516e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x865}, 0x28) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r1, 0x8) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xc0, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3c99}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffe1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x40080) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) [ 878.506321] EXT4-fs error (device loop6): __ext4_get_inode_loc:4406: comm syz-executor.6: Invalid inode table block 0 in block_group 0 [ 878.508125] EXT4-fs (loop6): get root inode failed [ 878.508785] EXT4-fs (loop6): mount failed [ 878.534815] loop4: detected capacity change from 0 to 1048576 [ 878.539111] audit: type=1400 audit(1748056515.790:65): avc: denied { relabelto } for pid=7304 comm="syz-executor.7" name="file0" dev="sda" ino=16051 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:dlm_control_device_t:s0 tclass=file permissive=1 [ 878.559462] FAULT_INJECTION: forcing a failure. [ 878.559462] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 878.562146] CPU: 1 PID: 7310 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 878.563608] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 878.565478] Call Trace: [ 878.566065] dump_stack+0x107/0x167 [ 878.566847] should_fail.cold+0x5/0xa [ 878.567669] __alloc_pages_nodemask+0x182/0x600 [ 878.568670] ? xa_load+0x12d/0x2c0 [ 878.569441] ? lock_downgrade+0x6d0/0x6d0 [ 878.570345] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 878.571668] alloc_pages_current+0x187/0x280 [ 878.572623] __page_cache_alloc+0x2d2/0x360 [ 878.573566] page_cache_ra_unbounded+0x207/0x6f0 03:15:15 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300), 0x0, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) [ 878.574615] ? read_pages+0xbc0/0xbc0 [ 878.575623] ? __lock_page_or_retry+0x4e0/0x4e0 [ 878.576645] ondemand_readahead+0x8e5/0x1150 [ 878.577606] page_cache_sync_ra+0x138/0x170 [ 878.578554] generic_file_buffered_read+0xc8e/0x2920 [ 878.579751] ? pagecache_get_page+0xc80/0xc80 [ 878.580715] ? kasan_save_stack+0x32/0x40 [ 878.581615] ? do_splice_direct+0x1c4/0x290 [ 878.582624] ? do_sendfile+0x553/0x11e0 [ 878.583481] ? __x64_sys_sendfile64+0x1d1/0x210 [ 878.584484] ? do_syscall_64+0x33/0x40 [ 878.585326] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 878.586490] ? perf_trace_lock+0xac/0x490 [ 878.587395] generic_file_read_iter+0x33f/0x490 [ 878.588403] ? __fsnotify_parent+0x47a/0xb10 [ 878.589365] ext4_file_read_iter+0x184/0x4c0 [ 878.590337] generic_file_splice_read+0x455/0x6d0 [ 878.591383] ? pipe_to_user+0x170/0x170 [ 878.592253] ? fsnotify_perm.part.0+0x22d/0x620 [ 878.593265] ? security_file_permission+0xb1/0xe0 [ 878.594318] ? pipe_to_user+0x170/0x170 [ 878.595178] do_splice_to+0x10e/0x160 [ 878.596095] splice_direct_to_actor+0x2fe/0x980 [ 878.597105] ? pipe_to_sendpage+0x380/0x380 [ 878.598052] ? do_splice_to+0x160/0x160 [ 878.598911] ? security_file_permission+0xb1/0xe0 [ 878.599962] do_splice_direct+0x1c4/0x290 [ 878.600859] ? splice_direct_to_actor+0x980/0x980 [ 878.601904] ? avc_policy_seqno+0x9/0x70 [ 878.602791] ? security_file_permission+0xb1/0xe0 [ 878.603845] do_sendfile+0x553/0x11e0 [ 878.604681] ? do_pwritev+0x270/0x270 [ 878.605504] ? wait_for_completion_io+0x270/0x270 [ 878.606557] ? rcu_read_lock_any_held+0x75/0xa0 [ 878.607561] ? vfs_write+0x354/0xb10 [ 878.608375] __x64_sys_sendfile64+0x1d1/0x210 [ 878.609345] ? __ia32_sys_sendfile+0x220/0x220 [ 878.610349] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 878.611562] ? syscall_enter_from_user_mode+0x1d/0x50 [ 878.612673] do_syscall_64+0x33/0x40 [ 878.613484] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 878.614600] RIP: 0033:0x7fe3014fcb19 [ 878.615413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 878.619396] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 878.621048] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 878.622602] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 878.624143] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 878.625693] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 878.627328] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 878.639349] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 878.641276] audit: type=1400 audit(1748056515.893:66): avc: denied { map } for pid=7304 comm="syz-executor.7" path="/syzkaller-testdir044052904/syzkaller.iMa4am/87/file0" dev="sda" ino=16051 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:dlm_control_device_t:s0 tclass=file permissive=1 [ 878.658314] audit: type=1400 audit(1748056515.893:67): avc: denied { read } for pid=7304 comm="syz-executor.7" path="/syzkaller-testdir044052904/syzkaller.iMa4am/87/file0" dev="sda" ino=16051 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:dlm_control_device_t:s0 tclass=file permissive=1 [ 878.719928] loop6: detected capacity change from 0 to 2102784 [ 878.726207] audit: type=1400 audit(1748056515.903:68): avc: denied { ioctl } for pid=7304 comm="syz-executor.7" path="/syzkaller-testdir044052904/syzkaller.iMa4am/87/file0" dev="sda" ino=16051 ioctlcmd=0x937e scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:dlm_control_device_t:s0 tclass=file permissive=1 03:15:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0xa00, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x404488e}, 0x8000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0xffffff7f, &(0x7f0000000680)={&(0x7f00000000c0)={0x38, r1, 0x201, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bond\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x38}}, 0x0) [ 878.771381] EXT4-fs error (device loop6): __ext4_get_inode_loc:4406: comm syz-executor.6: Invalid inode table block 0 in block_group 0 [ 878.791411] audit: type=1400 audit(1748056515.908:69): avc: denied { relabelfrom } for pid=7304 comm="syz-executor.7" name="file0" dev="sda" ino=16051 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:dlm_control_device_t:s0 tclass=file permissive=1 [ 878.796770] EXT4-fs (loop6): get root inode failed [ 878.797916] EXT4-fs (loop6): mount failed 03:15:16 executing program 4: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r0}}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x1811c1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000005c0)=[{0x0, 0x49}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000300)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x2007, @fd_index, 0x6, 0x6, 0x1ff, 0xa, 0x0, {0x3, r6}}, 0x7) syz_io_uring_setup(0x6e5f, &(0x7f0000000200)={0x0, 0x13e0, 0x1, 0x2, 0x80005}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000280)) r8 = inotify_init1(0x80000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2004, @fd=r8, 0x87, 0x0, 0x0, 0x10, 0x0, {0x1, r0}}, 0x8001) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40200, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[]) r9 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x1, 0x18900) ioctl$SG_GET_LOW_DMA(r9, 0x227a, &(0x7f00000004c0)) mount$9p_tcp(&(0x7f00000000c0), &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180), 0x1432, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e23,dfltgid=', @ANYRESHEX=0x0, @ANYRESDEC, @ANYRESDEC, @ANYBLOB="2c61756469742c6f626a5f757365723d5c217d277d2c736d61636b66736465663d2e7b3a7b7d5d2c646566636f6e746578903d73746166665f752c686173682c61707072616973655f747970653d696d617369672c616e736d7574653d65787434002c00000000030000000000"]) [ 878.843246] audit: type=1400 audit(1748056515.982:70): avc: denied { getattr } for pid=289 comm="syz-executor.7" path="/syzkaller-testdir044052904/syzkaller.iMa4am/87/file0" dev="sda" ino=16051 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:dlm_control_device_t:s0 tclass=file permissive=1 [ 878.892115] audit: type=1400 audit(1748056515.983:71): avc: denied { unlink } for pid=289 comm="syz-executor.7" name="file0" dev="sda" ino=16051 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:dlm_control_device_t:s0 tclass=file permissive=1 03:15:16 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0814000001000001010053500701beef005252050181505824016d41", 0x34, 0xb800}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12"]) 03:15:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 30) 03:15:16 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:15:16 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a7b, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) getsockname$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5548, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x1, 0x3c8, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000400)) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000100)={0x7fff, 0x0, 0x6, 0x5, 0x101}, 0xc) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 878.928282] FAULT_INJECTION: forcing a failure. [ 878.928282] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 878.929843] CPU: 0 PID: 7337 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 878.930718] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 878.931768] Call Trace: [ 878.932104] dump_stack+0x107/0x167 [ 878.932569] should_fail.cold+0x5/0xa [ 878.933059] __alloc_pages_nodemask+0x182/0x600 [ 878.933651] ? xa_load+0x12d/0x2c0 [ 878.934108] ? lock_downgrade+0x6d0/0x6d0 [ 878.934637] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 878.935407] alloc_pages_current+0x187/0x280 [ 878.935968] __page_cache_alloc+0x2d2/0x360 [ 878.936517] page_cache_ra_unbounded+0x207/0x6f0 [ 878.937123] ? read_pages+0xbc0/0xbc0 [ 878.937606] ? __lock_page_or_retry+0x4e0/0x4e0 [ 878.938210] ondemand_readahead+0x8e5/0x1150 [ 878.938772] page_cache_sync_ra+0x138/0x170 [ 878.939353] generic_file_buffered_read+0xc8e/0x2920 [ 878.940010] ? pagecache_get_page+0xc80/0xc80 [ 878.940576] ? kasan_save_stack+0x32/0x40 [ 878.941104] ? do_splice_direct+0x1c4/0x290 [ 878.941655] ? do_sendfile+0x553/0x11e0 [ 878.942167] ? __x64_sys_sendfile64+0x1d1/0x210 [ 878.942735] ? do_syscall_64+0x33/0x40 [ 878.943230] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 878.943902] ? perf_trace_lock+0xac/0x490 [ 878.944434] generic_file_read_iter+0x33f/0x490 [ 878.945027] ? __fsnotify_parent+0x47a/0xb10 [ 878.945588] ext4_file_read_iter+0x184/0x4c0 [ 878.946153] generic_file_splice_read+0x455/0x6d0 [ 878.946765] ? pipe_to_user+0x170/0x170 [ 878.947276] ? fsnotify_perm.part.0+0x22d/0x620 [ 878.947870] ? security_file_permission+0xb1/0xe0 [ 878.948483] ? pipe_to_user+0x170/0x170 [ 878.948987] do_splice_to+0x10e/0x160 [ 878.949471] splice_direct_to_actor+0x2fe/0x980 [ 878.950071] ? pipe_to_sendpage+0x380/0x380 [ 878.950620] ? do_splice_to+0x160/0x160 [ 878.951121] ? security_file_permission+0xb1/0xe0 [ 878.951738] do_splice_direct+0x1c4/0x290 [ 878.952260] ? splice_direct_to_actor+0x980/0x980 [ 878.952880] ? avc_policy_seqno+0x9/0x70 [ 878.953378] ? security_file_permission+0xb1/0xe0 [ 878.954001] do_sendfile+0x553/0x11e0 [ 878.954492] ? do_pwritev+0x270/0x270 [ 878.954978] ? wait_for_completion_io+0x270/0x270 [ 878.955594] ? rcu_read_lock_any_held+0x75/0xa0 [ 878.956181] ? vfs_write+0x354/0xb10 [ 878.956634] __x64_sys_sendfile64+0x1d1/0x210 [ 878.957203] ? __ia32_sys_sendfile+0x220/0x220 [ 878.957764] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 878.958429] ? syscall_enter_from_user_mode+0x1d/0x50 [ 878.959055] do_syscall_64+0x33/0x40 [ 878.959529] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 878.960180] RIP: 0033:0x7fe3014fcb19 [ 878.960651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 878.963009] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 878.963998] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 878.964918] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 878.965849] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 878.966717] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 878.967625] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 878.968645] hpet: Lost 1 RTC interrupts [ 879.013812] loop3: detected capacity change from 0 to 135266304 [ 879.050717] loop3: detected capacity change from 0 to 135266304 03:15:29 executing program 1: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000480), 0x40001, 0x0) readahead(r0, 0x7, 0x401) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = creat(0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x3a1102, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x100000001) r6 = openat(r2, 0x0, 0x100, 0x2) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x100000001) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r6) flock(0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x6, 0x3f, 0x8, 0x63, 0x0, 0x56b, 0x8410, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000240), 0xf}, 0x40000, 0xffffffff, 0x0, 0x0, 0x2, 0x8, 0x1ff, 0x0, 0x1f, 0x0, 0xa54c}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x9) r8 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100b079d4fe9ff4e8c9e500de1d9c37e955d6e85a8ddfe4086e38d1d095481d5d8d2987dccf0132eb619a49312a8e76aa2a394323af5ef37f6944ed6ac09fe1d5433b87934e6b67cad5b472775a0d52ed6adf3c50a69f9799223ab1eb9ae1eb85cfe2ad7a7c91c520ec67e852892f1d95761da2ff162dbefb80ac23a67ac73a9242279afd4e090ac6b0b83b76ef8d3fdd583875f0dfe4ffb3b620f1147ef4efca4fbd681bbaded90b4cec4b706fea3f949bcbeb32ad03bf176972a06a1aa0815623a9baaa60349bc3023e000000", @ANYRES32=r8, @ANYBLOB="00000000000000003a09a030674a871cdefbe1a1aacd9d2e2f66696c65300011cc4c77a8000001627605a674e2a441441424586dfb2e35d0c7ed3cb86a3f9a88f518581a9c99830598dc128fa48caa530a87e9ca5f06e3fcccbc4d7bdc36500822bc8d9b502254f8a49c32c78fc33d81926672649094a2c49815f1f1a9eeb3ac7af7ffb06065ea316f014a4f617725"]) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000004c0)) openat(r1, &(0x7f00000000c0)='./file1\x00', 0x448081, 0x100) 03:15:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x3, 0x4) bind(r0, &(0x7f0000000180)=@l2tp={0x2, 0x0, @multicast2}, 0x80) close(r0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x1, 0x4, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFULA_CFG_MODE={0xa, 0x2, {0x2}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x10000}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x40a, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0x2, 0x1}}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}]}, 0x60}}, 0x4000000) 03:15:29 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300), 0x0, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 03:15:29 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, 0x0}, 0x0, 0x8abb4d2a8b028460}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r4 = socket$netlink(0x10, 0x3, 0x0) getpeername$netlink(r4, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000500)) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, 0x15}, 0x80010001) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000080), 0x1) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00') r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9, 0x10010, r0, 0x8000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x4, 0x2007, @fd_index=0x7, 0x7, &(0x7f0000000600)="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", 0xfc, 0x2, 0x0, {0x0, r6}}, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000002140), 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:15:29 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000140)=@isdn, 0x0, 0x80800}, 0x81) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x0, 0x1, 0x0, 0x9e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000240)=@ethernet={0x0, @multicast}, &(0x7f0000000300)=0x80) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x10000) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r3}}, 0x101) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000580), &(0x7f00000005c0)=0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000500)='system.posix_acl_default\x00', &(0x7f0000000ac0)={{}, {0x1, 0x5}, [{0x2, 0x4}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x4}, {0x2, 0x4, 0xee00}, {0x2, 0x0, 0xee00}, {0x2, 0x0, 0xee00}, {0x2, 0x7}, {0x2, 0x5}, {0x2, 0x0, 0xee00}], {0x4, 0x5}, [{0x8, 0x9}, {0x8, 0x2}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x3}], {0x10, 0x2}, {0x20, 0x1}}, 0x94, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x0, 0x80800, 0x1, {0x0, r3}}, 0x80000001) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x86) [ 892.476260] loop6: detected capacity change from 0 to 2102784 [ 892.485957] FAULT_INJECTION: forcing a failure. [ 892.485957] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 892.488052] CPU: 0 PID: 7367 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 892.489094] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 892.490459] Call Trace: [ 892.490900] dump_stack+0x107/0x167 [ 892.491506] should_fail.cold+0x5/0xa [ 892.492139] __alloc_pages_nodemask+0x182/0x600 [ 892.492895] ? xa_load+0x12d/0x2c0 [ 892.493476] ? lock_downgrade+0x6d0/0x6d0 [ 892.494137] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 892.495137] alloc_pages_current+0x187/0x280 [ 892.495842] __page_cache_alloc+0x2d2/0x360 [ 892.496565] page_cache_ra_unbounded+0x207/0x6f0 [ 892.497350] ? read_pages+0xbc0/0xbc0 [ 892.497975] ? __lock_page_or_retry+0x4e0/0x4e0 [ 892.498747] ondemand_readahead+0x8e5/0x1150 [ 892.499479] page_cache_sync_ra+0x138/0x170 [ 892.500088] generic_file_buffered_read+0xc8e/0x2920 [ 892.500789] ? pagecache_get_page+0xc80/0xc80 [ 892.501513] ? kasan_save_stack+0x32/0x40 [ 892.502222] ? do_splice_direct+0x1c4/0x290 [ 892.502926] ? do_sendfile+0x553/0x11e0 [ 892.503563] ? __x64_sys_sendfile64+0x1d1/0x210 [ 892.504320] ? do_syscall_64+0x33/0x40 [ 892.504954] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 892.505797] ? perf_trace_lock+0xac/0x490 [ 892.506492] generic_file_read_iter+0x33f/0x490 [ 892.507249] ? __fsnotify_parent+0x47a/0xb10 [ 892.507970] ext4_file_read_iter+0x184/0x4c0 [ 892.508686] generic_file_splice_read+0x455/0x6d0 [ 892.509463] ? pipe_to_user+0x170/0x170 [ 892.510114] ? fsnotify_perm.part.0+0x22d/0x620 [ 892.510876] ? security_file_permission+0xb1/0xe0 [ 892.511674] ? pipe_to_user+0x170/0x170 [ 892.512333] do_splice_to+0x10e/0x160 [ 892.512952] splice_direct_to_actor+0x2fe/0x980 [ 892.513710] ? pipe_to_sendpage+0x380/0x380 [ 892.514434] ? do_splice_to+0x160/0x160 [ 892.515082] ? security_file_permission+0xb1/0xe0 [ 892.515879] do_splice_direct+0x1c4/0x290 [ 892.516557] ? splice_direct_to_actor+0x980/0x980 [ 892.517330] ? avc_policy_seqno+0x9/0x70 [ 892.517999] ? security_file_permission+0xb1/0xe0 [ 892.518799] do_sendfile+0x553/0x11e0 [ 892.519404] ? do_pwritev+0x270/0x270 [ 892.520024] ? wait_for_completion_io+0x270/0x270 [ 892.520820] ? rcu_read_lock_any_held+0x75/0xa0 [ 892.521563] ? vfs_write+0x354/0xb10 [ 892.522430] __x64_sys_sendfile64+0x1d1/0x210 [ 892.523689] ? __ia32_sys_sendfile+0x220/0x220 [ 892.524969] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 892.526419] ? syscall_enter_from_user_mode+0x1d/0x50 [ 892.527544] do_syscall_64+0x33/0x40 [ 892.528362] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 892.529411] perf: interrupt took too long (12757 > 12658), lowering kernel.perf_event_max_sample_rate to 15000 [ 892.529479] RIP: 0033:0x7fe3014fcb19 [ 892.529505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:15:29 executing program 5: semget$private(0x0, 0x2, 0x20) r0 = semget$private(0x0, 0x2, 0x41) semctl$IPC_RMID(r0, 0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x81, 0x800}, {0x5, 0x5, 0x1000}, {0x1, 0x4}, {0x3, 0x1}, {0x2, 0x836, 0x1000}], 0x5, &(0x7f0000000100)={0x77359400}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) clone3(&(0x7f0000000000)={0x110208400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, &(0x7f0000000400)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000080)={0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) getpeername$netlink(r4, &(0x7f0000000040), &(0x7f0000000080)=0xc) r5 = dup3(r1, r4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x8040}, 0x1}, 0x6) syz_io_uring_setup(0x1012, &(0x7f00000002c0)={0x0, 0x990c, 0x2, 0x2, 0x86, 0x0, r5}, &(0x7f0000ff6000/0x8000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(0xffffffffffffffff, 0xf) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f00000003c0)=r3) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r4, 0x80286722, &(0x7f0000000280)={&(0x7f0000000180)=""/225, 0xe1, 0x8}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000140)=r3) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000140)=r3) 03:15:29 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:15:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 31) [ 892.536680] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 892.538606] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 892.540198] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 892.541788] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 892.543381] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 892.544970] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 892.546884] hpet: Lost 2 RTC interrupts [ 892.563463] EXT4-fs error (device loop6): __ext4_get_inode_loc:4406: comm syz-executor.6: Invalid inode table block 0 in block_group 0 [ 892.573502] EXT4-fs (loop6): get root inode failed [ 892.575015] EXT4-fs (loop6): mount failed [ 892.580298] perf: interrupt took too long (15971 > 15946), lowering kernel.perf_event_max_sample_rate to 12000 [ 892.583268] audit: type=1326 audit(1748056529.830:72): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7363 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263d4e1b19 code=0x7ffc0000 [ 892.588251] audit: type=1326 audit(1748056529.833:73): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7363 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263d4e1b19 code=0x7ffc0000 03:15:29 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000580)=ANY=[@ANYBLOB="76daab66f233ce92803f32df352cd6917d9d472f0f384f777111e38a9233ce4964c007cb0d11a34994d1a1a6b8652febc331bc3fc96f6ba3d8bfaf175474f0c566e2e17e88862255193fadb359760d8cdf840b4ef0a8986876d0c36e15dafadc1db67f130097be15e1b03b10fcecd265145df7919fa4a5deef9a1ef8fc542f7f27ddcf80d8d546a4a101434fade620787701d71b9727bfdfa38c01da01a1570645931481418bb2e6c082d7dedd7ff10441c7e9b38fec99b27596b9d7e9aea3ab9b90842e62121d12e2aa935a93d6724e6f041e7ca6880d40dd27f4ca52c04cdb8b"], 0x28) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, 0x0, 0x40011) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfff000}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xfffffdde, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xffffffffffffffd8, 0x3}, 0x200000}], 0x1, 0x40000) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='personality\x00') r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x1, r5, 0x1, 0x8, 0x6, @random="190002400a00"}, 0x14) sendmsg$inet6(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="2fb38c8ee559a3775212a8215410c00094cb890bdae00ac2168ec3b934ddc2f411c94e2a3641b9baa10d1774e7e1a920d391cc454ef11389491198456f1b41773eea03a518ba1fa6fbeb9fdc498af01ff0fff27f7a5de48a1579c94bc8ff751919005f1c9a9b52a3b0bb9eda05f675f4f6f3159795a6384a50ce3d99e366905687e7b3f8876aaa58f20fc79f320d4c9d7d", 0x91}], 0x1, &(0x7f0000000300)=[@hoplimit_2292={{0x14}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x6c, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r5}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x3b, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x5091347c}]}}}, @hopopts={{0x18, 0x29, 0x36, {0x62}}}], 0xb0}, 0x4040010) r6 = accept4(0xffffffffffffffff, &(0x7f0000000440)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000500)=0x80, 0x80800) dup(r6) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000140)={0x0, 0x7ff, 0x10000, 0x5, 0x11, "04e8d08735683e5c46977a3ec235ef7a26ccaf"}) [ 892.716108] audit: type=1326 audit(1748056529.964:74): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7363 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f263d4e1b19 code=0x7ffc0000 [ 892.728748] audit: type=1326 audit(1748056529.968:75): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7363 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263d4e1b19 code=0x7ffc0000 [ 892.754868] audit: type=1326 audit(1748056529.968:76): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7363 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f263d4e1b19 code=0x7ffc0000 [ 892.759734] audit: type=1326 audit(1748056529.969:77): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7363 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263d4e1b19 code=0x7ffc0000 [ 892.765200] audit: type=1326 audit(1748056529.969:78): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7363 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f263d4e1b19 code=0x7ffc0000 [ 892.771698] audit: type=1326 audit(1748056529.972:79): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7363 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263d4e1b19 code=0x7ffc0000 [ 892.778414] audit: type=1326 audit(1748056529.972:80): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7363 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f263d4e1b19 code=0x7ffc0000 03:15:30 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="0300000004", 0x5, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 03:15:30 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 32) 03:15:30 executing program 7: r0 = fork() tkill(r0, 0x26) pidfd_open(r0, 0x0) 03:15:30 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r0, 0x8) r1 = syz_open_dev$sg(0x0, 0x0, 0x2001) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xe05c6d79d37bf7bf, 0x20031, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x205e8b, &(0x7f0000000040)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000004c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001540)=""/4109, 0x100d}], 0x1) ioctl$RTC_AIE_ON(r2, 0x7002) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000004c0)={{r2}, "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"}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000002580)=ANY=[@ANYBLOB="9a0aeebc9ff69b7b1800000048cc1e0700710b29f05f99fdb65a32daaaca2d0610e751250537b3f8ee91ca204016032f13e5ad7482a3ab582a46116cecd86e52cb690337b7d2c0474c4544cfa0a1d8d5a09c4b47380c4bd336a7fc3b3431c565f2825eebafa919ce8dd86089", @ANYRES32=r5, @ANYBLOB="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"]) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000010000100000003000000009600000900050000000000000005ffffffff6707d69be8f1ebad41c9a32f4687342d000000"], 0x24}}, 0x0) [ 892.951777] loop6: detected capacity change from 0 to 2102784 03:15:30 executing program 5: semget$private(0x0, 0x2, 0x20) r0 = semget$private(0x0, 0x2, 0x41) semctl$IPC_RMID(r0, 0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x81, 0x800}, {0x5, 0x5, 0x1000}, {0x1, 0x4}, {0x3, 0x1}, {0x2, 0x836, 0x1000}], 0x5, &(0x7f0000000100)={0x77359400}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) clone3(&(0x7f0000000000)={0x110208400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, &(0x7f0000000400)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000080)={0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) getpeername$netlink(r4, &(0x7f0000000040), &(0x7f0000000080)=0xc) r5 = dup3(r1, r4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x8040}, 0x1}, 0x6) syz_io_uring_setup(0x1012, &(0x7f00000002c0)={0x0, 0x990c, 0x2, 0x2, 0x86, 0x0, r5}, &(0x7f0000ff6000/0x8000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000380)) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(0xffffffffffffffff, 0xf) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f00000003c0)=r3) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r4, 0x80286722, &(0x7f0000000280)={&(0x7f0000000180)=""/225, 0xe1, 0x8}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000140)=r3) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000140)=r3) [ 893.026203] FAULT_INJECTION: forcing a failure. [ 893.026203] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 893.028969] CPU: 1 PID: 7398 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 893.030765] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 893.032704] Call Trace: [ 893.033538] dump_stack+0x107/0x167 [ 893.034390] should_fail.cold+0x5/0xa [ 893.035257] __alloc_pages_nodemask+0x182/0x600 [ 893.036314] ? xa_load+0x12d/0x2c0 [ 893.037107] ? lock_downgrade+0x6d0/0x6d0 [ 893.038063] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 893.039461] alloc_pages_current+0x187/0x280 [ 893.040474] __page_cache_alloc+0x2d2/0x360 [ 893.041480] page_cache_ra_unbounded+0x207/0x6f0 [ 893.042603] ? read_pages+0xbc0/0xbc0 [ 893.043477] ? __lock_page_or_retry+0x4e0/0x4e0 [ 893.044689] ondemand_readahead+0x8e5/0x1150 [ 893.045710] page_cache_sync_ra+0x138/0x170 [ 893.046722] generic_file_buffered_read+0xc8e/0x2920 [ 893.047906] ? pagecache_get_page+0xc80/0xc80 [ 893.048976] ? kasan_save_stack+0x32/0x40 [ 893.049920] ? do_splice_direct+0x1c4/0x290 [ 893.050889] ? do_sendfile+0x553/0x11e0 [ 893.051796] ? __x64_sys_sendfile64+0x1d1/0x210 [ 893.053053] ? do_syscall_64+0x33/0x40 [ 893.053928] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 893.055252] ? perf_trace_lock+0xac/0x490 [ 893.056292] generic_file_read_iter+0x33f/0x490 [ 893.057510] ? __fsnotify_parent+0x47a/0xb10 [ 893.058668] ext4_file_read_iter+0x184/0x4c0 [ 893.059892] generic_file_splice_read+0x455/0x6d0 [ 893.060982] ? pipe_to_user+0x170/0x170 [ 893.061910] ? fsnotify_perm.part.0+0x22d/0x620 [ 893.062969] ? security_file_permission+0xb1/0xe0 [ 893.064066] ? pipe_to_user+0x170/0x170 [ 893.064965] do_splice_to+0x10e/0x160 [ 893.065840] splice_direct_to_actor+0x2fe/0x980 [ 893.066922] ? pipe_to_sendpage+0x380/0x380 [ 893.067919] ? do_splice_to+0x160/0x160 [ 893.068824] ? security_file_permission+0xb1/0xe0 [ 893.069944] do_splice_direct+0x1c4/0x290 [ 893.070892] ? splice_direct_to_actor+0x980/0x980 [ 893.071975] ? avc_policy_seqno+0x9/0x70 [ 893.072897] ? security_file_permission+0xb1/0xe0 [ 893.074019] do_sendfile+0x553/0x11e0 [ 893.074934] ? do_pwritev+0x270/0x270 [ 893.075819] ? wait_for_completion_io+0x270/0x270 [ 893.077074] ? rcu_read_lock_any_held+0x75/0xa0 [ 893.078187] ? vfs_write+0x354/0xb10 [ 893.079078] __x64_sys_sendfile64+0x1d1/0x210 [ 893.080326] ? __ia32_sys_sendfile+0x220/0x220 [ 893.081381] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 893.082603] ? syscall_enter_from_user_mode+0x1d/0x50 [ 893.083807] do_syscall_64+0x33/0x40 [ 893.084671] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 893.085895] RIP: 0033:0x7fe3014fcb19 [ 893.086865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 893.091776] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 893.093544] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 893.095202] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 893.097159] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 893.099112] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 893.100749] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 03:15:30 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:15:30 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r2, 0x8) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) fallocate(r2, 0x11, 0x80, 0x7fff) pwrite64(r0, &(0x7f00000000c0)="04", 0x1, 0x3ff03) lseek(r1, 0x0, 0x3) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r3, 0x8) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) ioctl$CDROMPLAYBLK(r3, 0x5317, &(0x7f0000000040)={0x6, 0x2}) [ 893.112703] EXT4-fs error (device loop6): __ext4_get_inode_loc:4406: comm syz-executor.6: Invalid inode table block 0 in block_group 0 [ 893.116066] loop4: detected capacity change from 0 to 16776704 [ 893.132810] EXT4-fs (loop6): get root inode failed [ 893.134281] EXT4-fs (loop6): mount failed 03:15:30 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 33) 03:15:30 executing program 3: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x0, 0x8}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r2, 0x8) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) signalfd4(r2, &(0x7f0000000000)={[0x7]}, 0x8, 0x80000) [ 893.266639] FAULT_INJECTION: forcing a failure. [ 893.266639] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 893.269332] CPU: 1 PID: 7420 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 893.271040] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 893.272796] Call Trace: [ 893.273473] dump_stack+0x107/0x167 [ 893.274302] should_fail.cold+0x5/0xa [ 893.275145] __alloc_pages_nodemask+0x182/0x600 [ 893.276141] ? xa_load+0x12d/0x2c0 [ 893.276904] ? lock_downgrade+0x6d0/0x6d0 [ 893.277780] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 893.279080] alloc_pages_current+0x187/0x280 [ 893.280021] __page_cache_alloc+0x2d2/0x360 [ 893.281131] page_cache_ra_unbounded+0x207/0x6f0 [ 893.282173] ? read_pages+0xbc0/0xbc0 [ 893.283142] ? __lock_page_or_retry+0x4e0/0x4e0 [ 893.284142] ondemand_readahead+0x8e5/0x1150 [ 893.285204] page_cache_sync_ra+0x138/0x170 [ 893.286184] generic_file_buffered_read+0xc8e/0x2920 [ 893.287290] ? pagecache_get_page+0xc80/0xc80 [ 893.288407] ? kasan_save_stack+0x32/0x40 [ 893.289299] ? do_splice_direct+0x1c4/0x290 [ 893.290409] ? do_sendfile+0x553/0x11e0 [ 893.291432] ? __x64_sys_sendfile64+0x1d1/0x210 [ 893.292521] ? do_syscall_64+0x33/0x40 [ 893.293341] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 893.294469] ? perf_trace_lock+0xac/0x490 [ 893.295501] generic_file_read_iter+0x33f/0x490 [ 893.296514] ? __fsnotify_parent+0x47a/0xb10 [ 893.297500] ext4_file_read_iter+0x184/0x4c0 [ 893.298493] generic_file_splice_read+0x455/0x6d0 [ 893.299561] ? pipe_to_user+0x170/0x170 [ 893.300548] ? fsnotify_perm.part.0+0x22d/0x620 [ 893.301532] ? security_file_permission+0xb1/0xe0 [ 893.302564] ? pipe_to_user+0x170/0x170 [ 893.303403] do_splice_to+0x10e/0x160 [ 893.304219] splice_direct_to_actor+0x2fe/0x980 [ 893.305216] ? pipe_to_sendpage+0x380/0x380 [ 893.306149] ? do_splice_to+0x160/0x160 [ 893.307047] ? security_file_permission+0xb1/0xe0 [ 893.308101] do_splice_direct+0x1c4/0x290 [ 893.309157] ? splice_direct_to_actor+0x980/0x980 [ 893.310236] ? avc_policy_seqno+0x9/0x70 [ 893.311163] ? security_file_permission+0xb1/0xe0 [ 893.312221] do_sendfile+0x553/0x11e0 [ 893.313053] ? do_pwritev+0x270/0x270 [ 893.313883] ? wait_for_completion_io+0x270/0x270 [ 893.314919] ? rcu_read_lock_any_held+0x75/0xa0 [ 893.316005] ? vfs_write+0x354/0xb10 [ 893.316799] __x64_sys_sendfile64+0x1d1/0x210 [ 893.317739] ? __ia32_sys_sendfile+0x220/0x220 [ 893.318748] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 893.320018] ? syscall_enter_from_user_mode+0x1d/0x50 [ 893.321126] do_syscall_64+0x33/0x40 [ 893.321910] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 893.322994] RIP: 0033:0x7fe3014fcb19 [ 893.324010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 893.328237] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 893.329912] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 893.331450] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 893.332986] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 893.334533] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 893.336073] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 893.378070] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 03:15:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 34) 03:15:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) socket$inet(0x2, 0xa, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000005e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) r3 = getpgrp(0x0) r4 = pidfd_open(r3, 0x0) r5 = dup(r4) setns(r5, 0x2020000) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x0, &(0x7f0000000080)=""/18}, 0x0, 0x0, 0x400, 0x0, 0x2, 0x0}) ioctl$DVD_READ_STRUCT(r6, 0x5390, &(0x7f0000000440)=@manufact={0x4, 0x2, 0x800, "00bc95e1d7c7526002994560cca3cb55b66678e5eaea2741345629a1cec02f007569e0842af897601b10179ce9c733b49449827210b73d70a774f7e48cea1c35a571cf104a8db9faf6c7f7a86647a7a3a4a1740d6e9722cbf84f0d9ec33b9bab22d97351d38686158264793722ee3b2516645cf01a1a9ae08aa9192b0aa2d521be5340caa28d3e9aca95d6c911bf19b56b60b59d718961708152c187c5ec50437a3df5039deb78aa1ff0d0c1dce7ff26bb1fbbd65861e3bd8db8c3eabd654b68db5d517f3cad2b86c70d81f32e2a06e473b6ca25df162c2c9c07bc413dca11294ad0405edf9d6960235bf04a490a886388edae8fe3dc39031f5cf8d64613ce9bd37486c957324e5f11cb734692496a2ea9f4a345751bc9c2fe871e70c7b6611549350cde91af83ff7b1c57a2b3fa51cb7019e32b4a56fc4a3f0f78c41e923aed5cb89ab79fb2b1d7d2264638ec688486438cb5bfcda5bd3336c0eca5c4eb49ec0284e9b1356de8e47797300221dae6b2dc5998e5616720ffc947ec2810b3c85b606781abf15f61154565f58d2492cc6a2c56dffa9ba7ab98278ed6ee13653b779b893d8494c76cebde9bc51ed405e27e8daf3d6a9c0e3a09f155d92887781b7e1d1bdca9c0618f5ed7e0c97917b349b694a3d9005f9a672cd522aee5946b70b962128c7702b069399bf489ddb076c5ea02fe2b9030823c4247a6d22cd8c59b4290c56d47ccfa5167f94e9bf5e66bf4fb99c0585598f1113e111eb23cff6482c3060b77f79a77f71e9a6d8fdf8a7311ef5c2eaf7b102e638b3cd28644c29855f14b30e9c0631ead0c314870a30615de4c1bda467575f75edaf7569a77ba047b8443d96d8c862006bfcc7c21b848904100527b69d39c5caf1c3aa038fec350da5c1cbcdec3def9c83b0fe0e3d5f044685ca4e3da91622fcf098a3d4a827740c771dcfc67298754a2a1601e363c35ba09e0191097ac1cb793653beb39885a70b00457010111f12223bc6d6b8dfc16c29e31e27a0bf6c35b421907f10cd41cedd40709d56d7b8e9e3531c1acebc0a5ad21dc1a18affe006320ea8b5d7c4fca00ba4028f802c97ca82c5b321867ae14d8ec57614c9bc5a8b0b7df20bc38585a32d3cf58ea3f9402c478d84c9312e1660648f67ad131560dc6a4932657afcda99b9d5cbf9c8d8e19798f86e62c1dcf4e4bfcdedefac0cd9d9d21cc692a1eb6b7d5b1b2c1a1a49ea7c3566fa56a9d2cc025332479e61fe3a750e20446ebece96faaa58a355e59fb83205c2b389243ecf8141c4a75ffe7281adb43074b88a501682b32c5153f9b79441306a130d17536eafbc70bfe91bb34cf4488d8624cc4fa287fa60b6502c2cc1a049b0afc6bee5a6240238d5ef0e762791121ed045a939dafdf1dfe996325fd552570887ffc7f3066e857015ee8cf082339375cc0989afe26e125bd66579d44c56c4ffe86507b5155ac7f47ef66629ed7b6b11db00c40ef262f5609733ef55b27370e8fbfea36500ba3e9687232eb9f2f6af04dfbfa79a64cd7bfab080648330776ff4088b0345f436f869f5aea2dbd1155bcd62cb858f694ea8e8ca34c418dc7ee051a1a041f0521abd04a7319f73d8fb902688e58a69c9043e8392ff1ddb95a9f6f7c72d5ca765c809901b9e4da6929e6ab98fdbed606854e05677b5fc04b46c7e77550bb2cac1747774d9f5bb41071a2edfdf7ca48303b65800ae56b1d4254d504555484040c8a6a7ff987cfd65e29c921d6aa356ab1ab3c9c3f493cb3c55b414d31cde83084e2183bc2e173f5872c252ffbc5c97ff6712d5934fdc512575dc5db977bf7d5d0b92fc13fcdfd04bafb59d28aeac0d8d5c105b1d648f07753c1fb731f883d0957b1c56138847f34b9b669511580ccbe523de0abf33ee0ae793d659cb2fae7bb1e546eb3d9c4b805499627618b9d0400ff60fdafaf975cb3a9663eb1efef94676dce8042f0d93f11e93d7fcd25d7535c7a37f57b2835b2aefa0108924efba0390da2d939630b6047eb7fff3395d421a27412fadd589e4673f4e3b86d92c51b8d2451812ce4623b2c5de86894519f6e72e381c8fa39ef43f95bd4c812936794f709556e89f9f1044fc59237da4b40406d74b630f4b558e0ca5a7e85f45968ee2162c5c787123f3165cea19f4998ba73ea99af14de50017ced399b32c65fcc3b0069f2393958c5b8fae29ce59e3de43ff2fe4f603b264190ca1ebf9763cef6d81b3b16e59210c72f53f064e3e877791cdbb836cfc3fa9ca97c8adf27f1d012fffc243a95e10adb0de9d1b375c15d4b94e6e1ff7a2b1a3162fccab6e526e8db185555acdf449e15f9fb8b60185c61fc2f838e9c258ab52ece9a38214b0e8d100da3681e215eee5a2052de65f2568d49744786e56185416a53934f627f3fbb460880e5e399993743cc048549a08f9a4a1e11210fdf0ed031a3c8f44cee83af55bf74948f51126d53e6808915d630a0ec0e31884c3ea8b9eacfbda96501b44c200bb7caf55032ae99324af341291df2183ef4a6b0cb2f0272007dac9589149953e61f01e027627dacb58d5edc892fbe29146b3bce72431ec4e2fb4fb7a03af2c2e94c7d68cf59c2f618eff3e7e06d0e03608ac678b325dc4c7bf5af32b215b65fa9a1bed17292a56e9131a8af0e22b79a91f66e5294c9dfd0ee6546978e0d3d5420649f10c1b9f917351cf824887011a8b4ed165b5db68d8f8d4dbd87d337e49f05873553fe5d0e34638851a273618f59ce5fe148ca149cce089a8f4301a5507404939cf4993b4afa6f9d2a76c40adcbf4607e0e293483194f7756ac3fa8f7e2eb28be0a251d0e70f428d06731a135a02b239ab8a0a79472002e08291a7242c41251cd36185a1b31a32ba3da99897886dc37fc9c4d2a8d1"}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x200) pipe(&(0x7f00000003c0)) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2005}, 0x4048085) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x2065c0, 0x10) signalfd4(r0, &(0x7f0000000fc0)={[0x4]}, 0x8, 0x800) 03:15:44 executing program 7: ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000780)=@add_del={0x2, 0x0}) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffff7fd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000380), &(0x7f00000006c0), &(0x7f0000000700)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000001000000e48cd99e", @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="2e2e6669e47b36138353e4"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRESDEC, @ANYRES64, @ANYRESHEX, @ANYRES16]) r3 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x0, 0x5, 0x80000010004) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000000c0)=0x843) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000001f00)={'sit0\x00', &(0x7f0000001e80)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x3f, 0x2a2a614d, 0x21, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private0, 0x7800, 0x7, 0x1, 0x6}}) recvfrom(0xffffffffffffffff, &(0x7f0000000800)=""/215, 0xd7, 0x2, &(0x7f0000001f40)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x80) read(0xffffffffffffffff, &(0x7f0000000500)=""/122, 0x7a) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xfffffffffffffe9c, 0x100000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000900)=ANY=[@ANYBLOB="cd007900", @ANYRES16=0x0, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x30004840) syz_80211_join_ibss(&(0x7f00000001c0)='wlan1\x00', &(0x7f0000000000)=@default_ibss_ssid, 0x6, 0x2) 03:15:44 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:15:44 executing program 1: r0 = perf_event_open(&(0x7f0000000640)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68800, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x7, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000140)) r1 = dup2(0xffffffffffffffff, r0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000006c0)={{r1}, "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"}) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, r2) r3 = add_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x0, 0x0) fgetxattr(r4, &(0x7f0000000440)=@random={'os2.', '!(\x00'}, &(0x7f0000000480)=""/41, 0x29) request_key(&(0x7f0000000280)='.dead\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)='keyfing\x00:\xfa\xd9X:T]\x01\xeaX{\x0f\x06\x02\xb0\x1e\x8fL\x9f\xc20\x96s\xb8\x04y\xfc\xfd\xf2\x1eW', r3) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x15, r5, 0xfffffffffffffffc, 0x0, 0x0) add_key(&(0x7f0000000300)='.request_key_auth\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)="96f6940efe5cd619a6b366f7", 0xc, r5) unshare(0x48020200) 03:15:44 executing program 5: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x24, 0x1a, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x10, 0x0, 0x0, @ipv4=@multicast1}]}, 0x24}}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x200000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fadvise64(r1, 0x0, 0xfff, 0x4) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}}, 0x108) pread64(r1, &(0x7f0000001e00)=""/4096, 0x1000, 0x961a) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x205e8b, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000004c0), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f00000004c0)={{r2}, "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"}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001700)={0x51, 0x4, 0x1000, {0x0, 0x3ff}, {0x7ff, 0x1a}, @rumble={0x5}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f00000002c0)={'nat\x00', 0x0, [0xaa, 0xfffffff8, 0x77f5, 0x200, 0x52486958]}, &(0x7f0000000240)=0x54) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)) 03:15:44 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xa80, 0x0) gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4}, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x0, 0x7ff, 0xe, @empty, @empty, 0x8000, 0x1, 0x1, 0xffff}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'ip6_vti0\x00', r2, 0x4, 0x1f, 0x4, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @empty, 0x10, 0x7800, 0x80000000, 0x14dcd3ea}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r3, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="3181", 0x2}], 0x1}}], 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000140)=0x101, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000000002004e22e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000400000002004e200a01010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1e000100"/656], 0x290) 03:15:44 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="0300000004", 0x5, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) [ 907.594568] FAULT_INJECTION: forcing a failure. [ 907.594568] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 907.597279] CPU: 1 PID: 7441 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 907.598772] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 907.600573] Call Trace: [ 907.601151] dump_stack+0x107/0x167 [ 907.601942] should_fail.cold+0x5/0xa [ 907.602795] __alloc_pages_nodemask+0x182/0x600 [ 907.603802] ? xa_load+0x12d/0x2c0 [ 907.604576] ? lock_downgrade+0x6d0/0x6d0 [ 907.605480] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 907.606824] alloc_pages_current+0x187/0x280 [ 907.607796] __page_cache_alloc+0x2d2/0x360 [ 907.608746] page_cache_ra_unbounded+0x207/0x6f0 [ 907.609757] ? read_pages+0xbc0/0xbc0 [ 907.610606] ? __lock_page_or_retry+0x4e0/0x4e0 [ 907.611633] ondemand_readahead+0x8e5/0x1150 [ 907.612604] page_cache_sync_ra+0x138/0x170 [ 907.613724] generic_file_buffered_read+0xc8e/0x2920 [ 907.615152] ? pagecache_get_page+0xc80/0xc80 [ 907.616119] ? kasan_save_stack+0x32/0x40 [ 907.617115] ? do_splice_direct+0x1c4/0x290 [ 907.618257] ? do_sendfile+0x553/0x11e0 [ 907.619098] ? __x64_sys_sendfile64+0x1d1/0x210 [ 907.620244] ? do_syscall_64+0x33/0x40 [ 907.621226] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 907.622623] ? perf_trace_lock+0xac/0x490 [ 907.623627] generic_file_read_iter+0x33f/0x490 [ 907.624942] ? __fsnotify_parent+0x47a/0xb10 [ 907.626130] ext4_file_read_iter+0x184/0x4c0 [ 907.627116] generic_file_splice_read+0x455/0x6d0 [ 907.628465] ? pipe_to_user+0x170/0x170 [ 907.629523] ? fsnotify_perm.part.0+0x22d/0x620 [ 907.630859] ? security_file_permission+0xb1/0xe0 [ 907.632017] ? pipe_to_user+0x170/0x170 [ 907.632904] do_splice_to+0x10e/0x160 [ 907.633909] splice_direct_to_actor+0x2fe/0x980 [ 907.635098] ? pipe_to_sendpage+0x380/0x380 [ 907.636061] ? do_splice_to+0x160/0x160 [ 907.637160] ? security_file_permission+0xb1/0xe0 [ 907.638452] do_splice_direct+0x1c4/0x290 [ 907.639526] ? splice_direct_to_actor+0x980/0x980 [ 907.640680] ? avc_policy_seqno+0x9/0x70 [ 907.641628] ? security_file_permission+0xb1/0xe0 [ 907.642692] do_sendfile+0x553/0x11e0 [ 907.643531] ? do_pwritev+0x270/0x270 [ 907.644394] ? wait_for_completion_io+0x270/0x270 [ 907.645700] ? rcu_read_lock_any_held+0x75/0xa0 [ 907.646994] ? vfs_write+0x354/0xb10 [ 907.647997] __x64_sys_sendfile64+0x1d1/0x210 [ 907.649163] ? __ia32_sys_sendfile+0x220/0x220 [ 907.650432] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 907.651839] ? syscall_enter_from_user_mode+0x1d/0x50 [ 907.653119] do_syscall_64+0x33/0x40 [ 907.653939] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 907.655139] RIP: 0033:0x7fe3014fcb19 [ 907.656066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 907.660808] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 907.663155] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 907.665167] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 907.667060] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 907.669075] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 907.671085] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 907.703785] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 907.711153] loop6: detected capacity change from 0 to 2102784 [ 907.726930] loop5: detected capacity change from 0 to 16776704 [ 907.759666] EXT4-fs error (device loop6): __ext4_get_inode_loc:4406: comm syz-executor.6: Invalid inode table block 0 in block_group 0 [ 907.763865] EXT4-fs (loop6): get root inode failed [ 907.765104] EXT4-fs (loop6): mount failed 03:15:45 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:15:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x5a7083, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_open_procfs(0x0, &(0x7f0000000280)='net/protocols\x00') creat(&(0x7f00000002c0)='./file0/file0\x00', 0x13) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000000c0)={0x3fd, 0x9, 0x7}) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000080), 0x4) syz_io_uring_complete(r1) socket$inet_icmp(0x2, 0x2, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x8, 0x1}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r4 = signalfd4(r3, &(0x7f0000000180)={[0x9]}, 0x8, 0x180800) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0/file0\x00'}) openat$cgroup_ro(r5, &(0x7f00000001c0)='pids.events\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000140)=ANY=[@ANYBLOB="54e1f8ed06d3c5ba88f2e8", @ANYRES32=r3, @ANYBLOB="31960c00de9cad000000000000000000006cc90e2130b10aa15b0050cf710467e35600899a"]) move_mount(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x2) [ 907.860183] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 907.867559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 907.869679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 03:15:45 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001980)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32]) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e1, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x4}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f00000005c0)=""/163, 0xa3}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/250, 0xfa}, {&(0x7f0000001780)=""/130, 0x82}, {&(0x7f0000001840)=""/246, 0xf6}, {&(0x7f0000000400)=""/78, 0x4e}, {&(0x7f0000000000)=""/43, 0x2b}], 0x8, 0xffffffff, 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet(r7, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4008000) sendmmsg$inet6(r7, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e20, 0xa6, @mcast2, 0x5}, 0x1c) r8 = dup(r6) preadv(r8, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 907.882588] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 907.959879] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 908.134629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.136396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.139319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 908.161790] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 925.061904] loop6: detected capacity change from 0 to 2102784 [ 925.068529] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.7'. 03:16:02 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 925.105812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=7493 comm=syz-executor.7 writev(r0, &(0x7f00000011c0)=[{&(0x7f0000000000)="9485fd87219883e7325aa0c9926a53568ae44f3ecada6901c21536548a8b89a8709aad5d47c38ba59904569c8332593306007a3089b59b212073cdf83080c08e67a4c01fd66e963ffc1232efb3dcf967", 0x50}, {&(0x7f0000000080)="5e8e973c8b965aa08c6306853b1de686a031a40217e3772e43fc150232fe5a499ee19b3a05e68a5459a28554b09322c4c7ee5bc87f15cc2b431ac8b085f2afac6b2cd78544b5ff4b50fb306320", 0x4d}, {&(0x7f0000000100)="43b7bef78c3b9024e128ed4d56e19e2fdc5dbc377966dbe98f3e6b09324d9149bc409a57010a4ecb4aaede", 0x2b}, {&(0x7f0000000140)="8978e22e1120892cae066c5a319003ce201fd75751f2c5b5cc5cd9c7bff012f08091d7c4ca847e06b805e62bc7df709244484050262cdfed9b3e65e28cb8be915925be78d853e9c91ea2ea278b8f47e2b083d1aafd68a1387caf34891b7218d651c305a59f8745ac37f87c98d5d4167287a2f266e744b664", 0x78}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f0000001e00)="270a0d3676a897e587bbb3356478d565b11f3524b6f397261e83608534a05dfca30c24ebf9b39cef54382bd2c8823498a41f680d63273f2a7c7aa4996a4f490918846ce28e4acbc9ebd6dcb808def01e6bac0ad07c71f70d724c3d29a985e06c3e00d755bc58718ffdeb32077057feedb32cbd9775f3e23e7785fe9d6e3090cb9b4c341e6231f11876e23165b194b62a48adc396499a49e7e4d68b4265f60a5254616369e1976655ce9785a41ee495d3288b4e7329cb8745693f30691c0c817dcd6a1ac8efdaccd134265f07d6c367e27f9df94decb4087395e5f13af33217fa00f203f87f0b3c117239121b9e7f31ede6656ce26bbc6fa5c8238770bcc27119fcd213785063d57bf7147cc3189ae6df06f5a4709ee44b7190f67071e3fbe70a2656009f6f4c7982537db32f61ad077a349b77ec25a379088e951eb34b3208106439962f0656dbfdcd699eba02addedf5781580588c7684b9a50ae438a85bf8bfbe65c9821c2ad6cc3d549aca5d7514a9eae7a80f06e757fdb76d225d3f15f5b5453816cbcf592a285a58e9fc8f7fb263bc7f7c7f2361f7286c3ee7afa58d6654d2a194f33907ab9dc8cd13007d6557226254fb0ceaf5ee840d3bc99b0022cb4518981356753467737eefd78573fabed823c7e13ff07ec52632709fd1894fdf8ff3b0f5d94062544487f34a05756474c31e983726b4453af35362313076374f0ead0d1266a53a9032989896e27730c578675196b2b9ca845c57332aacb0ece5f6baf5a2c4225d45878efe1504d5e741055e37da0d269965015cba7b9c57f0a91657ed185dd432c096b6f5c95c198edd1d8f7dc85d9d9715530cd398ba145c005e965b8cfad1facef064e8513bc60eb71ab300b128bb9e8ccf0245a7d4c03d4f556c29974348d5ec9b806489aa7078a037abd61e493fb200f1d2a3ef8ee120013aba7aa8511bd000a49627cf758eb76421158fb95c02b9ded0519b67ab5e7429373fd7b0c09403f5bd473da2df1aeefe0e00f20f7294a91bdfc358c6ca8e70a4739b65ae144f01f6234948cba92cebe46a6c3d259f8ddee0a1bd4c1999661a89bae9453650ad29a2146badb41f89c379d7c3943faf1f29912425af3a57ba9f1d9c2a03d0845f86ddc6b247b086e32f04efd65fd46e14a99693d692ad4826458750258dcfcab0f7b098928e64539f66cf1f7d2603d414de9f42df2e0185832b2e9a4ec702de9ae546869ad9051268725c7fb8ed556b4f9913ce677bf680fa36a11c7acd07b5f053b3b49a454bc2a547d0890ceaebf17ad95ec5fd6b994ccb018ee3d11ec673a6ef9ed79bbe441a6cdf1589504ac334c7a099a5af7a6077c187672296df01c576e9861c24ec55c520731e142ee7e6c7a7ec01ad1a699ad1e51094433617cdcecbcec17628bd45563a40e450f307e4d176363a626230e861269330c71bf1206e97296ca96ec04c96fecd3cfc1fe45211568bbdaf503548b4424508926fd6eab4e3769d0013fd24ae42796731540b43d0f314ad0037522939c6c2af0890dc3914d078fe2e97109812bc9b18a5e86cb4840febfb040ac3ceea8aee757c1c8f9cb91eb51137eb660078b658a385fbd579cca91f41adc9b585c60f4e6907655bb187c8851092cc7c70cc784b4bff4444ca3e4f5555107f05e193b35e5e38662538c0343b7005bbb6c7a2cba82f1e61a96c641acc32abbb247868767d2dbbd4dd35a52f96a10e8df0b6268678921a334807cd5403a88851dcb115f26fc88a3db62b3f9d94878201a4141b5a855830295450fd80dcb0942a183c26764b8baedb9b6900b176dac08a31b677189ab45646c54d33187609be44d66b9b0b27f46cc3d0a4e6154c4904ecf3046393405319846f597f5e0f566058eac7b31ef6ecf2a7021f92e2f947f658f2fb4625bb2d0b35c66bb6e3c11aab6ab0b9fe2d4655f1eb2ecd61bda20066a1bee348ae04b639005c3eabe2bfe936e725cdcb07d3e4cd89dc69c94386e603e57a3c68f5042e4f6739c9c6315f28f73569c4a7120fab718d140f7b25fffde79ed369710a826dcb6e7a094daec38e4f33cd4c5acdea426dd56477f7596152dd74b046d0eac2ece6a93a38754e4365087a8481a06d27950cd73afdf81117b842dd9d9f666dd2f8c56529b79618fc5a84fd9ae0ef1ce969295effc807ed2fb45c527e32a9058bc4dbe99ec030a14b2c8a3aeab987fe8fbd4b25589ac41cae822eaa9a9b8c1e293c1344aaa85cc226f9537e77d4e97427838921423e253e2f858f1dae30f1f40357d00a8bd395d91d6bba37416421d95682490c662502e0506a896ba747a8bb6a3275e63d3013fd6b51509bfa63259db697161ffb0112228fb00d340bc410347f0548d8ddad6cedf0972d561ea4032ba40ccf1b905e9a4f2f8dc017cd7c81422aa593ee41981f6720f3f8bb5dcde45f700e8a5afb331802b00b79b5443602a361603e335f211116ab0f1c82fa86462f53da52325ac2010a5ee62184fb50f9fba926e941a1793d5d76383758bf3152b4bc0b6efaadf9ebc18902164bb54dbc873bf7cac2bb53e2c41fcb6f70cad6a9162347a9a92f33ffc75249aa7af111300080a9f0933d15fec7b526e40b5bb09dfbd6b369d96fda45e159a90af782833f7ecc67acdd824fbef1fec3af9749d4b74d8fa2236b738c851ca3ede5fbfdb87cbc9dacd91e49993d88ea1eaf5fc74252c0bfd706569b23556036604e53905e0665e0c01b85796a6f2188e018e80bcee3072161bc4af860905625f6e0105164c9ce58bf42857747325b59cae870c1cb99c7982c90b2aba345c17787a5b79ea66bf915b90ed689a715d7ebf6e29f730f4dd6883efa1aad187497fcaef486cf637b5a4d93318bfc20f36033561b8b599262f9972ab3fd511c9f3d4b6dd71ab2203be5228769e8f3eb98bf5fd835d388000b96d9a9cd3f4ab2ad4416fd402fb7abb16bf319e0e3e1a472333c5ac42efc917e67958d813b812537168ff7f4819ab21e60e4ac28938105e3324bdea6a5e871a018d7f5b69ca59a2ceea64b162dc9f2da33125b8bb23ba43dc0393e18d0a575b70c79e8d221a91da5ec1b18b949fb53508bfcd32ba0fee7e57c6989eeb63889c23df979f16db39ea88eb707fdb7290dc2e65ef17c382e8e39bdb1e03e3184733e205091bba8aa8a3782c5e3369fc87a87040a1e02dde2bf90b112d813a01ab44412802bd909e7abc99597f93afe538333bcdbd107c7c80a06752f1a05033ad28f2f570caec1da966022edf37dd907dad48daf2b08f5856083c031441924d8a68fbbe3ace2651c1bfe58bac99d7a198ab37d0717dd2c506bc9484333804aa5fdcb0536454c3ba5e2aed1295defbf8ff68d279e7edf22a4ce72ad4eb750a3b2fd76da6c5396c68d7cd77c44521a5be394f8ec00a2c871f0886e4caa05cbe0f473090d8abc04aaf62b7b8019d3a919f1d57637a67a7c1f37a7e56b02ff14150a894f374f66bc9b8b34d94f256481614967f89e95a64783ad7290a74256af478bd04b4298726cffc4a39aed9ba7dc2bfa013fdbdd29a00531e80311a17542fdd22b4b46db00649df1482fc721512bb3fe212a34e2abb1426456cd4275a0d136cd469a652e881bf02858603c6c1f3a666804a0d7dea99226191cf1c9edd6744fa4a1a27cba3fddb498db21fb47d6fbb7db349f9574f2836c0c31e3ea4fad69008967513babf1227a44d4f3b5f747ba5fae214808a877d1386ca952e23734e93951e2e02442427c203f43fbce0b15c202d3fed29961d63c9ab2162c27547a35926bff3bd285ddd203249dcc7539fa25738cb5defc176bafe64f786ea7eade02a5ab604d1bc527a60d346ebe65630770bec718ea33d3680a4d917e77251ddc1a79d2e980d0845c42fd1dda5136e26884693a56135dae2424a8a40273d41bb4887191a10db9c4bf4b5922e7c41e2a5abf3e4132a73819f6b16385e6c489510017644dc05f13aee40964d11ce5744a73680a34803ce956aac03a8e5206221caa50bee9a624f1799a423cb040afb7ad14663cba2ba5bc9abd0db064298c44c36b77067c1f571fc14dfc7b07d5c77bd38aabcc93cd143d0cb3c8ea844b4a22cffc5af5223d40af154749bbdecccc30d5b51de11436708f4f5b380190c3042d02144aaaa953aab636444b58a6a07ed6f0e1f45f2d2f7c42ea62fa326eedd61fa8ca34db7157cb154153a745d8fe499805ca9d829c3887db8a944a5acbb71c0d2cb3bb33bc3df356877a3e87ba68eabb8738280e1edbc591834cce33757c170b4cbe4978ec33539e19a2df2ac42f828db7c4ce7a5717e8a42430ce82f10842d71d4e6fc9b79069e6aed6824ca86f25f9edd26150cc466ee4c9f667b6e761b437dae9baf3ea8fd2c56bc39a94ee293fa1d9f8c65ab01982021b299f8424b362413ce0124857f56270bd0f5aff0893f0ada5ff1f7527965449bb729060d1d5184d2cb4c169032e2242c528a3e132e477b641fa62b2f9d3052f48a77d52d8c096aa0759f4c282b6b32acf1d0fd0dcb2be5c03fdcc25df38f92fa8c9b0478a9a9abe8459e27db67e5b18440cdd3f176293dd576319e2fcc950638d129c03ef2bd080dcef03ef758c5cca1e06c4899ec7751712feb69f228ed7653cc404e0add6904f35bcda93fd4aae5b6f655ff2d141f150f57231d62ebb3f7b09b9991e9332c77d6bca6a79da9423addbda4e02f1bf7da5ee9e0d36e2a1c44d5ea91413bb1f8443c6084c444a4d26e3410ce3758138a8a6905f52e549fddd70e9806c3e9751fd5b56526a680bcdc346b16672b26bf8d19cabfc2e637b0f3d8c677e62e0e5cd1d41adcd536d3586b9f32dc4e7617db75962c084bf05e9301788ed8563224349069450a2b94c692ec48eb99ae42da3788833ce7d96beee28634de7ccdd740a690781b78b0438453658ba6da544c81d52066e492016863acaab67dc0ce7618a519563c9b2584c104d7875aac6de6ad0bb6cb635ead01815e61bac255608554ca2f4873b6d996fe2dd451db9781cbb911cbd91212a0bf7b3699d98be69a7bed0a761aa1b3a4da32de9d070cea10f621ceccadd37f95d06b2626fbe42162519ba0dbc9a69a9c1b974d5f85bb78d30ce8ca5db0b7bfe065b101feeaa301f3068e1a843f554e9d83f28ad9bf713b8bb305e29efa51024dcb17fe461f7878fe973cabecffeeb0bb5d5f3d4f5ec52e9cb0b500bb6fb241f2e2fa3947b73e9857bced331ef345c7b789985bbf5734c882a515b82fad08d16fd7965eb20efa8591f18d115c9b523e0b5feb450a9204d42cbd607fb06ad80d6f03bde9970142cfe06169d35af33130a9929a45d1d60907ffe2a45f207e76e3c65521f256cc12d1829a72b675574002abd52dec910dab92526e5080aff0875078378a8dbfcedd769bfa7462bdb31eb13a7c2661e81d1959ba8bf217484c90d351d4a7c8e5d6d835ab4fe9dfd6d97cc4bd8c2931f3c8db506afc3d13f24df992038f4384c4b352fcc7ddea51ce500c84691f3a5ce6b4e0f800201aad309397786b006fa581895a0acd74e6325974b6f8a9eb755a3923dc1c582eb233864be8ce8429887b8124495770d761ad45f7d036053687cca87bc70dcfb0d078bd87f93bf60c297533cef03b8c6b1a348de5132e78ef9372931e2561b0b8b01b2a265a1424420fde1ed00aea023b193154cb46ae43435b2888cadd9046f73cdf6a86fb7d2007259bbd60af603a231735c96688a1778de70e3a4265c1145dd1fa3ab23e196e99b8b3206f8a786a9214e1f8cb683894fc8af01965a931c3", 0x1000}], 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendfile(r0, r1, &(0x7f0000001240)=0x7fff, 0x3) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 03:16:02 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="0300000004", 0x5, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 03:16:02 executing program 1: ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000100)) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0xb) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x400982, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000003d40)=0xfffe, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) listen(r1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @remote}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000001480)={@broadcast, @dev={0xac, 0x14, 0x14, 0x20}, @empty}, 0xc) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000240)={0x3, {{0x2, 0x4e1e, @broadcast}}, {{0x2, 0x4e20, @loopback}}}, 0x108) close(r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fadvise64(r3, 0x0, 0xfff, 0x4) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}}, 0x108) ioctl$sock_ifreq(r3, 0x8970, &(0x7f0000000140)={'bridge0\x00', @ifru_mtu}) 03:16:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 35) 03:16:02 executing program 7: ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000002c0)={{}, 0x1, &(0x7f0000000280)=[0x3], 0x3d79102f, 0x1, [0x7, 0x4f, 0x800, 0x7]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000000010104000000000000000002cb09000000240001801400018008000100ffffffff08000200e00000010c0002800500010000000000240002800c00028005000100000000001400018008000100ac14140008000200000000000800074000000000140005800e00011d7369702d323030303000"], 0x78}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, 0x0, 0x1, 0x0, 0x0, 0x0, {0xc, 0x0, 0x7}, [@CTA_LABELS_MASK={0x14, 0x17, [0x7ff, 0x4, 0x45a8, 0xc6]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xbc, 0x1, 0x2, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_EXPECT_NAT={0xa8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x16}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x4821c1, 0x0) fcntl$setlease(r2, 0x400, 0x0) 03:16:02 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:16:02 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000000700), 0x1140800, &(0x7f0000000800)={'trans=xen,', {[{@debug}, {@mmap}, {@nodevmap}], [{@dont_hash}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@fowner_eq}, {@dont_measure}, {@seclabel}]}}) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd, 0xeffb, 0x0, 0x9, 0x0, 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x10000) setresuid(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0x0}}, './file0\x00'}) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x3ff, 0x4, &(0x7f0000000500)=[{&(0x7f0000000240)="ac170b46de1aebfc6326c6424815b9f7d0ce46f94f155edb77a282e6ab258597561ce43ab530a8429764a88fd73aaf6d0474805be5916088ec023de8a8aa4cd57c574f6103472904fad6c632dbba1c5e87d69f6af548938c7e4ac038c4e1", 0x5e, 0x4}, {&(0x7f00000003c0)="2f3abe8a1fe414c15416f15ca4b8f0f3c3bdb6a7b4f12ccd36c33cce4012ecf83b9554e01f6ed2aa521bf8aecc9d091d76a597b8cfd0b3f7a7e8045cbc1558438ba53b475c8a9730087d5ceb150dcbffed8c8a2abc4983b0dbdca7ccf9833e375da615064ef3bbf759630f6fd27ca314d1466009937e797d5f38b1e4f2549ddaf965bb992e3493353d743ff6a34d63c8644a496bbf24e2", 0x97, 0x8001}, {&(0x7f00000002c0)="5a73c81ab704e6da6578481a0bedca32dc9d8b9f4c2331d52503ec9d1ae1895bdf70175e5ecef66bedd97b8b95d9498726fe7f626fa943963b68940c3642ac293c61e321ff09c3688788fe845feeda112b4633a8ebc287aa70e9ff26ba5b", 0x5e, 0x80000001}, {&(0x7f00000001c0)="f389fce09f4307302e55c45ae4edb2b7d4edf81e7d3aa237ade137a66164051125049a11c360ab6f2a7426d9182b7f7d4d2d08f0c83683e6f2305f", 0x3b, 0x3}], 0x1000, &(0x7f00000005c0)={[{@grpquota}], [{@appraise_type}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fowner_lt}, {@dont_measure}, {@euid_lt={'euid<', r1}}, {@hash}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x101) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) 03:16:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000080)) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r2, 0x8) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0x10040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x52, 0x101}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4, @ANYRESOCT, @ANYRESDEC, @ANYRES64=r3, @ANYBLOB="ae91e1", @ANYRES64=r4, @ANYRESHEX=r5], 0xfdef) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x40, r5, 0x80, 0xffffff86, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x890) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x54, r6, 0x618, 0x70bd2d, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x4}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x24004091) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r6, 0x200, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x40) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 925.132750] FAULT_INJECTION: forcing a failure. [ 925.132750] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 925.135650] CPU: 1 PID: 7496 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 925.137273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 925.139260] Call Trace: [ 925.139897] dump_stack+0x107/0x167 [ 925.140783] should_fail.cold+0x5/0xa [ 925.141683] __alloc_pages_nodemask+0x182/0x600 [ 925.142812] ? xa_load+0x12d/0x2c0 [ 925.143660] ? lock_downgrade+0x6d0/0x6d0 [ 925.144636] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 925.146071] alloc_pages_current+0x187/0x280 [ 925.147149] __page_cache_alloc+0x2d2/0x360 [ 925.148172] page_cache_ra_unbounded+0x207/0x6f0 [ 925.149300] ? read_pages+0xbc0/0xbc0 [ 925.150211] ? __lock_page_or_retry+0x4e0/0x4e0 [ 925.151333] ondemand_readahead+0x8e5/0x1150 [ 925.152382] page_cache_sync_ra+0x138/0x170 [ 925.153397] generic_file_buffered_read+0xc8e/0x2920 [ 925.154645] ? pagecache_get_page+0xc80/0xc80 [ 925.155691] ? kasan_save_stack+0x32/0x40 [ 925.156669] ? do_splice_direct+0x1c4/0x290 [ 925.157682] ? do_sendfile+0x553/0x11e0 [ 925.158638] ? __x64_sys_sendfile64+0x1d1/0x210 [ 925.159729] ? do_syscall_64+0x33/0x40 [ 925.160646] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 925.161893] ? perf_trace_lock+0xac/0x490 [ 925.162909] generic_file_read_iter+0x33f/0x490 [ 925.164016] ? __fsnotify_parent+0x47a/0xb10 [ 925.165061] ext4_file_read_iter+0x184/0x4c0 [ 925.166096] generic_file_splice_read+0x455/0x6d0 [ 925.167260] ? pipe_to_user+0x170/0x170 [ 925.168202] ? fsnotify_perm.part.0+0x22d/0x620 [ 925.169294] ? security_file_permission+0xb1/0xe0 [ 925.170451] ? pipe_to_user+0x170/0x170 [ 925.171387] do_splice_to+0x10e/0x160 [ 925.172282] splice_direct_to_actor+0x2fe/0x980 [ 925.173379] ? pipe_to_sendpage+0x380/0x380 [ 925.174415] ? do_splice_to+0x160/0x160 [ 925.175338] ? security_file_permission+0xb1/0xe0 [ 925.176468] do_splice_direct+0x1c4/0x290 [ 925.177433] ? splice_direct_to_actor+0x980/0x980 [ 925.178578] ? avc_policy_seqno+0x9/0x70 [ 925.179530] ? security_file_permission+0xb1/0xe0 [ 925.180666] do_sendfile+0x553/0x11e0 [ 925.181574] ? do_pwritev+0x270/0x270 [ 925.182491] ? wait_for_completion_io+0x270/0x270 [ 925.183615] ? rcu_read_lock_any_held+0x75/0xa0 [ 925.184702] ? vfs_write+0x354/0xb10 [ 925.185575] __x64_sys_sendfile64+0x1d1/0x210 [ 925.186643] ? __ia32_sys_sendfile+0x220/0x220 [ 925.187715] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 925.188925] ? syscall_enter_from_user_mode+0x1d/0x50 [ 925.190127] do_syscall_64+0x33/0x40 [ 925.191034] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 925.192291] RIP: 0033:0x7fe3014fcb19 [ 925.193169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:16:02 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r2, 0xca3, 0x2989, 0x2, &(0x7f0000000000), 0x8) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000005c0)=[{0x0, 0x49}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x30, r1, 0x10000000) r8 = socket$netlink(0x10, 0x3, 0x0) getpeername$netlink(r8, &(0x7f0000000040), &(0x7f0000000080)=0xc) syz_io_uring_submit(r6, r7, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=@nfc={0x27, 0x0, 0x2, 0x1}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="0829730e9c602de7001f242b6e19d4fddfa4f5abec9512a5f46b233d513081632bd2a39204cc3ff09b33d86d63e288177ade341554f0566f79e9c548d111d6f9a5caa821a407de3c", 0x48}, {&(0x7f0000000140)="9dd98117248ce55b15e4e7831c41a98bc4b279", 0x13}], 0x2, &(0x7f0000000200)=[{0x18, 0x109, 0x0, "a46996fa969f1fa0"}, {0x88, 0x118, 0x9, "23473d96deacdf38b22fd1920e97671e12dd977df31c4163447fe8745452d5b07727d99cc68405e5e0475e4f0e3bd810f603ebf25890f6201f628d3ffdc396b68c4b2e86c2d6f23d8be89e9f61a9ed0a8915e854f1b4777faf98f963d508269223cfcf77fb234e5a5836479abbf9e4cfd967edf6a61c7f97"}, {0xd0, 0x10e, 0x1676d5ce, "cce679e13d8854735cb875fde22fcf33393bf224dea4ba27321e93102377a40500890426e3e5d0a5d3304b5341007c19f5e03daa4e4db65fa7d44ca7326b369fd28bbb3ee9792413d9dbfcbed9add8db2d3bf2671e8a327b95e84995b6f1ba388c5c75ecdf8ec0a4f1a584198cd3fd480fb65b7482aa8e4b6296e8114efb1f95f1e0c620e4f603bbbce596fa68be2fdd6f819abad30c6fc2eccb7aeb3408c6002741d78863ad44b9a3e5c45a649e27a2d97e6f37fb08ed249138e824f2"}, {0x38, 0x1, 0x8, "2ddd4861445030cda91459922ad02a0eef9d15c1c6c95ca0037caefe23d18ff2d0dd"}], 0x1a8}, 0x0, 0x1, 0x1}, 0x1) sendfile(r0, r1, 0x0, 0x0) [ 925.197561] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 925.199632] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 925.201325] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 925.203051] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 925.204746] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 925.206476] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 925.227950] EXT4-fs error (device loop6): __ext4_get_inode_loc:4406: comm syz-executor.6: Invalid inode table block 0 in block_group 0 [ 925.242303] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.7'. [ 925.248933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=7493 comm=syz-executor.7 [ 925.255733] EXT4-fs (loop6): get root inode failed [ 925.257086] EXT4-fs (loop6): mount failed [ 925.269090] loop4: detected capacity change from 0 to 135266304 [ 925.358711] kauditd_printk_skb: 96 callbacks suppressed [ 925.358728] audit: type=1326 audit(1748056562.610:177): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7509 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6c237b19 code=0x7ffc0000 03:16:02 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 925.377912] audit: type=1326 audit(1748056562.624:178): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7509 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fcf6c237b19 code=0x7ffc0000 [ 925.394744] audit: type=1326 audit(1748056562.626:179): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7509 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6c237b19 code=0x7ffc0000 03:16:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 36) [ 925.413538] audit: type=1326 audit(1748056562.626:180): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7509 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6c237b19 code=0x7ffc0000 [ 925.432294] audit: type=1326 audit(1748056562.628:181): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7509 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf6c237b19 code=0x7ffc0000 03:16:02 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1000) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x80000015}, r0, 0x3, 0x0, 0x0, {0x0, r5}}, 0x2) [ 925.459098] audit: type=1326 audit(1748056562.636:182): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7509 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6c237b19 code=0x7ffc0000 03:16:02 executing program 7: pread64(0xffffffffffffffff, &(0x7f0000000000)=""/165, 0xa5, 0x9) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0xca3, 0x2989, 0x2, &(0x7f0000000000), 0x8) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000005c0)=[{0x0, 0x49}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, 0x1, 0x0, 0x0, {0x0, r5}}, 0x80000001) [ 925.497634] loop4: detected capacity change from 0 to 135266304 [ 925.500311] audit: type=1326 audit(1748056562.637:183): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7509 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6c237b19 code=0x7ffc0000 03:16:02 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="03000000040000", 0x7, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) [ 925.560162] audit: type=1326 audit(1748056562.638:184): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7509 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fcf6c237b19 code=0x7ffc0000 [ 925.576928] FAULT_INJECTION: forcing a failure. [ 925.576928] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 925.579987] CPU: 0 PID: 7528 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 925.581743] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 925.583778] Call Trace: [ 925.584431] dump_stack+0x107/0x167 [ 925.585321] should_fail.cold+0x5/0xa [ 925.586268] __alloc_pages_nodemask+0x182/0x600 [ 925.587401] ? xa_load+0x12d/0x2c0 [ 925.588278] ? lock_downgrade+0x6d0/0x6d0 [ 925.589307] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 925.590799] alloc_pages_current+0x187/0x280 [ 925.591878] __page_cache_alloc+0x2d2/0x360 [ 925.592946] page_cache_ra_unbounded+0x207/0x6f0 [ 925.594113] ? read_pages+0xbc0/0xbc0 [ 925.595048] ? __lock_page_or_retry+0x4e0/0x4e0 [ 925.596203] ondemand_readahead+0x8e5/0x1150 [ 925.597283] page_cache_sync_ra+0x138/0x170 [ 925.598353] generic_file_buffered_read+0xc8e/0x2920 [ 925.599611] ? pagecache_get_page+0xc80/0xc80 [ 925.600696] ? kasan_save_stack+0x32/0x40 [ 925.601718] ? do_splice_direct+0x1c4/0x290 [ 925.602781] ? do_sendfile+0x553/0x11e0 [ 925.603745] ? __x64_sys_sendfile64+0x1d1/0x210 [ 925.604876] ? do_syscall_64+0x33/0x40 [ 925.605827] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 925.607118] ? perf_trace_lock+0xac/0x490 [ 925.608135] generic_file_read_iter+0x33f/0x490 [ 925.609248] ? __fsnotify_parent+0x47a/0xb10 [ 925.610334] ext4_file_read_iter+0x184/0x4c0 [ 925.611419] generic_file_splice_read+0x455/0x6d0 [ 925.612577] ? pipe_to_user+0x170/0x170 [ 925.613559] ? fsnotify_perm.part.0+0x22d/0x620 [ 925.614716] ? security_file_permission+0xb1/0xe0 [ 925.615882] ? pipe_to_user+0x170/0x170 [ 925.616857] do_splice_to+0x10e/0x160 [ 925.617774] splice_direct_to_actor+0x2fe/0x980 [ 925.618930] ? pipe_to_sendpage+0x380/0x380 [ 925.619967] ? do_splice_to+0x160/0x160 [ 925.620935] ? security_file_permission+0xb1/0xe0 [ 925.622121] do_splice_direct+0x1c4/0x290 [ 925.623142] ? splice_direct_to_actor+0x980/0x980 [ 925.624325] ? avc_policy_seqno+0x9/0x70 [ 925.625322] ? security_file_permission+0xb1/0xe0 [ 925.626518] do_sendfile+0x553/0x11e0 [ 925.627464] ? do_pwritev+0x270/0x270 [ 925.628391] ? wait_for_completion_io+0x270/0x270 [ 925.629572] ? rcu_read_lock_any_held+0x75/0xa0 [ 925.630716] ? vfs_write+0x354/0xb10 [ 925.631633] __x64_sys_sendfile64+0x1d1/0x210 [ 925.632733] ? __ia32_sys_sendfile+0x220/0x220 [ 925.633855] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 925.635148] ? syscall_enter_from_user_mode+0x1d/0x50 [ 925.636408] do_syscall_64+0x33/0x40 [ 925.637322] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 925.638586] RIP: 0033:0x7fe3014fcb19 [ 925.639505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 925.643979] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 925.645818] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 925.647543] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 925.649268] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 925.651013] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 925.652739] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 925.677830] audit: type=1326 audit(1748056562.645:185): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7509 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcf6c237b62 code=0x7ffc0000 [ 925.704781] loop6: detected capacity change from 0 to 2102784 [ 925.706603] audit: type=1326 audit(1748056562.652:186): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7509 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcf6c237b62 code=0x7ffc0000 03:16:02 executing program 3: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) ftruncate(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team_slave_1\x00', 0x0}) statx(r1, &(0x7f0000000180)='./file1\x00', 0x0, 0x10, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x40040) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002400010000000000000000000000752ce9e7040000000000"], 0x1c}}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstat(r1, 0x0) sendfile(r1, r4, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001d80)={&(0x7f0000001b00)=@expire={0x274, 0x18, 0x100, 0x70bd29, 0x25dfdbfb, {{{@in=@multicast2, @in=@broadcast, 0x4e21, 0x0, 0x4e21, 0x5, 0x2, 0xa0, 0x0, 0x32, 0x0, 0xffffffffffffffff}, {@in=@multicast2, 0x4d2, 0x2b}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, {0x81, 0x9, 0x0, 0x1ff, 0x4, 0x45aa6860, 0x400}, {0x400, 0x401, 0xffffffffffff0000, 0x80000001}, {0x8, 0x22d9, 0x1}, 0x70bd2b, 0x3501, 0xa, 0x1, 0x7, 0x58}, 0x6}, [@user_kmaddress={0x2c, 0x13, {@in=@loopback, @in6=@remote, 0x0, 0xa}}, @lastused={0xc, 0xf, 0x8000}, @replay_val={0x10, 0xa, {0x70bd28, 0x70bd2a, 0xffff}}, @offload={0xc, 0x1c, {r3, 0x3}}, @replay_esn_val={0x34, 0x17, {0x6, 0x70bd2a, 0x70bd28, 0x70bd08, 0x70bd2a, 0x80, [0x8, 0x6, 0x100, 0x80000000, 0x3, 0x0]}}, @proto={0x5, 0x19, 0xff}, @sa={0xe4, 0x6, {{@in=@multicast2, @in6=@private0, 0x4e21, 0xf3e, 0x4e24, 0x1, 0x0, 0x1dbdd5df81725565, 0x80, 0x33}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d2, 0x2b}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x3f, 0x800, 0x100, 0xffff, 0x0, 0x4, 0x101, 0x401}, {0x5, 0x2, 0x670, 0x5}, {0x8d3, 0x3, 0x8}, 0x70bd2b, 0x0, 0xa, 0x2, 0x81, 0xa2}}, @replay_thresh={0x8, 0xb, 0x9}]}, 0x274}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) 03:16:02 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 925.783975] EXT4-fs error (device loop6): __ext4_get_inode_loc:4406: comm syz-executor.6: Invalid inode table block 0 in block_group 0 [ 925.786828] EXT4-fs (loop6): get root inode failed [ 925.787679] EXT4-fs (loop6): mount failed 03:16:03 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x804ebb, &(0x7f0000001780)={0x0, 0x0, 0x10}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x12, r0, 0x0) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r4, 0xca3, 0x2989, 0x2, &(0x7f0000000000), 0x8) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000005c0)=[{0x0, 0x49}], 0x1}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r8, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, r6, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x1, 0x1}, 0x10001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000300)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x8, 0x0, 0x0, 0x6, 0x9, 0x1, {0x0, 0x0, r4}}, 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x4010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r11, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x40) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 925.826431] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:16:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x3c, r1, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x13}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x45) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 03:16:16 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="240000002f8abcc16dac1328965625990010000100000000000000ff7f00fcff00000000b2d7fa0245438ce19ffd03367d329a2a1d5bd4751753e2a9ccf2f0da357fdee57d56b2ac4816b36ea70951b774344ef1a4c20eb6fa44f201cfba81f1d23cce6921f017722594ec93556088a25bfa778fdebbb4e7c23ebf3d8de352f6e4fdabb7e3bcd764a598e3887aabda3631e22f8440ccde5b98720a143a56e904a10db4c6f44730"], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000940)=ANY=[@ANYBLOB="95b50000018fd33a0000000000000000180000", @ANYRES32=r0, @ANYBLOB="04a500006ccf5e00a30878ffff75db00808ebf8b85b5363cdf1595a0bee6cc6ec57b594af05d2bcaace304ab11b2f0de03bff4371a9012ef1c32b4b5c6366f172a140b3c90f6de5877ef5a6a3a26844c4bc8c82413041c010b22156a4c9a107723a5f2df0884ac7b2d8cf48af5dc01fc3d1d08a58cc865e3f2f712e1a4eabdc0986bd04ce4c790d9de030b3ca0239c52c979afa3e6e8c80f01000eba254f7d13aa0b68306d66d92477fe946e898db0c1"]) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) openat(r3, &(0x7f0000000400)='./file1\x00', 0x0, 0x114) syz_open_procfs(0x0, &(0x7f0000000280)='net/snmp\x00') faccessat(r1, &(0x7f0000000000)='./file1\x00', 0xb0) read(r2, &(0x7f00000006c0)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x8e1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/44, 0x2c}], 0x1, 0xffff57e9, 0x4) r4 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f}, 0x0, 0x0, 0x9, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x220998a32b054e1b, 0x80, 0x0, 0x1, 0x5, 0x9, 0x0, 0x0, 0x68, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2dd, 0x2, @perf_bp={0x0}, 0x210, 0x80000000, 0x8, 0x0, 0x0, 0x9, 0x1, 0x0, 0x81, 0x0, 0xbe}, 0x0, 0x0, r4, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000240)=0xb81, 0x9) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 03:16:16 executing program 7: prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) gettid() r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r2, 0x8) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) io_uring_enter(r2, 0xecf, 0x9e98, 0x1, &(0x7f0000000000)={[0x8]}, 0x8) sendfile(r0, r1, 0x0, 0xffe3) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) 03:16:16 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendfile(r0, r1, 0x0, 0xffe3) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) r2 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, r2) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000000, r2) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5000007, r2) 03:16:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000430e48066acda07099cd18000000824758f7fc682296777ee2a967f01d863be785eb3acaf7322edd98592a7ea33c19a795ea17dc5562d5937cbb86a7db0700dec4b184f07b0cfdab9fd290a9edf8367a2bc71e9892c85e7a4271e7fdc39d173e7ea39618016b2d209c7ac9066804a58ed8f2eecf5e2b97f52b41a305e6b5b07dd52fe79c5899bcac2b70007acc74c495da2f1c09756728a931e300009f11bb50ca553ed79a2d306aaad0aae188fe0761c07eff01b9cf13a951575b0ecb3da1ad8874874b221d7949bfff861335123f3c50bcb3417c359f2fe0effbe0d0952a76254635306f8fae021b5b3d02f05c2fd84385ebedd9c0069e54c2e5aa0f6bf0aeed4d248d6aa542093ff026f7", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\a\x00\x00\x00./file0\x00\x00']) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000280)={0x0, 0x0, "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", "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"}) [ 939.457356] loop6: detected capacity change from 0 to 2102784 [ 939.460051] FAULT_INJECTION: forcing a failure. [ 939.460051] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 939.465280] CPU: 0 PID: 7574 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 939.467134] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 939.468560] EXT4-fs warning (device sda): verify_group_input:175: Cannot read last block (2148007935) [ 939.469370] Call Trace: [ 939.469399] dump_stack+0x107/0x167 [ 939.469425] should_fail.cold+0x5/0xa [ 939.469455] __alloc_pages_nodemask+0x182/0x600 [ 939.475373] ? xa_load+0x12d/0x2c0 [ 939.476179] ? lock_downgrade+0x6d0/0x6d0 [ 939.477266] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 939.478658] alloc_pages_current+0x187/0x280 [ 939.479661] __page_cache_alloc+0x2d2/0x360 [ 939.480643] page_cache_ra_unbounded+0x207/0x6f0 [ 939.481724] ? read_pages+0xbc0/0xbc0 [ 939.482583] ? __lock_page_or_retry+0x4e0/0x4e0 [ 939.483641] ondemand_readahead+0x8e5/0x1150 [ 939.484640] page_cache_sync_ra+0x138/0x170 [ 939.485607] generic_file_buffered_read+0xc8e/0x2920 [ 939.486773] ? pagecache_get_page+0xc80/0xc80 [ 939.487771] ? kasan_save_stack+0x32/0x40 [ 939.488702] ? do_splice_direct+0x1c4/0x290 [ 939.489672] ? do_sendfile+0x553/0x11e0 [ 939.490565] ? __x64_sys_sendfile64+0x1d1/0x210 [ 939.491620] ? do_syscall_64+0x33/0x40 [ 939.492500] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 939.493705] ? perf_trace_lock+0xac/0x490 [ 939.494647] generic_file_read_iter+0x33f/0x490 [ 939.495702] ? __fsnotify_parent+0x47a/0xb10 [ 939.496701] ext4_file_read_iter+0x184/0x4c0 [ 939.497692] generic_file_splice_read+0x455/0x6d0 [ 939.498789] ? pipe_to_user+0x170/0x170 [ 939.499701] ? fsnotify_perm.part.0+0x22d/0x620 [ 939.500753] ? security_file_permission+0xb1/0xe0 [ 939.501843] ? pipe_to_user+0x170/0x170 [ 939.502747] do_splice_to+0x10e/0x160 [ 939.503605] splice_direct_to_actor+0x2fe/0x980 [ 939.504661] ? pipe_to_sendpage+0x380/0x380 [ 939.505628] ? do_splice_to+0x160/0x160 [ 939.506533] ? security_file_permission+0xb1/0xe0 [ 939.507630] do_splice_direct+0x1c4/0x290 [ 939.508563] ? splice_direct_to_actor+0x980/0x980 [ 939.509650] ? avc_policy_seqno+0x9/0x70 [ 939.510590] ? security_file_permission+0xb1/0xe0 [ 939.511691] do_sendfile+0x553/0x11e0 [ 939.512560] ? do_pwritev+0x270/0x270 [ 939.513419] ? wait_for_completion_io+0x270/0x270 [ 939.514521] ? rcu_read_lock_any_held+0x75/0xa0 [ 939.515569] ? vfs_write+0x354/0xb10 [ 939.516414] __x64_sys_sendfile64+0x1d1/0x210 [ 939.517430] ? __ia32_sys_sendfile+0x220/0x220 [ 939.518475] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 939.519648] ? syscall_enter_from_user_mode+0x1d/0x50 [ 939.520811] do_syscall_64+0x33/0x40 [ 939.521653] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 939.522813] RIP: 0033:0x7fe3014fcb19 [ 939.523647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 939.527796] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 939.529510] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 939.531130] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 939.532731] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 939.534350] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 939.535958] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001280)={r2, 0x0, "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", "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"}) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) 03:16:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x0, 0x80000000}) 03:16:16 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="03000000040000", 0x7, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 03:16:16 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:16:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 37) [ 939.548713] EXT4-fs error (device loop6): __ext4_get_inode_loc:4406: comm syz-executor.6: Invalid inode table block 0 in block_group 0 03:16:16 executing program 4: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0xf9, 0x3f, 0x8, 0x0, 0x4, 0x11000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_bp={&(0x7f0000000100), 0x6}, 0x18440, 0x100000000, 0xff, 0x0, 0x1000, 0xffffffc1, 0xa69, 0x0, 0x1, 0x0, 0xf8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) prlimit64(r0, 0xa, &(0x7f00000000c0)={0xff, 0x40}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x0, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x1, 0x1, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0x20000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x0, 0x2}, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) prlimit64(r0, 0xb, 0x0, &(0x7f0000000040)) io_setup(0x2d47, &(0x7f0000000000)) [ 939.557700] EXT4-fs (loop6): get root inode failed [ 939.558786] EXT4-fs (loop6): mount failed [ 939.597375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35375 sclass=netlink_route_socket pid=7584 comm=syz-executor.3 03:16:16 executing program 5: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) syz_read_part_table(0x8000, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="01002abd7000ffdbdf25030000000500300000000000"], 0x1c}}, 0x0) [ 939.684970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.686800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.708009] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 939.726225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35375 sclass=netlink_route_socket pid=7594 comm=syz-executor.3 03:16:16 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:16:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg$unix(r0, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000140)=""/57, 0x39}, {&(0x7f0000000380)=""/255, 0xff}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000240)=""/80, 0x50}, {&(0x7f0000001500)=""/223, 0xdf}, {&(0x7f0000000180)=""/22, 0x16}], 0x6, &(0x7f0000001680)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001700)=""/192, 0xc0}, {&(0x7f00000017c0)=""/134, 0x86}, {&(0x7f0000001880)=""/41, 0x29}, {&(0x7f00000018c0)=""/246, 0xf6}, {&(0x7f00000019c0)=""/248, 0xf8}, {&(0x7f0000001ac0)=""/145, 0x91}], 0x6, &(0x7f0000001c00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000001c40), 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001cc0)=""/38, 0x26}, {&(0x7f0000001d00)=""/238, 0xee}], 0x2, &(0x7f0000001e40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000001e80)=@abs, 0x6e, &(0x7f0000002200)=[{&(0x7f0000001f00)=""/233, 0xe9}, {&(0x7f0000002000)=""/207, 0xcf}, {&(0x7f0000002100)=""/237, 0xed}], 0x3, &(0x7f0000002240)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000002280), 0x6e, &(0x7f0000002480)=[{&(0x7f0000002300)=""/67, 0x43}, {&(0x7f0000002380)=""/82, 0x52}, {&(0x7f0000002400)=""/97, 0x61}], 0x3, &(0x7f00000024c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x5, 0x41, 0x0) mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1080, 0x0) r2 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0x16}, &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) fcntl$addseals(r1, 0x409, 0x8) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:16:17 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="03000000040000", 0x7, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 03:16:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 38) [ 939.782834] loop5: detected capacity change from 0 to 32768 [ 939.827075] loop5: detected capacity change from 0 to 32768 [ 939.885032] FAULT_INJECTION: forcing a failure. [ 939.885032] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 939.887862] CPU: 1 PID: 7608 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 939.889431] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 939.891356] Call Trace: [ 939.891972] dump_stack+0x107/0x167 [ 939.892818] should_fail.cold+0x5/0xa [ 939.893698] __alloc_pages_nodemask+0x182/0x600 [ 939.894776] ? xa_load+0x12d/0x2c0 [ 939.895603] ? lock_downgrade+0x6d0/0x6d0 [ 939.896557] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 939.897955] alloc_pages_current+0x187/0x280 [ 939.898981] __page_cache_alloc+0x2d2/0x360 [ 939.899982] page_cache_ra_unbounded+0x207/0x6f0 [ 939.901081] ? read_pages+0xbc0/0xbc0 [ 939.901945] ? __lock_page_or_retry+0x4e0/0x4e0 [ 939.903039] ondemand_readahead+0x8e5/0x1150 [ 939.904062] page_cache_sync_ra+0x138/0x170 [ 939.905059] generic_file_buffered_read+0xc8e/0x2920 [ 939.906239] ? pagecache_get_page+0xc80/0xc80 [ 939.907258] ? kasan_save_stack+0x32/0x40 [ 939.908213] ? do_splice_direct+0x1c4/0x290 [ 939.909196] ? do_sendfile+0x553/0x11e0 [ 939.910096] ? __x64_sys_sendfile64+0x1d1/0x210 [ 939.911159] ? do_syscall_64+0x33/0x40 [ 939.912038] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 939.913254] ? perf_trace_lock+0xac/0x490 [ 939.914211] generic_file_read_iter+0x33f/0x490 [ 939.915287] ? __fsnotify_parent+0x47a/0xb10 [ 939.916298] ext4_file_read_iter+0x184/0x4c0 [ 939.917310] generic_file_splice_read+0x455/0x6d0 [ 939.918423] ? pipe_to_user+0x170/0x170 [ 939.919333] ? fsnotify_perm.part.0+0x22d/0x620 [ 939.920387] ? security_file_permission+0xb1/0xe0 [ 939.921484] ? pipe_to_user+0x170/0x170 [ 939.922383] do_splice_to+0x10e/0x160 [ 939.923242] splice_direct_to_actor+0x2fe/0x980 [ 939.924302] ? pipe_to_sendpage+0x380/0x380 [ 939.925273] ? do_splice_to+0x160/0x160 [ 939.926160] ? security_file_permission+0xb1/0xe0 [ 939.927263] do_splice_direct+0x1c4/0x290 [ 939.928190] ? splice_direct_to_actor+0x980/0x980 [ 939.929270] ? avc_policy_seqno+0x9/0x70 [ 939.930193] ? security_file_permission+0xb1/0xe0 [ 939.931302] do_sendfile+0x553/0x11e0 [ 939.932177] ? do_pwritev+0x270/0x270 [ 939.933042] ? wait_for_completion_io+0x270/0x270 [ 939.934130] ? rcu_read_lock_any_held+0x75/0xa0 [ 939.935190] ? vfs_write+0x354/0xb10 [ 939.936033] __x64_sys_sendfile64+0x1d1/0x210 [ 939.937045] ? __ia32_sys_sendfile+0x220/0x220 [ 939.938082] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 939.939265] ? syscall_enter_from_user_mode+0x1d/0x50 [ 939.940421] do_syscall_64+0x33/0x40 [ 939.941244] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 939.942386] RIP: 0033:0x7fe3014fcb19 [ 939.943213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:16:17 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$CDROM_CHANGER_NSLOTS(r0, 0x5328) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x8a7, 0x6f1bee22, 0x3e6}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)=ANY=[@ANYBLOB="016000"/12, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0']) msgctl$IPC_INFO(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1cd, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) msgget$private(0x0, 0x0) getresgid(&(0x7f00000010c0)=0x0, &(0x7f0000001100)=0x0, &(0x7f0000001140)) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000001200)={{0x0, 0xee01, r4, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f}) r5 = getuid() semctl$IPC_RMID(0x0, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f00000003c0)=""/238) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r6) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x3, r6, r3, r5, r4, 0x4a, 0x8}, 0x101, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x5}) getresgid(&(0x7f00000010c0), &(0x7f0000001100)=0x0, &(0x7f0000001140)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x2, 0xee01, r4, r5, r7, 0x100, 0x3}, 0x0, 0x0, 0x7, 0x5, 0x0, 0x1, 0xeff, 0x4, 0x1000, 0x3, 0x0, 0xffffffffffffffff}) 03:16:17 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) creat(0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r1, 0x8) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000040)=""/152, &(0x7f0000000280)=0x98) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9", 0x13}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r2, 0x4c07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) r7 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r7, 0xca3, 0x2989, 0x2, &(0x7f0000000000), 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x80000001) [ 939.947510] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 939.949371] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 939.950947] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 939.952517] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 939.954080] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 939.955661] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 939.962176] loop6: detected capacity change from 0 to 2102784 03:16:17 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = fork() tkill(r4, 0x26) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/crypto\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x40, 0x4c, 0x9, 0x0, 0x0, 0x9, 0x80004, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x2}, 0x5b88, 0x1, 0xffff65ab, 0x3, 0x7da6, 0x8, 0x957, 0x0, 0x7fffffff, 0x0, 0x200}, r4, 0x10, r5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8", 0xf}], 0x1}}, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)=ANY=[@ANYBLOB="b0cc9fab71070000000000000008000000f1657787bafe", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) 03:16:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000019001f00001b00f700"]) [ 940.060267] loop7: detected capacity change from 0 to 2103296 [ 940.139352] loop3: detected capacity change from 0 to 2048 03:16:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 39) [ 940.153021] EXT4-fs error (device loop6): __ext4_get_inode_loc:4406: comm syz-executor.6: Invalid inode table block 0 in block_group 0 [ 940.157327] EXT4-fs (loop6): get root inode failed [ 940.158606] EXT4-fs (loop6): mount failed [ 940.200851] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 940.203254] FAULT_INJECTION: forcing a failure. [ 940.203254] name failslab, interval 1, probability 0, space 0, times 0 [ 940.205956] CPU: 0 PID: 7630 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 940.207531] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 940.209427] Call Trace: [ 940.210046] dump_stack+0x107/0x167 [ 940.210891] should_fail.cold+0x5/0xa [ 940.211755] ? jbd2__journal_start+0x190/0x7e0 [ 940.212814] should_failslab+0x5/0x20 [ 940.213673] kmem_cache_alloc+0x5b/0x310 [ 940.214702] jbd2__journal_start+0x190/0x7e0 [ 940.215896] __ext4_journal_start_sb+0x214/0x390 [ 940.217194] ext4_dirty_inode+0xbc/0x130 [ 940.218285] ? ext4_setattr+0x20f0/0x20f0 [ 940.219418] __mark_inode_dirty+0x492/0xd40 [ 940.220592] touch_atime+0x5ea/0x6e0 [ 940.221602] ? atime_needs_update+0x600/0x600 [ 940.222845] generic_file_buffered_read+0x191a/0x2920 [ 940.224258] ? pagecache_get_page+0xc80/0xc80 [ 940.225455] ? kasan_save_stack+0x32/0x40 [ 940.226587] ? do_splice_direct+0x1c4/0x290 [ 940.227752] ? do_sendfile+0x553/0x11e0 [ 940.228827] ? __x64_sys_sendfile64+0x1d1/0x210 [ 940.230086] ? do_syscall_64+0x33/0x40 [ 940.231138] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 940.232556] ? perf_trace_lock+0xac/0x490 [ 940.233677] generic_file_read_iter+0x33f/0x490 [ 940.234932] ? __fsnotify_parent+0x47a/0xb10 [ 940.236116] ext4_file_read_iter+0x184/0x4c0 [ 940.237306] generic_file_splice_read+0x455/0x6d0 [ 940.238605] ? pipe_to_user+0x170/0x170 [ 940.239680] ? fsnotify_perm.part.0+0x22d/0x620 [ 940.240936] ? security_file_permission+0xb1/0xe0 [ 940.242238] ? pipe_to_user+0x170/0x170 [ 940.243310] do_splice_to+0x10e/0x160 [ 940.244335] splice_direct_to_actor+0x2fe/0x980 [ 940.245579] ? pipe_to_sendpage+0x380/0x380 [ 940.246729] ? do_splice_to+0x160/0x160 [ 940.247777] ? security_file_permission+0xb1/0xe0 [ 940.249060] do_splice_direct+0x1c4/0x290 [ 940.250159] ? splice_direct_to_actor+0x980/0x980 [ 940.251436] ? avc_policy_seqno+0x9/0x70 [ 940.252513] ? security_file_permission+0xb1/0xe0 [ 940.253801] do_sendfile+0x553/0x11e0 [ 940.254825] ? do_pwritev+0x270/0x270 [ 940.255830] ? wait_for_completion_io+0x270/0x270 [ 940.257102] ? rcu_read_lock_any_held+0x75/0xa0 [ 940.258322] ? vfs_write+0x354/0xb10 [ 940.259314] __x64_sys_sendfile64+0x1d1/0x210 [ 940.260491] ? __ia32_sys_sendfile+0x220/0x220 [ 940.261684] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 940.263056] ? syscall_enter_from_user_mode+0x1d/0x50 [ 940.264403] do_syscall_64+0x33/0x40 [ 940.265373] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 940.266716] RIP: 0033:0x7fe3014fcb19 [ 940.267687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 940.272457] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 940.274461] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 940.276317] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 940.278167] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 940.280040] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 940.281897] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 940.295387] ieee802154 phy0 wpan0: encryption failed: -22 [ 940.320029] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 940.322272] loop3: detected capacity change from 0 to 2048 [ 940.325988] ext4 filesystem being mounted at /syzkaller-testdir044052904/syzkaller.iMa4am/95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 940.336613] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 940.439647] ieee802154 phy0 wpan0: encryption failed: -22 [ 956.143079] loop6: detected capacity change from 0 to 2102784 03:16:33 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(0x0, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:16:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r1, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x0, 0x0, r0, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x733}]) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x0, 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r4, 0x8) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fadvise64(r5, 0x0, 0xfff, 0x4) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}}, 0x108) io_submit(r1, 0x5, &(0x7f0000000500)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x6, r2, &(0x7f0000000240)="e80f10740f7455a4767e1131bfbb300493f8c0919eed1c60c6f8c4efa931ce7525a6df47a078ed2ff9611fa94eef24f27454a6b7ebe5d80f8644ef996c18f8e03610b947628cc3bc3ba492f1177d21a12d56c1192ea8fa97529b650b20094daf3c857aa8b7819e0f4b3c9ee490d6ecdff0194eb67ea669d9c0bff9ea7554100e381b6a4b05b29527051382988e85381c0babb230e523d72ddf2382560d806a9b29d9bb6107dbaa6bd9f569eb83e74df0d6ef55beab6d862bd67d0b3b662a8a869ac464c103ad4f65aa72e37f5202227d9cbae8faa0ca09da2ead3934f3fc50aea42cc9fb66432b521b8b46cd792ac2", 0xef, 0x10, 0x0, 0x1, r0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x4c, r0, &(0x7f00000000c0)="5c25914abfd3c04e0c855ae79d058e3a838e963e69accbc37cc048d2922e2aa9a88288ad9b9f25beb071f7dd", 0x2c, 0x1, 0x0, 0x3}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f0000000340), 0x0, 0x1, 0x0, 0x2, r4}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x6, r5, &(0x7f00000003c0)="b885ed7708a5e5efa97d4c257390c65b9d572daa99177baee16bdb9d6d5cf30a5359f0150b8a4178b7f9fe40396b132d8cf2ba46d680a941b107bc10465f8c2ceabece9d7239eed49a5250ceb55173e006c7a2e3c918359814d3df202138d77edfbb3c3f5aee0993b819a77b82c6da4acefd93af37", 0x75, 0x7f, 0x0, 0x3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x0, r0, &(0x7f0000000480)="c41d67affa0cad9fe5d613daceb3b4ea27cf3597ede45b30524386ec67811b2744faf732", 0x24, 0x1, 0x0, 0x0, r0}]) 03:16:33 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 40) 03:16:33 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="0300000004000000", 0x8, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 03:16:33 executing program 3: r0 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e24, @private=0xa010101}, 0x88, 0x0, 0x0, 0x0, 0x9511, 0x0, 0x101, 0x5, 0x57}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x29, &(0x7f0000000080)=0x1897, 0x4) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100), 0x4) 03:16:33 executing program 7: rt_sigaction(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @local, 0x2000000}}}, 0x108) pselect6(0x40, &(0x7f00000013c0)={0x0, 0xfffffffffffffeff, 0x0, 0x100000000009d, 0x5, 0x0, 0x8}, 0x0, &(0x7f0000001440)={0xe9, 0x80000000a, 0x0, 0x2000000000000005, 0x1, 0x401, 0x82, 0x104c0cd1}, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={[0x7]}, 0x8}) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) quotactl(0xffffffffffffffff, &(0x7f0000001340)='./file0\x00', 0x0, &(0x7f0000000280)="637b5d08ae0d188e16aa9c33de0e6ded4f1e4e660c0e224d0270a6e673a75480cf7f06d1e53798a2acdb3a4a8f435a290000c65a7edea4f0d894b6380c93235d4a864b3423b4eea94120a6eaa2c24e5ddcf380bb67c6bf3c7573e90206ca93993da406cb868b5c916bccc73e024ab4cf3cff4b83e446a81bef0b358f01508a85ac00962191e90042c9c0cd23afd33a7fff083e9dfae1b3442f0d71c91f8c0ce52d85d0caffaf0b5151c0defbc27966460415b4acb6c8bf27e66c0bbe0fc462caa2f811128ef0afb18df2b6c7dcfe6ccddb55b2cf828bdc78f31d7921a48158a882bcc642365df829d1ec347b1a5cc08eb0335bc31a1bf8b8d745af9b994bad00668c68c5bfd9510b21b467ce30bfc8adc9e7eedda7e6aff2fe3a0d3e5ff0") ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000200)={0x1, 0x0, {0xa, 0x19, 0x12, 0xd, 0x9, 0xb54, 0x3, 0x142, 0xffffffffffffffff}}) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) syz_io_uring_setup(0x4ee5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) fallocate(r4, 0x4, 0x0, 0x68cb) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)=0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000680)=ANY=[], 0x150}}, 0x40000) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000008c0), 0xc) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000240)=0xffffffffffffffff) unshare(0x48020200) 03:16:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1811c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000080)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) recvmmsg$unix(r4, &(0x7f0000003100)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f00000002c0)=""/249, 0xf9}], 0x2}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000003c0)=""/110, 0x6e}, {&(0x7f0000000440)=""/105, 0x69}, {&(0x7f00000004c0)=""/208, 0xd0}, {&(0x7f00000005c0)=""/250, 0xfa}, {&(0x7f00000006c0)=""/175, 0xaf}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/121, 0x79}, {&(0x7f0000001800)=""/76, 0x4c}, {&(0x7f0000001880)=""/92, 0x5c}, {&(0x7f0000001900)=""/68, 0x44}], 0xa, &(0x7f0000001a40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000001b00)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001b80)=""/232, 0xe8}, {&(0x7f0000001c80)=""/109, 0x6d}, {&(0x7f0000001d00)=""/199, 0xc7}, {&(0x7f0000001e00)=""/65, 0x41}], 0x4, &(0x7f0000001ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001fc0)=""/149, 0x95}, {&(0x7f0000002080)=""/137, 0x89}, {&(0x7f0000002140)=""/57, 0x39}], 0x3}}, {{&(0x7f00000021c0), 0x6e, &(0x7f0000002500)=[{&(0x7f0000002240)=""/166, 0xa6}, {&(0x7f0000002300)=""/93, 0x5d}, {&(0x7f0000002380)=""/147, 0x93}, {&(0x7f0000002440)=""/188, 0xbc}], 0x4, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000002580), 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002600)=""/117, 0x75}, {&(0x7f0000002680)=""/239, 0xef}, {&(0x7f0000002780)=""/101, 0x65}, {&(0x7f0000002800)=""/22, 0x16}, {&(0x7f0000002840)=""/59, 0x3b}, {&(0x7f0000002880)=""/198, 0xc6}, {&(0x7f0000002980)=""/155, 0x9b}, {&(0x7f0000002a40)=""/178, 0xb2}, {&(0x7f0000002b00)=""/192, 0xc0}, {&(0x7f0000002bc0)=""/169, 0xa9}], 0xa, &(0x7f0000002d40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000002e00)=@abs, 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000002e80)=""/207, 0xcf}, {&(0x7f0000002f80)=""/28, 0x1c}], 0x2, &(0x7f0000003000)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x7, 0x23, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x2d, &(0x7f0000000000), 0x8) 03:16:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000009, 0x4000010, r1, 0xe5114000) ftruncate(r0, 0x2) r2 = open(&(0x7f0000000040)='./file1\x00', 0x1810c1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000059ec0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f000005a0c0)={0x1d9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "5c80030f0bea08"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0x0, "46dacd8396fe92"}) [ 956.175494] FAULT_INJECTION: forcing a failure. [ 956.175494] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 956.178545] CPU: 0 PID: 7652 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 956.180325] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 956.182375] Call Trace: [ 956.183042] dump_stack+0x107/0x167 [ 956.183943] should_fail.cold+0x5/0xa [ 956.184888] __alloc_pages_nodemask+0x182/0x600 [ 956.186029] ? xa_load+0x12d/0x2c0 [ 956.186918] ? lock_downgrade+0x6d0/0x6d0 [ 956.187943] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 956.189455] alloc_pages_current+0x187/0x280 [ 956.190556] __page_cache_alloc+0x2d2/0x360 [ 956.191634] page_cache_ra_unbounded+0x207/0x6f0 [ 956.192817] ? read_pages+0xbc0/0xbc0 [ 956.193751] ? __lock_page_or_retry+0x4e0/0x4e0 [ 956.194922] ondemand_readahead+0x8e5/0x1150 ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005b0c0)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r6}, {r9}], 0xa, "3065711e166d9c"}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write(r2, &(0x7f0000000280)="65b0e87c5ffebd2f1a527739c99bbc25cb2a0ebbc2071c0fbb7eadaaeb78ebc1e9bbd04e948663a070202e76738ddc79006bec0ff292299c0ada3bf843a845565b68e44afae314fb11c8eb639586e166e17b5bc76acd8a98356f9d4f308f212c674d1e3c6d46299a08fd77597c192265dc27ce8f4de67979a86014f9e927a92b84ec757c76ef5b6f9fd8d03567819f4d9b2ceb0c6f145aa04dd77861ae8e087e99789ae15ea42650646fc5d40cc2681e43d025facd174d0f0cfe71d58e3067a0bcff3b90030547a19b543be0db28dce08f51", 0xd2) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r2}) [ 956.196021] page_cache_sync_ra+0x138/0x170 [ 956.197236] EXT4-fs error (device loop6): __ext4_get_inode_loc:4406: comm syz-executor.6: Invalid inode table block 0 in block_group 0 [ 956.197265] generic_file_buffered_read+0xc8e/0x2920 [ 956.199652] EXT4-fs (loop6): get root inode failed [ 956.200282] ? pagecache_get_page+0xc80/0xc80 [ 956.201019] EXT4-fs (loop6): mount failed [ 956.202051] ? kasan_save_stack+0x32/0x40 [ 956.202077] ? do_splice_direct+0x1c4/0x290 [ 956.204733] ? do_sendfile+0x553/0x11e0 [ 956.205729] ? __x64_sys_sendfile64+0x1d1/0x210 [ 956.206883] ? do_syscall_64+0x33/0x40 [ 956.207839] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 956.209144] ? perf_trace_lock+0xac/0x490 [ 956.210171] generic_file_read_iter+0x33f/0x490 [ 956.211329] ? __fsnotify_parent+0x47a/0xb10 [ 956.212424] ext4_file_read_iter+0x184/0x4c0 [ 956.213514] generic_file_splice_read+0x455/0x6d0 [ 956.214710] ? pipe_to_user+0x170/0x170 [ 956.215704] ? fsnotify_perm.part.0+0x22d/0x620 [ 956.216859] ? security_file_permission+0xb1/0xe0 [ 956.218048] ? pipe_to_user+0x170/0x170 [ 956.219039] do_splice_to+0x10e/0x160 [ 956.219984] splice_direct_to_actor+0x2fe/0x980 [ 956.221139] ? pipe_to_sendpage+0x380/0x380 [ 956.222210] ? do_splice_to+0x160/0x160 [ 956.223200] ? security_file_permission+0xb1/0xe0 [ 956.224403] do_splice_direct+0x1c4/0x290 [ 956.225427] ? splice_direct_to_actor+0x980/0x980 [ 956.226627] ? avc_policy_seqno+0x9/0x70 [ 956.227636] ? security_file_permission+0xb1/0xe0 [ 956.228837] do_sendfile+0x553/0x11e0 [ 956.229793] ? do_pwritev+0x270/0x270 [ 956.230745] ? wait_for_completion_io+0x270/0x270 [ 956.231937] ? rcu_read_lock_any_held+0x75/0xa0 [ 956.233081] ? vfs_write+0x354/0xb10 [ 956.234010] __x64_sys_sendfile64+0x1d1/0x210 [ 956.235122] ? __ia32_sys_sendfile+0x220/0x220 [ 956.236245] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 956.237535] ? syscall_enter_from_user_mode+0x1d/0x50 [ 956.238819] do_syscall_64+0x33/0x40 [ 956.239733] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 956.240992] RIP: 0033:0x7fe3014fcb19 [ 956.241904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 956.246437] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 956.248307] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 956.250059] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 956.251814] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 956.253562] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 956.255319] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 03:16:33 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(0x0, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:16:33 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) 03:16:33 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f31a0000434ef9bab774bdcab95c000d00", 0x0, 0x8}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r0 = socket$inet(0x2, 0xa, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) ioctl$int_out(r0, 0x5460, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) r1 = getpgrp(0x0) r2 = pidfd_open(r1, 0x0) dup(r2) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x1031, &(0x7f0000001240)=""/4108}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DVD_READ_STRUCT(r3, 0x5390, &(0x7f0000000440)=@manufact={0x4, 0x2, 0x800, "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"}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000040)) ftruncate(0xffffffffffffffff, 0x5) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x7, 'geneve0\x00', {0x3}, 0x6}) [ 956.518456] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 956.575531] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 03:16:47 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="0300000004000000", 0x8, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 03:16:47 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100d44666b3ecea3c0b88f5f08f2671ea000018000000d9998f6b0c2b9c01aab8e18bc6078df97f492f2a034323165511890cef7753108982c6a8fe0953a10900000000000000248e368493150700000018d982c077ea998de8ad262aa22d177c9327", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="24000000100001000000000000000096000009000500000000000000050000804800005b"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) dup3(0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRES64=0x0]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x37e23c1ca9999532, 0x70bd2d, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48000}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80202, 0x100) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 03:16:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="28010000280001000000000000000000000000001700000000000000000000000000000000000000fc010000000000000000000000000001fc020000000000000000000000000000fc0200"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac1e0001fc0000000000000000000000000000004e20000100000000000080005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/128], 0x128}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_complete(0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000001240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x3}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r2, 0x1, &(0x7f0000000240)=[{&(0x7f0000000080)="49a334af569c3ef9ce1ddafe3df9c2a518f51d9620794ce7ecf7ed34a1c4608def", 0x21}, {0x0}], 0x2, 0x14}, 0x6) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0xa0010, 0xffffffffffffffff, 0x8000000) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x24008044) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r5, 0x0, 0x100000001) 03:16:47 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0, 0x7f, 0x5, 0x7}, {0x5, 0x0, 0x1, 0x3}]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000800)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000740)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101982, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$LOOP_SET_STATUS(r1, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000440)={0x0, {}, 0x0, {}, 0xa9, 0x12, 0x1d, 0x19, "6e60147ae2fcdc3f1d52584aebeafaa0edd69266edf29bbff612a7a730c97b72b322d0b8aff13a679593d52a3c987ef7c88e49e70f44c10f719a7c0f41774981", "f8258a6ec00c2423b3415e80f5dcc6b04bdfa5322086b2c40bc141347fe2216a", [0x100000001, 0x9]}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x220000, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x200, 0x5, 0x7, 0x1, "00f5fcfdc25f34597997ca8986bc6d38fb36b92675460535184a88639a919a636fc399cb69327ad1688070049903904fc96628577b0000000000001e00", "2f87934459fd43a9829984709a2e821126913d74f3d1ad8285ca2e3a4a403d99", [0xffff, 0x80]}) creat(&(0x7f0000000040)='./file1\x00', 0xc8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000500)=ANY=[@ANYBLOB="9789cdc1a58bb7b4ce6b91f3a41ae2f452523a45992fbb476b7ba2f081093dc89803cc6745a634a880eaf8f2cd4ec1452bc88d990c72ba873c4073a7537a63495141fd6432925ef7240019f7bd2bc2541505748aaf5c8bad5ffbb966b332d87a3c99b80c16f31f280431ef91e60329d436f717ae3ab682c864079f1cdfddc7601028ab42fca994a645a9ace67ba6bb51e46ee029c098ab25d77ca121e4d454aa8515aa58f206340b"]) tkill(0x0, 0x26) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2, 0x1, 0x2, 0x8, 0x0, 0x1b4b, 0x14005, 0xc, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffff, 0x1, @perf_config_ext={0x48, 0x9}, 0x10, 0x2, 0x2, 0x2, 0x7, 0x5, 0x3, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xf, r2, 0x2) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) acct(&(0x7f00000001c0)='./file1\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:16:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 41) 03:16:47 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x96, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) dup3(r0, r0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') [ 970.038362] FAULT_INJECTION: forcing a failure. [ 970.038362] name failslab, interval 1, probability 0, space 0, times 0 [ 970.040053] CPU: 0 PID: 7693 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 970.041077] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 970.042325] Call Trace: [ 970.042734] dump_stack+0x107/0x167 [ 970.043282] should_fail.cold+0x5/0xa [ 970.043855] ? jbd2__journal_start+0x190/0x7e0 03:16:47 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(0x0, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 970.044545] should_failslab+0x5/0x20 [ 970.045218] kmem_cache_alloc+0x5b/0x310 [ 970.045831] jbd2__journal_start+0x190/0x7e0 [ 970.046705] __ext4_journal_start_sb+0x214/0x390 [ 970.047547] ext4_dirty_inode+0xbc/0x130 [ 970.048264] ? ext4_setattr+0x20f0/0x20f0 [ 970.048993] __mark_inode_dirty+0x492/0xd40 [ 970.049765] touch_atime+0x5ea/0x6e0 [ 970.050426] ? atime_needs_update+0x600/0x600 [ 970.051241] generic_file_buffered_read+0x191a/0x2920 [ 970.052173] ? pagecache_get_page+0xc80/0xc80 [ 970.052963] ? kasan_save_stack+0x32/0x40 [ 970.053697] ? do_splice_direct+0x1c4/0x290 [ 970.054463] ? do_sendfile+0x553/0x11e0 [ 970.055173] ? __x64_sys_sendfile64+0x1d1/0x210 [ 970.056000] ? do_syscall_64+0x33/0x40 [ 970.056686] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 970.057631] ? perf_trace_lock+0xac/0x490 [ 970.058369] generic_file_read_iter+0x33f/0x490 [ 970.059204] ? __fsnotify_parent+0x47a/0xb10 [ 970.059985] ext4_file_read_iter+0x184/0x4c0 [ 970.060763] generic_file_splice_read+0x455/0x6d0 [ 970.061615] ? pipe_to_user+0x170/0x170 [ 970.062329] ? fsnotify_perm.part.0+0x22d/0x620 [ 970.063170] ? security_file_permission+0xb1/0xe0 [ 970.064019] ? pipe_to_user+0x170/0x170 [ 970.064727] do_splice_to+0x10e/0x160 [ 970.065402] splice_direct_to_actor+0x2fe/0x980 [ 970.066230] ? pipe_to_sendpage+0x380/0x380 [ 970.067028] ? do_splice_to+0x160/0x160 [ 970.067730] ? security_file_permission+0xb1/0xe0 [ 970.068594] do_splice_direct+0x1c4/0x290 [ 970.069325] ? splice_direct_to_actor+0x980/0x980 [ 970.070177] ? avc_policy_seqno+0x9/0x70 [ 970.070908] ? security_file_permission+0xb1/0xe0 [ 970.071774] do_sendfile+0x553/0x11e0 [ 970.072465] ? do_pwritev+0x270/0x270 [ 970.073140] ? wait_for_completion_io+0x270/0x270 [ 970.074000] ? rcu_read_lock_any_held+0x75/0xa0 [ 970.074831] ? vfs_write+0x354/0xb10 [ 970.075494] __x64_sys_sendfile64+0x1d1/0x210 [ 970.076284] ? __ia32_sys_sendfile+0x220/0x220 [ 970.077096] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 970.078022] ? syscall_enter_from_user_mode+0x1d/0x50 [ 970.078944] do_syscall_64+0x33/0x40 [ 970.079606] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 970.080521] RIP: 0033:0x7fe3014fcb19 [ 970.081179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 970.084458] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 970.085804] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 970.087077] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 970.088197] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 970.089251] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 970.090304] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 03:16:47 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r1) quotactl(0xffffffff, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000500)="62a1466183056b2f3b040d2eca1fff913e6616769550b4f639ed566d8de1fefd5e68e5729c0b35fda0aa39b9139aec7ce5af37eddf36d469c4b9a79c684ac7ccca695c0bf9436745930defb7b5a9206aa2d5f81f2f50ceb6d1397f56561f00f5e3f744afd49215e333e1944637a5e940a461944c79399ace7f9d0b9b0df8329ebefb25ac279cb4ef7c30abc9a4bcb8610b7dd079f1497ddfe7a0d7f83c4b100a3ecf46c26d58a0c9c8232b0c1c2eb7f764b9e445b9ff0e9c6345ce539ab01100415fab4a2d2fc70fb5d7d91d6a18e1b3f113f7a244d7796b5f6f005902289569ad77029a372ef4cc5ba0b6b9689ff4b9b06ebae2e346184b78f3cee4976f8f9f633be9d7c5e51cb3e85ef9b9e99e59d349330f565b4ce9bfc7741e680b2c280c307c08f87f9e085a534ae1e13060ffcb21c473ea413a160a1d0ec75f6fe35764784a79a816b1e3d55475de244f5344d16454d9cd6c4a52ad175a66ec8cbbecd92c1b30b60bb3e6bab03950ab0924ac515aa0814feb1afb671b255ebb56da754f644d947044be15adae07d4ff15aec19014b83f2d2893990b97e5b65f71098f8022d05068c55388175ab6d7c66ffd65ffd7bfaadd7691a68829e6aaa85df61fa57d0c995de56b0d21f06db6bcd3f1b5194844b26a89bf882fe46b5cdf31f17ce8bdc349047ad38bbf21c891aa77d983562a34f18dea9b6e0d644fb841f8b57febdd0bf3e58b51e3aaf86292709204fa5e5eb011bde9735f7cd1b43f9cbc4333b586d81a240db04f6f4f139e9410ad440c112c6bad64adcb2961c2ec2e3f26d22022928b34df0c6255dba736c0c73d8b0cde6b89d3a775b22a946cad74c4543aa672abb65dd3d87a8eb12589310c8c4d2b404292c507bfaa20a707a7dd8d07210bb940131e5a20179c1155df715642575aff9c3a73a71928d96656a33c4add7b8bfa71c4387190d92d18869d6b08927332561bef80b9930a5a51d90d2de66ff248f71b6f7e6f8b75d96abe2de24e4636c40611591397803a8cbffc09c4b4058f73146ef0da063eae045f9034009ce95287668e3d3b4df8b2735ff9c0cef688e3c12671f65ee58a6436318f5cd470b0ade3a4c250ace599ed46f0c6b52c21a3043bbd0afb3eecb0831554abd2aab49df624c87e7a5ffb861caede506da0bca617f28413c7a3dc597926ca187b54ce34e0828fdd756f7bf858db49aa8bcd2f56ddef48c8434fb8c3289b888e2697121e2883d9820111aabc974103d08d955d34987ea8493a12640f19fe6a89e8d73d8cd343cf2d2a5558712b35abd8b44f54aea7cfa4784450258aee7c4e457af2908faedfe0d43f3083c43df1887f732a27f56ca04e86d2fb349f4eba93a185165292c04de9786a5a986bf391ffc87983bcc3959b119a829dd2ac2de89393fb1f727696a42c539b196ea04945ea15efa5092c6a7557b6f6028ed60f0d2936bf30cc5b87ba81d04e6cf08c128e1ddc38b9cb8f552aef3e203517f2bbddb4a782881dd6bd4c806f7584fe74df6881b08a039b3186b4e81282f53287453d7770fbe57a3ffc412675a1b13e4a67de768259740a4d1fbd8e82c200c05fa3513ddb1a1dd12ab43c9f59852cc31840fa4fc72ae3da46d3ae5cf4a60ec2f92be755a2649e42a241a9aa13f79fbf2f397bc056b828fe10adf5d65b620a62bbc606dce1997c8ce0ba863b2e4bebc5d7b483e9fcb93f46ca35218b96321209fd52ef1711b080b67420ace2e04cd9badec0f6c23b7e131e749e798dfc96c47bb00704e6de39d0c5131d94374b0e29b6fa86933e37d046fcee019116f08c0ca947cd61cc8881f8387d5fc0904737af96993061e73664a59fbfa47ed5f04ebef866667c4c4abe86ff01545c3b4852b7b5517f7ad9be6b378ead4ad1ba714a7cc2ac793ff8b5b027ededb8ec42254ed0ede5faa436383ff16d5d0122b21cd4873ba381986ed357ca24b731c480de2ea89aada59317f3073bc1d66572469a9871dc472e94a52272df81d16b9c2dd653a295dfa80a37c24320445a94c5bd72b7d3f8395604933caa865dde933dd24bcadd02bb960fb067afc9d269cf034e7e7d04aeee723d111094cc5e6f4e0fa38ca8dccfa03f56bfa4a60eb54ef2c8f61df3b0e9d4dc2a7faa12bc9ff1b86ea7b852ef36a6e5b3dd9b2d8e7e6de3c20d7b9b34b4a477d5d9b92960d5aacee26655210fd0e73955e140b2a8eda41dad4762426b4fe454c4026c4db638600c8df7404ae629ebf76545c6ce7b49959c65f7bee62464e23a130ed5dddead24527625568ab81c0cf26354e85bba53586310a33927dca7fdf323daf6680b4df41882f20189c5134e319f74a68c225a7ae12102a014469a558b5a3b9a7c25117e23e6e1bb1f96e6bcafaf4530250d10078553afb0cc852ada1d207a32a7bd60409bba3b5e23f61d5f17cd86edb1b5d47d9c21bf954c8b3ca50cd4eacb8480f387a56f5dd4aa401defe8c2053bf36e12311daa034a9b6bd6fb8794f82442e9b0f6f89ddcedbcb2e023509d8038d311cd4de68ec909c2b4abfcadc1947717ba6f39f31ef05966600b682760d192f9702b0bcc597898682a0d23d6506792c1681d0e50ff8e933cfd4910da1600817f6b2bd6da9a8a8e05c69731f0de447f96948e672ad4b005e89c1fea76794adf1cd9ccafb66967b1633400ea6dbeecd6e09337b218f357dae9bd76d85eda5a3f9b08caf173ee7241bf822c7acb7dea332c8c23aed61d6a5558c9981ad06418a6d20ad35c50dd572c37e2435ffba864f55713fbc8f4c879fd80ba6b247f5459b924141b62634ed70fe65f999ff785a0ddb8d56c06411cffee3ee638e23924c8f206455759f9ec09f54687874b838de4771a753f7dce4b8156ed304a7e05bf573b45874344bbb50f94c0b5ec3627e4d92bbe30ef608ab9d994e7c46f410c5d284340ea243e3c419c6e5d154f7ea53971655e57df791a70e6217537cb4d7996f50da076b70fd7471d814326d2263a5ac0133d1f5ce3458152dd7d3b6c7ce4ce7a720d14017129384f4c3a9c4197bf4f327440f2849a911cbf89c1341c393f4fff9e7fce3755605f569a4639a2ca9d6147a7f5d369d77f6a2ebd28e96e24df1044b8ae7522c013cddb507abcacd32edf3af5847f2f26d27534e2e454ee35c35090c0b0ab6b5ed89702a0da28b75e485a4ac1c5710934e4555061d5f9adcb3e6c2b2d0012504e2744bd1335d93cc43d74be441818c37a3fdba8298b2c4437fbc8be0a852a7dc5d17dfb4ddc180b689e80f2fef9a5c7dffff614338ade150304aed18ae093ae8b814a4f251f236a7c16f729adc43371caae991647af7a043741aa7465d47088fd231ebb818c4b3253e272ba38f7516cafadb334d934234922c3ba9294240a6d43720f8b14922838193e7945912c7c4df4901991b6ad450469f891e22ce56bfd50f40ab427b4ce57f389a7e2c0069cdd8854eff293988f497ce09de2c71221aa43710af83383bf1b5f022490da4c3ddc4c94c4d3c3ed9aa6234c78bf56cf512fe58f3a269717e53e5cf4af267153e85e83523072ec5e50001639a299e6ca90637c22579610e401747948299f58ba24c1266b929915ddcef30c29551b904eeb7513589707df0bcf8c3fdf60be151d80f3718e4a7a7c07473c8bbcf73a161315082a2ed706fa92237e0d89a58c8a604d99efa781398d0c5806a4a0dee930f21c8d6ab6b78f5ccf36c688c526228fda14ee5748a474a9b2d7c9381239aeffbf3b962865bc47f58f205a71069de651c5146bf8fd4ba372d9026a447767bd867b51bb8a362d87eecbfcc4aaa269f64083c4e418c1da2b2a5f801bd1897eb58236beacb4cf717036b96ab684d6a1b020e76f05f0c5c4e7766ff03b002d7c969dee4eaf0584e4100d5f2e3165727fedff4853ecc0014fc4e7cc341e7eabf44ea5408b3dbfe3a9cbb825011a9d7780498fba3367e3e75114bffa5225538a8ce24ecddce4d4f447e213d18aa121ec634ba0107e1148898c7aec34fa04508f70206fc188dfcb0991eb55a4bfa684e606b9ff881d49ec807e39dcf440eebc79b5d38c9db09bc13464956e66481c43195f220149b696cc455ee11b89136ec1518330a7ba58dac0d443f250c1be3f68b80438a7a5861a961f7aefd2d3a4245f1fd827c6e4739fec424d71c296437e803ca01482b9ec1b69234c753669cf33065517cecbb10cc208367c5cb87592d3fe4344b6acd4a36d5968044ba45a038c7a3f6835d52b54b377ff50d8799fa7097979730ec31a3c423f1f169abe53649829f654abd26b46a4e0cbb67778b62327a8258db454421d1391aed63c63486f7dfa3b5a475cb16477d9eee085987e15b128781a672e8baa297999c80bd0ae78aded9aabba1bf23f63a182af2492d17256f9ffb6e27357200c32fc7c7d4aa5a4d6df277fec848fec9a6c44178f1ddd68b937e6190d8db05ed70653ce7a733d5a55459934ef71edbecaee644c3eecea15534e2110994e28adca690a4fbff998fd49fb60f21b4cbdadb1496d267582f551b1ad04ac6287137e62476e7cdb7d1a9ce81e5f26d0079e4657d121b2a9446d2f58f82c77a6a9dfa0630aacaa250f8f3fcae637f24375e76accd315b0f9dac5b475931725b9fae9964cb1c2a2c2b27b09ec81e137f98a14d6c6786da60465ba180f3a93ed952e97505e65baf7e0d6f8d2f5b127da10eb12eed1e3031e0df6cefff3549cec7a2eccb6543c9dd557f488ba15dfa50fb8567d3ab0ae5daad66affdfde206d88ab026ede0065f14697f0c6f0f002ed4d5c23fe94dff0dbc834a34bc0424e60710fa6b8f7d082bd58d6897003bc44c4c867db6a9533cc4e36e14cfdde7c41a8e5d500f0ff06537bdf3972e7ee66e3bf417f5ad70779d3faf6a464b93f822f021af1a469069a32c8a6026ac2e40e2b62d838ff38ae3f97ac03eb42c637e0017d82271abd35139c3003cd3258dbf1a97b5d1e6101ba60374e9ffbe6cdcea782eb709ae9fc0200eb4d0582cc7fe913956b3feb9e6d89838fff346558f6fa8a2821f5bab3763040eac5e2dd6e35ed1e645262b9473b595894e217af5569cbd039f5dd87e48f804739e74fc367f95b7932bdd1c1a583802d548d764ff69b92348f53b3d2d293bf7acfc4f8682acf9709d574185a164813becb1b68bf4d14ee991590a2a29e4012268dc7182c7c13c9bb7ea8a8cdc00b30d0be6242f1559e212b355e2cf7f385940ecc95590690c4aacc16ed6200c73f53a189039f710be43de76699a1b5d67ae43a754f78414a08901faaafef9e81900373de4957c4dfd37c1cf4447065e95d10b592652676289c1b7c7a366df415d8882478e96ff0b848ab2a12b915ac460ecb236b870e9894e417ca087506bc5796ae4c6e11c287781e31961841cec7ff1cd0d0f10bdab27ff5de19ea4ef2fc58face02629d6f274b9e8de64bdbf90c99e79e64053e08263f9433b2082b38536e4f5b545deae12a891c6eee915777ccaa3bd031f0f65028cb00881315c74d3de7a95938e776c95d2242ded29cc30a47f166a67979c2fb3fb7200a9fc0f0a18db58c12f62aabd40efa7b061d576a22d79a77606d6e93ba377a0fb401d0441682742e35426c776bc4056fa3ca399e98656ea53fb992cf9a9038fbd53fd5b4f6c4b46b59d4153e841b8c0b4bde7f1bbf9657796085313720e134e290c0e1bdac4bd07e91dc03c847727407195d255f0b6de414dedb9f5723e2d7a6af8ee954386f834e879f1d612c7252d36747cd2266ab265e30e01415132c495d2d5cf9f079cdffae5b677df4f7") ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100100018000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="db00582937ff978dd0df66bf265105000000"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x101) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) [ 970.108720] loop6: detected capacity change from 0 to 2102784 [ 970.112748] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 970.132600] cgroup2: Unknown parameter 'W¶öŽÖ)6¿0Ì[‡ºÐNlðŒŽÜ8¹ËU*ï> 5ò»Ý´§‚ˆÖ½L€ou„þtßh°Š›1†´è‚õ2‡E' 03:16:47 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1, 0x3, 0x0, 0x0, 0x0, 0x8001, 0x84c21, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x8820, 0xfffffffffffffffc, 0x1, 0x1, 0x0, 0xfffffffe, 0xb6, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) flock(0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x1, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fsmount(r4, 0x1, 0x81) r5 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x1000) kcmp(0x0, 0x0, 0x1, r0, r5) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(r1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendto(r1, &(0x7f00000001c0)="4b8101847da6cea738c5edf4c1f4a905b2f73a576687157686c840c28d38cdf8a27f715bc20eadb88b40f52def20c02a5aa942ce1c54c7fa", 0x38, 0x10, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="2b44bed716d9044e01caede08c05dc37a8e9a237c27c76fca8abf64d933e32ca978f5744eb4ea5bbbc1a8b0360b4401e966f8dacd1ce625f436c7612e5e5fa0d9dcc163dfff210e3d45ed0ec5bc3b58e", @ANYRES32, @ANYBLOB="08000000096f421afe37aa4581653000cf73e29b590777e35bac05b7175307df71c3165c9c85f00c0f5f722c0ceeb2e2450cb076f0"]) read(0xffffffffffffffff, 0x0, 0x0) [ 970.174291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.175392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.176076] Process accounting resumed [ 970.176495] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 970.188331] EXT4-fs error (device loop6): __ext4_get_inode_loc:4406: comm syz-executor.6: Invalid inode table block 0 in block_group 0 [ 970.190774] EXT4-fs (loop6): get root inode failed [ 970.191511] EXT4-fs (loop6): mount failed 03:16:47 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="0300000004000000", 0x8, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 03:16:47 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 970.343632] netlink: 252 bytes leftover after parsing attributes in process `syz-executor.3'. [ 970.350040] Process accounting resumed 03:16:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0xa2, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fadvise64(r1, 0x0, 0xfff, 0x4) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}}, 0x108) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x1, 0xfffffffb}}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x0) [ 970.373990] loop6: detected capacity change from 0 to 2102784 03:16:47 executing program 7: fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)='./file0/file1\x00', 0xe, 0x3) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0/file1\x00'}) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f00000000c0)='nfs4\x00', 0x0, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file1\x00') mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x800, 0x0) 03:16:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="0014000000000000040100009bd98bb4e46bf4819a2ca01eaa551dcf337a1762b38ecdbf4f778311030d80878b62b89b41ddc25027da76c4282eaa2a5823d679068bf3cd640005e6d854ada6b90f2d391a2bd109e3aa721cdf42af08b79ba222b027026adaed1a39bac74c38b593f4a00c55e7ff00e4cfe6ae69c0ebf2daea17b8f9156218d1a1e8f7491c1c9c114229be4869da735389897bbb43e855bcade5f2f8b3908169ae3a"], 0xa8) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="1f", 0x1}], 0x1}, 0x2004c800) 03:16:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 42) 03:16:47 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:16:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) fgetxattr(r0, &(0x7f0000000140)=@known='system.advise\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) r2 = socket$netlink(0x10, 0x3, 0x0) getpeername$netlink(r2, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20001a}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xa8, r1, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x400000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffff06d}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x26}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x5293008d431167ba}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x881) 03:16:47 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000004c0)) [ 970.441118] FAULT_INJECTION: forcing a failure. [ 970.441118] name failslab, interval 1, probability 0, space 0, times 0 [ 970.442715] CPU: 0 PID: 7738 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 970.443596] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 970.444659] Call Trace: [ 970.445003] dump_stack+0x107/0x167 [ 970.445471] should_fail.cold+0x5/0xa [ 970.445969] ? create_object.isra.0+0x3a/0xa20 [ 970.446571] should_failslab+0x5/0x20 [ 970.447067] kmem_cache_alloc+0x5b/0x310 [ 970.447601] create_object.isra.0+0x3a/0xa20 [ 970.448169] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 970.448823] kmem_cache_alloc+0x159/0x310 [ 970.449360] jbd2__journal_start+0x190/0x7e0 [ 970.449936] __ext4_journal_start_sb+0x214/0x390 [ 970.450545] ext4_dirty_inode+0xbc/0x130 [ 970.451076] ? ext4_setattr+0x20f0/0x20f0 [ 970.451615] __mark_inode_dirty+0x492/0xd40 [ 970.452172] touch_atime+0x5ea/0x6e0 [ 970.452661] ? atime_needs_update+0x600/0x600 [ 970.453255] generic_file_buffered_read+0x191a/0x2920 [ 970.453936] ? pagecache_get_page+0xc80/0xc80 [ 970.454505] ? kasan_save_stack+0x32/0x40 [ 970.455058] ? do_splice_direct+0x1c4/0x290 [ 970.455619] ? do_sendfile+0x553/0x11e0 [ 970.456129] ? __x64_sys_sendfile64+0x1d1/0x210 [ 970.456745] ? do_syscall_64+0x33/0x40 [ 970.457244] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 970.457929] ? perf_trace_lock+0xac/0x490 [ 970.458469] generic_file_read_iter+0x33f/0x490 [ 970.459083] ? __fsnotify_parent+0x47a/0xb10 [ 970.459662] ext4_file_read_iter+0x184/0x4c0 [ 970.460235] generic_file_splice_read+0x455/0x6d0 [ 970.460876] ? pipe_to_user+0x170/0x170 [ 970.461398] ? fsnotify_perm.part.0+0x22d/0x620 [ 970.461998] ? security_file_permission+0xb1/0xe0 [ 970.462623] ? pipe_to_user+0x170/0x170 [ 970.463143] do_splice_to+0x10e/0x160 [ 970.463630] splice_direct_to_actor+0x2fe/0x980 [ 970.464242] ? pipe_to_sendpage+0x380/0x380 [ 970.464793] ? do_splice_to+0x160/0x160 [ 970.465297] ? security_file_permission+0xb1/0xe0 [ 970.465914] do_splice_direct+0x1c4/0x290 [ 970.466441] ? splice_direct_to_actor+0x980/0x980 [ 970.467054] ? avc_policy_seqno+0x9/0x70 [ 970.467591] ? security_file_permission+0xb1/0xe0 [ 970.468223] do_sendfile+0x553/0x11e0 [ 970.468716] ? do_pwritev+0x270/0x270 [ 970.469212] ? wait_for_completion_io+0x270/0x270 [ 970.469834] ? rcu_read_lock_any_held+0x75/0xa0 [ 970.470423] ? vfs_write+0x354/0xb10 [ 970.470917] __x64_sys_sendfile64+0x1d1/0x210 [ 970.471497] ? __ia32_sys_sendfile+0x220/0x220 [ 970.472084] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 970.472752] ? syscall_enter_from_user_mode+0x1d/0x50 [ 970.473420] do_syscall_64+0x33/0x40 [ 970.473904] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 970.474560] RIP: 0033:0x7fe3014fcb19 [ 970.475045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 970.477401] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 970.478378] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 970.479304] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 970.480236] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 970.481175] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 970.482082] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 970.501880] EXT4-fs error (device loop6): __ext4_get_inode_loc:4406: comm syz-executor.6: Invalid inode table block 0 in block_group 0 [ 970.506796] EXT4-fs (loop6): get root inode failed [ 970.508107] EXT4-fs (loop6): mount failed 03:16:47 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x9, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:16:47 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000002) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) fallocate(r0, 0x8, 0x3bad6228, 0x7) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x20000000) 03:17:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 43) 03:17:04 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(r1, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000003c0)=""/4, 0x0) fcntl$addseals(r1, 0x409, 0x8) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000480)={&(0x7f0000000400)=""/37, 0x25}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000440)=0x7, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd_index=0x3, 0x8, &(0x7f0000000140)="ef3003e7d4d5730dd9bc0d2116cbd2ec2d4cef0397c67262d0882d05da47c1147ab3a8e1b3dfac797791d00529f0be39c7c3024d4751fcbfb4d3ec4b", 0x3c, 0x0, 0x1}, 0x9) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='\x00', r2) r3 = add_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000540)="18726d0eed55eaa57fc580dc3a0b12e0a5ee08da294ac8119c4c73f93694f2a935d17a81959d084839f846dca8739131e4a9c45c6509af44529537eae3b5a4793a9a0aacfd7a75f2b566b874939829b82a35d20d1985a92c5d7ba971251e89286f64438db33a7f05fb0d1707fd3fa27a56032a79c1d09558fbbfcb2e5f36d3e7e1c749ad35c2064fa087cf6359507a36eb69853e0cdd920cbb7586aedf5a2e5a9a1a6b8d11c08a14918b01d07c92179dfae1ef58835b5fa4be28fbd3b3eac1c9f3cf74fbe25748c55d23902439133eecfafb2e0f", 0xd4, 0xfffffffffffffffa) add_key(0x0, 0x0, 0x0, 0x0, r3) unshare(0x4c000200) add_key$keyring(&(0x7f00000007c0), 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000640)=[&(0x7f0000000240)='\x00', 0x0], &(0x7f0000000780)=[&(0x7f00000006c0)=':\'!!.\x00', &(0x7f0000000700)='keyring\x00', &(0x7f0000000740)=']%.+-+$&\x00'], 0x400) [ 986.790986] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.7'. 03:17:04 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff74, 0x1000) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="240000001000010000000000000000ae0000090005000000000000000500008048000000e94de183e4dbfe4f0340089d65da11b960d59ed32500896cf8f2b91b39024be746a168294158926485c975e9b83f3dfc8d650636dbead6c174bef68363a5d102d65d4da78e218bdc9479d069333a2a714cdb1cab6d6b8fb6b89b6f880f95c14a168f3da6b6f92cd05ffdc1c5866d4c18f5576296b032b81d3a1f00d8c29bf6056ba42cc7a2c97ca96d830d3fc80246db0025e619e13c41c08dc96d536ffffffffffffffff27f9e720b52dc82c724f6e899f3c5f99e5b8dfc8b7ec30c3e4acd"], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000940)=ANY=[@ANYBLOB="95b50000018fd33a76603d5fd29603293e000000", @ANYRES32=r0, @ANYBLOB="04a500006ccf5e00a30878ffff75db00808ebf8b85b5363cdf1595a0bee6cc6ec57b594af05d2bcaace304ab11b2f0de03bff4371a9012ef1c32b4b5c6366f172a140b3c90f6de5877ef5a6a3a26844c4bc8c82413041c010b22156a4c9a107723a5f2df0884ac7b2d8cf48af5dc01fc3d1d08a58cc865e3f2f712e1a4eabdc0986bd04ce4c790d9de030b3ca0239c52c979afa3e6e8c80f01000eba254f7d13aa0b68306d"]) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) faccessat(r1, &(0x7f0000000000)='./file1\x00', 0xb0) r3 = socket$netlink(0x10, 0x3, 0x0) getpeername$netlink(r3, &(0x7f0000000040), &(0x7f0000000080)=0xc) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x98) recvmmsg(r1, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/25, 0x19}, {&(0x7f0000000440)=""/246, 0xf6}, {&(0x7f0000000300)=""/14, 0xe}], 0x3, &(0x7f0000000540)=""/238, 0xee}}, {{&(0x7f0000000640)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000380)=""/6, 0x6}, {&(0x7f0000000880)=""/180, 0xb4}, {&(0x7f0000000a00)=""/152, 0x98}, {&(0x7f0000000ac0)=""/188, 0xbc}, {&(0x7f0000000b80)=""/59, 0x3b}, {&(0x7f0000000bc0)}, {&(0x7f0000000c00)=""/14, 0xe}, {&(0x7f0000000c40)=""/161, 0xa1}, {&(0x7f0000000d00)}], 0x9}, 0x9}, {{&(0x7f0000000e00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000e80)=""/78, 0x4e}, {&(0x7f0000000f00)=""/168, 0xa8}, {&(0x7f0000000fc0)=""/203, 0xcb}], 0x3, &(0x7f0000001100)=""/185, 0xb9}, 0x5a8000}], 0x3, 0x10000, &(0x7f0000001280)={0x77359400}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 03:17:04 executing program 3: msgctl$IPC_RMID(0x0, 0x0) r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0xffffffffffffffff, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) msgctl$IPC_RMID(r0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0xa) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, 0xffffffffffffffff, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)=""/123) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x18}, 0x0, 0x0, 0x1002, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000100)={{0x0, 0xffffffffffffffff, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) msgctl$MSG_STAT_ANY(r2, 0xd, &(0x7f0000000400)=""/150) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) msgsnd(r1, &(0x7f00000002c0)={0x0, "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"}, 0x107, 0x0) 03:17:04 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, r0}}, './file0\x00'}) pread64(r1, &(0x7f00000000c0)=""/45, 0x2d, 0xba) ioctl$CDROM_GET_CAPABILITY(r1, 0x5331) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000100)) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000140)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000180)=0x45fc) fcntl$setpipe(r2, 0x407, 0x8) r3 = openat(r1, &(0x7f00000001c0)='./file0\x00', 0x400000, 0x74) r4 = openat(r3, &(0x7f0000000200)='./file0\x00', 0x84000, 0xab) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x0, 0x7fffffff, 0xb2e3, 0x1, 0x4, 0x1}, {0x7fff, 0x2, 0x0, 0x10000000000, 0x7, 0x3}], ['\x00', '\x00']}) sync_file_range(r4, 0x7f7, 0x4, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x8010, r1, 0x10000000) r6 = open_tree(r1, &(0x7f0000000380)='./file0\x00', 0x80000) syz_io_uring_submit(0x0, r5, &(0x7f00000019c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x4007, @fd=r6, 0x1, &(0x7f0000001900)=[{&(0x7f00000003c0)=""/36, 0x24}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/246, 0xf6}, {&(0x7f0000001500)=""/89, 0x59}, {&(0x7f0000001580)=""/165, 0xa5}, {&(0x7f0000001640)=""/103, 0x67}, {&(0x7f00000016c0)=""/213, 0xd5}, {&(0x7f00000017c0)=""/36, 0x24}, {&(0x7f0000001800)=""/241, 0xf1}], 0x9, 0x8}, 0x5) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000001a00)={r4, 0x8, 0x276b, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x4058534c, &(0x7f0000001a40)={0xd3, 0x0, 0x5, 0x3, 0x9, 0x1}) sendmsg$inet6(r4, &(0x7f0000001d80)={&(0x7f0000001ac0)={0xa, 0x4e22, 0x4, @local, 0xffffffff}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001b00)="a835dca0acb7e6e1eef3a038e753db6f6500485bb313c3c9684653ee7051978518c042ad8d27df57c937f153d4e533a8", 0x30}, {&(0x7f0000001b40)="e84e494d8a1457d0dfb3d4fb463ecf1bfc20281e72b62ba6142ded96be69f478e9af689ec62c64e08e0fcc2e9730e480716f0e44fc7515cf2d575d91cc4a2baf5d315b597f5a4c3c88a4bc91510b824e0cf72681561f2c3af9f46f2bce6e55a09f8146e1f8c4fac75436256d6a704b1adc286f85fc16dea39b556273e56f", 0x7e}, {&(0x7f0000001bc0)="a572e0f9e03beaf61f9df1fe357bb8e5790da2b43948a06f32b4961aa38f10f2496ebb8d764c30ec66ab", 0x2a}], 0x3, &(0x7f0000001c40)=[@rthdrdstopts={{0x48, 0x29, 0x37, {0x3b, 0x5, '\x00', [@hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x6}, @jumbo={0xc2, 0x4, 0xab}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x88, 0x4, 0x2, 0x6, 0x0, [@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @dstopts={{0x90, 0x29, 0x37, {0x6c, 0xe, '\x00', [@jumbo={0xc2, 0x4, 0x81}, @hao={0xc9, 0x10, @private1}, @calipso={0x7, 0x50, {0x2, 0x12, 0xfe, 0x6, [0x401, 0xff, 0xfffffffffffff001, 0x400000000000, 0x8000000080, 0x2, 0x2ea, 0x0, 0x101]}}, @pad1, @enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x80}]}}}], 0x110}, 0x40880) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001dc0)) 03:17:04 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:17:04 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x24002, 0x12) open$dir(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$DVD_READ_STRUCT(0xffffffffffffffff, 0x5390, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x408}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = fork() tkill(r3, 0x26) r4 = fork() tkill(r4, 0x26) r5 = getpgid(0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)=0x0) clone3(&(0x7f0000000300)={0x10180, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), {0x26}, &(0x7f0000000100)=""/26, 0x1a, &(0x7f0000000140)=""/41, &(0x7f00000001c0)=[r3, 0x0, r4, 0xffffffffffffffff, r5, 0x0, r6], 0x7, {r0}}, 0x58) 03:17:04 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) [ 986.810854] FAULT_INJECTION: forcing a failure. [ 986.810854] name failslab, interval 1, probability 0, space 0, times 0 [ 986.812291] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 986.814049] CPU: 1 PID: 7777 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 986.817701] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 986.819735] Call Trace: [ 986.820337] dump_stack+0x107/0x167 [ 986.821099] should_fail.cold+0x5/0xa [ 986.821885] ? file_tty_write.constprop.0+0x707/0x910 [ 986.822960] should_failslab+0x5/0x20 [ 986.823743] __kmalloc+0x72/0x390 [ 986.824455] ? mutex_trylock+0x237/0x2b0 [ 986.825285] ? file_tty_write.constprop.0+0x29f/0x910 [ 986.826066] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 986.826352] file_tty_write.constprop.0+0x707/0x910 [ 986.829344] ? iter_file_splice_write+0x165/0xc90 [ 986.830331] ? direct_splice_actor+0x10f/0x170 [ 986.831277] ? n_tty_receive_char_lnext+0x6f0/0x6f0 [ 986.832298] ? do_splice_direct+0x1c4/0x290 [ 986.833188] ? do_sendfile+0x553/0x11e0 [ 986.834015] do_iter_readv_writev+0x476/0x750 [ 986.834948] ? _cond_resched+0x10/0x30 [ 986.835748] ? new_sync_write+0x660/0x660 [ 986.836596] ? avc_policy_seqno+0x9/0x70 [ 986.837426] ? selinux_file_permission+0x92/0x520 [ 986.838417] ? security_file_permission+0xb1/0xe0 [ 986.839422] do_iter_write+0x191/0x700 [ 986.840225] ? trace_hardirqs_on+0x5b/0x180 [ 986.841120] vfs_iter_write+0x70/0xa0 [ 986.841901] iter_file_splice_write+0x726/0xc90 [ 986.842882] ? generic_splice_sendpage+0x140/0x140 [ 986.843909] ? security_file_permission+0xb1/0xe0 [ 986.844902] ? generic_splice_sendpage+0x140/0x140 [ 986.845908] direct_splice_actor+0x10f/0x170 [ 986.846814] splice_direct_to_actor+0x387/0x980 [ 986.847781] ? pipe_to_sendpage+0x380/0x380 [ 986.848682] ? do_splice_to+0x160/0x160 [ 986.849496] ? security_file_permission+0xb1/0xe0 [ 986.850495] do_splice_direct+0x1c4/0x290 [ 986.851352] ? splice_direct_to_actor+0x980/0x980 [ 986.852336] ? avc_policy_seqno+0x9/0x70 [ 986.853173] ? security_file_permission+0xb1/0xe0 [ 986.854173] do_sendfile+0x553/0x11e0 [ 986.854976] ? do_pwritev+0x270/0x270 [ 986.855756] ? wait_for_completion_io+0x270/0x270 [ 986.856748] ? rcu_read_lock_any_held+0x75/0xa0 [ 986.857697] ? vfs_write+0x354/0xb10 [ 986.858465] __x64_sys_sendfile64+0x1d1/0x210 [ 986.859394] ? __ia32_sys_sendfile+0x220/0x220 [ 986.860341] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 986.861414] ? syscall_enter_from_user_mode+0x1d/0x50 [ 986.862474] do_syscall_64+0x33/0x40 [ 986.863245] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 986.864293] RIP: 0033:0x7fe3014fcb19 [ 986.865053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 986.868835] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 986.870403] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 986.871876] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 986.873339] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 986.874804] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 986.876275] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 986.881170] loop3: detected capacity change from 0 to 2103296 [ 986.904394] loop6: detected capacity change from 0 to 2102784 03:17:04 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 986.936934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.938768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.940783] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 03:17:04 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x4002, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r0, 0x8) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001d80)={0x0, "61075d93a3e69becc5e71392a760439d"}) bind$inet(r0, &(0x7f0000000100)={0x2, 0xe19, @remote}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000001d40)={0x2, 0x8e20, @empty}, 0x10) close(r1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x10001, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x9, &(0x7f0000000140)=[{0x3ff, 0x1f, 0x7b}, {0x6, 0x0, 0x0, 0x3f}, {0x6c1, 0x7, 0x1, 0x3ff}, {0x1, 0x0, 0x6, 0x80}, {0x5, 0x0, 0x3, 0x54f1}, {0x4, 0x3, 0x40, 0x23e}, {0xfff, 0x80, 0xd3, 0x5}, {0x1000, 0x67, 0x8, 0x6}, {0xffff, 0x19, 0x58, 0x7}]}) dup3(r2, r3, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e26, @remote}, 0x10) [ 986.952119] EXT4-fs error (device loop6): __ext4_get_inode_loc:4406: comm syz-executor.6: Invalid inode table block 0 in block_group 0 [ 986.955399] EXT4-fs (loop6): get root inode failed [ 986.956817] EXT4-fs (loop6): mount failed [ 987.019835] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 987.024719] ext4 filesystem being mounted at /syzkaller-testdir405508355/syzkaller.de6UAg/106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 987.031832] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 03:17:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 44) 03:17:04 executing program 4: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0x2000000000000000}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x8102, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x0) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x109) pkey_mprotect(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x2000004, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r1) ftruncate(r3, 0xfffffffffffffffe) pkey_mprotect(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x8, r1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) mbind(&(0x7f0000fed000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x7, 0xdc, 0x5) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x7, &(0x7f0000ff0000/0x3000)=nil) pkey_mprotect(&(0x7f0000fef000/0x2000)=nil, 0x2000, 0x1000002, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x3000002, r1) fcntl$setstatus(r0, 0x4, 0x400) creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x2c, 0x5, 0x8800001) 03:17:04 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 03:17:04 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000240)=0x4f, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) stat(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x7, 0x0, &(0x7f0000000240), 0x100004a, &(0x7f0000000280)={[{@sbsector={'sbsector', 0x3d, 0x2}}], [{@smackfsroot={'smackfsroot', 0x3d, '9p\x00'}}]}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="243907cb2896d9a9ede3784b51705875b1db9e803d3211d2125c61b151809c933f60f9477e47c374b73225683e04498766d479ce681607c4cde79f62309f9e2012413973bbfbcaa08b054048cdb300572be8561500a15ceca456ea66c3e97028f66ff7add3129cdf308e881db04877bcec418c16700f21a98705ff3eef3572580fcfb1685dc1ffffffffffffff3fc0", @ANYRESHEX=r3, @ANYBLOB=',afid=0x0000000000000007,nodevmap,mmap,version=9p2000,dfltgid=', @ANYRESHEX=r4, @ANYBLOB=',dfltgid=', @ANYRESHEX=0xee01, @ANYBLOB=',\x00']) [ 987.188998] FAULT_INJECTION: forcing a failure. [ 987.188998] name failslab, interval 1, probability 0, space 0, times 0 [ 987.191363] CPU: 1 PID: 7807 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 987.192733] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 987.194399] Call Trace: [ 987.194947] dump_stack+0x107/0x167 [ 987.195676] should_fail.cold+0x5/0xa [ 987.196443] ? create_object.isra.0+0x3a/0xa20 [ 987.197365] should_failslab+0x5/0x20 [ 987.198135] kmem_cache_alloc+0x5b/0x310 [ 987.198955] ? igrab+0xc0/0xc0 [ 987.199606] create_object.isra.0+0x3a/0xa20 [ 987.200484] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 987.201499] __kmalloc+0x16e/0x390 [ 987.202219] iter_file_splice_write+0x165/0xc90 [ 987.203170] ? __fsnotify_parent+0x47a/0xb10 [ 987.204066] ? generic_splice_sendpage+0x140/0x140 [ 987.205040] ? pipe_to_user+0x170/0x170 [ 987.205852] ? security_file_permission+0xb1/0xe0 [ 987.206820] ? generic_splice_sendpage+0x140/0x140 [ 987.207813] direct_splice_actor+0x10f/0x170 [ 987.208697] splice_direct_to_actor+0x387/0x980 [ 987.209633] ? pipe_to_sendpage+0x380/0x380 [ 987.210498] ? do_splice_to+0x160/0x160 [ 987.211300] ? security_file_permission+0xb1/0xe0 [ 987.212268] do_splice_direct+0x1c4/0x290 [ 987.213096] ? splice_direct_to_actor+0x980/0x980 [ 987.214056] ? avc_policy_seqno+0x9/0x70 [ 987.214877] ? security_file_permission+0xb1/0xe0 [ 987.215854] do_sendfile+0x553/0x11e0 [ 987.216632] ? do_pwritev+0x270/0x270 [ 987.217390] ? wait_for_completion_io+0x270/0x270 [ 987.218357] ? rcu_read_lock_any_held+0x75/0xa0 [ 987.219302] ? vfs_write+0x354/0xb10 [ 987.220054] __x64_sys_sendfile64+0x1d1/0x210 [ 987.220948] ? __ia32_sys_sendfile+0x220/0x220 [ 987.221870] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 987.222922] ? syscall_enter_from_user_mode+0x1d/0x50 [ 987.223950] do_syscall_64+0x33/0x40 [ 987.224705] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 987.225723] RIP: 0033:0x7fe3014fcb19 [ 987.226462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 987.230137] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 987.231667] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 987.233098] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 987.234521] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 987.235953] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 987.237368] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 987.242883] loop6: detected capacity change from 0 to 2102784 [ 987.303658] 9pnet: Insufficient options for proto=fd [ 987.315963] EXT4-fs error (device loop6): __ext4_get_inode_loc:4406: comm syz-executor.6: Invalid inode table block 0 in block_group 0 [ 987.325772] EXT4-fs (loop6): get root inode failed [ 987.327101] EXT4-fs (loop6): mount failed [ 987.352048] 9pnet: Insufficient options for proto=fd [ 987.636313] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:17:21 executing program 4: add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000400)='syzkaller\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f00000003c0)) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000040)='&#-\x00', &(0x7f0000000080)='\x00', &(0x7f00000000c0)='syz', &(0x7f0000000100)='syz', &(0x7f0000000140)='-*:\x00', &(0x7f0000000180)='syz', &(0x7f00000001c0)='syz', &(0x7f0000000200)='^+:\'\x00'], &(0x7f0000000380)=[&(0x7f0000000280)='syz', &(0x7f0000000300)='syz', &(0x7f0000000340)='*\\\xbe)-+^@\',\\\xfb^\x00'], 0x100) 03:17:21 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x1, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 03:17:21 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x2, 0xffffffffffffffff, 0x5) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x20c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xf4, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040080) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000280)={0x7ff, 0x7, 0x0, 0x800}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYRESDEC=r0], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401) bind(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x2, @broadcast, 'bridge_slave_1\x00'}}, 0x80) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x240e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext, 0x90200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r4, 0x6) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x81, 0x9, 0x3f, 0x0, 0x5, 0x4004, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x82, 0x4, @perf_bp={&(0x7f0000000040), 0xf}, 0x0, 0x1, 0xd112, 0x0, 0x2, 0x0, 0x20, 0x0, 0x9, 0x0, 0x80}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) getdents64(r3, &(0x7f00000007c0)=""/180, 0x200007d8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) unshare(0x48020200) 03:17:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 45) 03:17:21 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 03:17:21 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x6, 0x0, 0x2, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x1, 0x20, 0x3, 0x6d, 0x2, 0x3e, 0x3, 0x96, 0x40, 0x22c, 0x8, 0x4000, 0x38, 0x1, 0x9fd6, 0x4, 0x4}, [{0x6474e551, 0x6, 0x5, 0xffffffffffff8001, 0xad9, 0xfffffffffffffffa, 0x3f, 0x7ff}], "cf5bb08c375ebc446e3f504d472a03683d5636b1809c7a0c5886e52053711b606d85846f29441311f513a522bbe19cf2047d6e7f9684d0fdcb5dd1fdb1fb3c6a63106226d74a2310c0e45212ff508ee45832ed81d37b812bc0624c6db14d14e8a65db1233b4658fd0623d656667313871ab3df4e2bde26d72b79adb2902db25aadb3fc6a70ca7327fe982ea8c23d6d44a7db100131a5062bb6da8222dbf2e59af27fe75320643b8d3704d7476219dea5ea53dfe519840506fa1e4cd9c3ca81daa13b880ebc37da21a93ddb6383b077be60eee4", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x64b) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept4$inet6(r0, 0x0, &(0x7f0000000080), 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) creat(&(0x7f0000000100)='./file0\x00', 0x0) 03:17:21 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xff, 0x3f, 0xf9, 0x1, 0x0, 0x329, 0x611, 0x18, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x3, 0x100000001}, 0xa0, 0x199, 0x5, 0xdb6882066746648f, 0x4, 0x1000, 0x8c, 0x0, 0x6, 0x0, 0x38d3}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r1 = fcntl$getown(r0, 0x9) r2 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x4e, 0x7f, 0xf6, 0x2, 0x0, 0xfff, 0x20000, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6d1, 0x6, @perf_bp={&(0x7f0000000080), 0x2}, 0x40420, 0x61, 0x8ff, 0x4, 0xa0, 0x3, 0x5, 0x0, 0x6, 0x0, 0x5fcb}, r1, 0xb, r0, 0x2) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x3, 0x0, @fd_index=0x5, 0xfffffffffffffffc, &(0x7f0000000140)="7b54c90bce38b56cab0ec8767205fdecbbbc4ddc59f5aa33822300734965f7002896e361d0f122539085d970051ad8d8fc7e8e8ddcaf2b6df4600bf49d8823e940e3dad2e6316e0f6d0ca8ef242787f71cfde0c5d2e49523fd3831578aad1816b9845f8440b0ba78104f0f1717d4921f013f06e598713694bf0a05e8f4cf2def47e4c4f0fee27b7c8e3cebc0947104db371fead8793203bbf0b2fe53be6bc63259c82e93aa9304103ebbf844c97ea46127067978b1a637e02850325a59e65f5be31a0a7738886473376661de08baa271b25f2ad4e6", 0xd5, 0x3, 0x1}, 0x3) r4 = syz_open_dev$vcsu(&(0x7f0000000280), 0x7, 0x201) r5 = perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x3f, 0x1, 0x7, 0xb0, 0x0, 0x1, 0x1, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f00000002c0), 0x8}, 0x9f88f6f75c83430, 0x3, 0x6, 0x4, 0x40, 0x101, 0x0, 0x0, 0x2, 0x0, 0x9}, r4, 0xd, 0xffffffffffffffff, 0xf) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) r7 = syz_io_uring_setup(0x4ae4, &(0x7f00000003c0)={0x0, 0xaa18, 0x3b, 0x1, 0x354, 0x0, r6}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000580)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x8, 0x89, 0x7, 0x7, 0x0, 0x6, 0x20, 0xe, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x59f, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}, 0x15eb8, 0x6, 0x1000, 0x3, 0x0, 0x800, 0xfff7, 0x0, 0x400, 0x0, 0x6}, 0xffffffffffffffff, 0x4, r9, 0x2) r10 = perf_event_open(&(0x7f00000005c0)={0x5, 0x80, 0x21, 0x3, 0x81, 0x5, 0x0, 0x5, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x8, 0x8ede}, 0xb, 0x3, 0x1ff, 0x7, 0xfffffffffffffff7, 0x4, 0x9, 0x0, 0x2d40df38, 0x0, 0x7fffffff}, r1, 0x2, r5, 0x3) syz_io_uring_submit(0x0, r8, &(0x7f0000000640)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x3f) fcntl$getownex(r7, 0x10, &(0x7f0000000740)={0x0, 0x0}) perf_event_open(&(0x7f00000006c0)={0x3, 0x80, 0x9, 0x7, 0x8, 0x5, 0x0, 0x7, 0x80ab0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xf6f, 0x1, @perf_bp={&(0x7f0000000680), 0x9}, 0x45580, 0x374, 0x9, 0x0, 0x10001, 0x2, 0xa994, 0x0, 0x7fffffff, 0x0, 0x101}, r11, 0xf, r10, 0x8) fcntl$lock(r4, 0x22, &(0x7f0000000780)={0x0, 0x3, 0x10001, 0x10000, r1}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000840)={{0x1, 0x1, 0x18, r9, {0x2}}, './file0\x00'}) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x2, 0x6, 0x7, 0x91, 0x0, 0x80, 0x20, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x40, 0x4, @perf_config_ext={0x2, 0x3}, 0x5023, 0x1, 0x9, 0x4, 0xfffffffffffff808, 0x7f, 0x2, 0x0, 0x20, 0x0, 0x51}, r1, 0xe, r12, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r12, 0x8918, &(0x7f0000000880)={'netpci0\x00', {0x2, 0x0, @private}}) 03:17:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'nr0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vlan0\x00'}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000140)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000200)="0012", 0x2, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000000040)="ed41000000100000d4f4653cfe5bd5c9736a7286775fd5f4655fd5f465", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r2, 0x8) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000500)={0x0, "61075d93a3153775b6523c365394439d"}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRES64, @ANYBLOB="ae91e1", @ANYRES64, @ANYRESHEX], 0xfdef) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xdc, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80005f}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4010}, @NL80211_ATTR_VENDOR_DATA={0xb0, 0xc5, "f96d4c63543dc1467fac8eb218abc44f3d2f507eb3e0492a2ccfdff812504bd664c5e6af2c61d6fe6cea465bfcf0f9c167618286ecd285670de155309927f0f113df63d8585df2d1b304b5896d7605ad3ef57b993a587f4dcf6632ad247bcb42b102dde0919125c46258f40e1f995884e3836ab56cf2645fcace134983c664990af0dba2c6d9e583e143bb7826debab1cf4ba77c70c1f7755e982bb872d65e67bf6e6dbfbb7d5e20b8228f91"}]}, 0xdc}, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x6, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r3) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x101}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4008044) [ 1003.857030] loop6: detected capacity change from 0 to 2102784 [ 1003.858456] FAULT_INJECTION: forcing a failure. [ 1003.858456] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.861291] CPU: 1 PID: 7845 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1003.862908] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1003.864840] Call Trace: [ 1003.865461] dump_stack+0x107/0x167 [ 1003.866356] should_fail.cold+0x5/0xa [ 1003.867258] ? file_tty_write.constprop.0+0x707/0x910 [ 1003.868652] should_failslab+0x5/0x20 [ 1003.869542] __kmalloc+0x72/0x390 [ 1003.870398] ? mutex_trylock+0x237/0x2b0 [ 1003.871356] ? file_tty_write.constprop.0+0x29f/0x910 [ 1003.872562] file_tty_write.constprop.0+0x707/0x910 [ 1003.873720] ? iter_file_splice_write+0x165/0xc90 [ 1003.874881] ? direct_splice_actor+0x10f/0x170 [ 1003.875950] ? n_tty_receive_char_lnext+0x6f0/0x6f0 [ 1003.877105] ? do_splice_direct+0x1c4/0x290 [ 1003.878110] ? do_sendfile+0x553/0x11e0 [ 1003.879103] do_iter_readv_writev+0x476/0x750 [ 1003.880166] ? _cond_resched+0x10/0x30 [ 1003.881083] ? new_sync_write+0x660/0x660 [ 1003.882047] ? avc_policy_seqno+0x9/0x70 [ 1003.883049] ? selinux_file_permission+0x92/0x520 [ 1003.884184] ? security_file_permission+0xb1/0xe0 [ 1003.885319] do_iter_write+0x191/0x700 [ 1003.886267] ? trace_hardirqs_on+0x5b/0x180 [ 1003.887304] vfs_iter_write+0x70/0xa0 [ 1003.888197] iter_file_splice_write+0x726/0xc90 [ 1003.889306] ? generic_splice_sendpage+0x140/0x140 [ 1003.890513] ? security_file_permission+0xb1/0xe0 [ 1003.891652] ? generic_splice_sendpage+0x140/0x140 [ 1003.892796] direct_splice_actor+0x10f/0x170 [ 1003.893824] splice_direct_to_actor+0x387/0x980 [ 1003.894951] ? pipe_to_sendpage+0x380/0x380 [ 1003.895970] ? do_splice_to+0x160/0x160 [ 1003.896893] ? security_file_permission+0xb1/0xe0 [ 1003.898029] do_splice_direct+0x1c4/0x290 [ 1003.899047] ? splice_direct_to_actor+0x980/0x980 [ 1003.900171] ? avc_policy_seqno+0x9/0x70 [ 1003.901126] ? security_file_permission+0xb1/0xe0 [ 1003.902304] do_sendfile+0x553/0x11e0 [ 1003.903230] ? do_pwritev+0x270/0x270 [ 1003.904125] ? wait_for_completion_io+0x270/0x270 [ 1003.905260] ? rcu_read_lock_any_held+0x75/0xa0 [ 1003.906385] ? vfs_write+0x354/0xb10 [ 1003.907275] __x64_sys_sendfile64+0x1d1/0x210 [ 1003.908320] ? __ia32_sys_sendfile+0x220/0x220 [ 1003.909411] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1003.910670] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1003.911887] do_syscall_64+0x33/0x40 [ 1003.912753] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1003.913970] RIP: 0033:0x7fe3014fcb19 [ 1003.914885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1003.919227] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1003.921000] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 1003.922698] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1003.924360] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 1003.926009] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 1003.927709] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 03:17:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 46) 03:17:21 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000100), 0xb}, 0x1c210, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x1, r0, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x3) r1 = pkey_alloc(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000200)=0x33e0, 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000000, r1) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r3, r2, 0x0, 0x9bbb) munlock(&(0x7f0000ffa000/0x1000)=nil, 0x1000) [ 1003.986425] loop1: detected capacity change from 0 to 2097152 03:17:21 executing program 0: unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x0, 0x80, 0x4, 0x0, 0x1f, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x10052, 0x0, 0x8000, 0x0, 0x100000001, 0x5b, 0x40, 0x0, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 1003.999453] EXT4-fs error (device loop6): __ext4_get_inode_loc:4406: comm syz-executor.6: Invalid inode table block 0 in block_group 0 [ 1004.002211] EXT4-fs (loop6): get root inode failed [ 1004.003091] EXT4-fs (loop6): mount failed [ 1004.058430] EXT4-fs error (device loop1): ext4_quota_enable:6459: comm syz-executor.1: Bad quota inum: 4608, type: 0 [ 1004.067075] EXT4-fs warning (device loop1): ext4_enable_quotas:6504: Failed to enable quota tracking (type=0, err=-117, ino=4608). Please run e2fsck to fix. [ 1004.074327] EXT4-fs (loop1): mount failed [ 1004.089760] FAULT_INJECTION: forcing a failure. [ 1004.089760] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1004.093638] CPU: 0 PID: 7871 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1004.094677] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1004.095948] Call Trace: [ 1004.096348] dump_stack+0x107/0x167 [ 1004.096912] should_fail.cold+0x5/0xa [ 1004.097499] __alloc_pages_nodemask+0x182/0x600 [ 1004.098214] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1004.099152] ? __kmalloc+0x348/0x390 [ 1004.099723] alloc_pages_current+0x187/0x280 [ 1004.100400] allocate_slab+0x26f/0x380 [ 1004.100998] ___slab_alloc+0x470/0x700 [ 1004.101596] ? tty_buffer_alloc+0x243/0x2b0 [ 1004.102256] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1004.103063] ? SOFTIRQ_verbose+0x10/0x10 03:17:21 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000e1ef0d63f4ea125b00000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000bfc}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) [ 1004.103689] ? tty_buffer_alloc+0x243/0x2b0 [ 1004.104542] ? __kmalloc+0x348/0x390 [ 1004.105106] __kmalloc+0x348/0x390 [ 1004.105654] tty_buffer_alloc+0x243/0x2b0 [ 1004.106293] __tty_buffer_request_room+0x156/0x2a0 [ 1004.107060] tty_insert_flip_string_fixed_flag+0x91/0x250 [ 1004.107913] ? n_tty_write+0x1eb/0xfe0 03:17:21 executing program 3: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, r2, 0x805, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x20, 0x29}}}}}, 0x28}}, 0x0) [ 1004.107929] tty_insert_flip_string_and_push_buffer+0x3e/0x160 [ 1004.107942] pty_write+0xe6/0x110 [ 1004.107953] n_tty_write+0xa86/0xfe0 [ 1004.107972] ? n_tty_receive_char_lnext+0x6f0/0x6f0 [ 1004.107982] ? _copy_from_iter+0x37b/0xe80 [ 1004.107994] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 1004.108009] file_tty_write.constprop.0+0x529/0x910 [ 1004.108020] ? n_tty_receive_char_lnext+0x6f0/0x6f0 [ 1004.108036] do_iter_readv_writev+0x476/0x750 [ 1004.108048] ? _cond_resched+0x10/0x30 [ 1004.108060] ? new_sync_write+0x660/0x660 [ 1004.108070] ? avc_policy_seqno+0x9/0x70 [ 1004.108080] ? selinux_file_permission+0x92/0x520 [ 1004.108091] ? security_file_permission+0xb1/0xe0 [ 1004.108106] do_iter_write+0x191/0x700 03:17:21 executing program 3: fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000006c0), 0x1, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = timerfd_create(0x2, 0x80000) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000880)=ANY=[@ANYBLOB="00000100400000000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, 0x0, 0x0, 0x4) timerfd_gettime(r1, &(0x7f0000000000)) fork() syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, &(0x7f0000000080)=0x9, 0x0, 0x4) 03:17:21 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000100), 0xb}, 0x1c210, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x1, r0, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x3) r1 = pkey_alloc(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000200)=0x33e0, 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000000, r1) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r3, r2, 0x0, 0x9bbb) munlock(&(0x7f0000ffa000/0x1000)=nil, 0x1000) 03:17:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9a81, 0x0) sendfile(r2, r1, 0x0, 0x100000000) (fail_nth: 47) [ 1004.108117] ? trace_hardirqs_on+0x5b/0x180 [ 1004.108132] vfs_iter_write+0x70/0xa0 [ 1004.108144] iter_file_splice_write+0x726/0xc90 [ 1004.108161] ? generic_splice_sendpage+0x140/0x140 [ 1004.108178] ? security_file_permission+0xb1/0xe0 [ 1004.108190] ? generic_splice_sendpage+0x140/0x140 [ 1004.108201] direct_splice_actor+0x10f/0x170 [ 1004.108213] splice_direct_to_actor+0x387/0x980 [ 1004.108226] ? pipe_to_sendpage+0x380/0x380 [ 1004.108238] ? do_splice_to+0x160/0x160 [ 1004.108248] ? security_file_permission+0xb1/0xe0 [ 1004.108262] do_splice_direct+0x1c4/0x290 [ 1004.108273] ? splice_direct_to_actor+0x980/0x980 [ 1004.108282] ? avc_policy_seqno+0x9/0x70 [ 1004.108295] ? security_file_permission+0xb1/0xe0 [ 1004.108310] do_sendfile+0x553/0x11e0 [ 1004.108326] ? do_pwritev+0x270/0x270 [ 1004.108336] ? wait_for_completion_io+0x270/0x270 [ 1004.108348] ? rcu_read_lock_any_held+0x75/0xa0 [ 1004.108358] ? vfs_write+0x354/0xb10 [ 1004.108369] __x64_sys_sendfile64+0x1d1/0x210 [ 1004.108379] ? __ia32_sys_sendfile+0x220/0x220 [ 1004.108392] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1004.108403] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1004.108415] do_syscall_64+0x33/0x40 [ 1004.108426] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1004.108433] RIP: 0033:0x7fe3014fcb19 [ 1004.108443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1004.108448] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1004.108460] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 1004.108465] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1004.108471] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 1004.108477] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 1004.108484] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 1004.108534] [ 1004.108540] ====================================================== [ 1004.108545] WARNING: possible circular locking dependency detected [ 1004.108548] 5.10.237 #1 Not tainted [ 1004.108553] ------------------------------------------------------ [ 1004.108557] syz-executor.2/7871 is trying to acquire lock: [ 1004.108561] ffffffff84f0d4a0 (console_owner){-.-.}-{0:0}, at: console_unlock+0x2e1/0xb40 [ 1004.108579] [ 1004.108582] but task is already holding lock: [ 1004.108586] ffff88801fe08958 (&port->lock){-.-.}-{2:2}, at: tty_insert_flip_string_and_push_buffer+0x2b/0x160 [ 1004.108603] [ 1004.108608] which lock already depends on the new lock. [ 1004.108609] [ 1004.108611] [ 1004.108617] the existing dependency chain (in reverse order) is: [ 1004.108618] [ 1004.108620] -> #2 (&port->lock){-.-.}-{2:2}: [ 1004.108635] _raw_spin_lock_irqsave+0x36/0x60 [ 1004.108639] tty_port_tty_get+0x1f/0x100 [ 1004.108643] tty_port_default_wakeup+0x11/0x40 [ 1004.108647] serial8250_tx_chars+0x51f/0xb00 [ 1004.108651] serial8250_start_tx+0x695/0xa60 [ 1004.108655] __uart_start.isra.0+0x17c/0x1c0 [ 1004.108658] uart_write+0x2f2/0x580 [ 1004.108662] do_output_char+0x5e8/0x870 [ 1004.108666] n_tty_write+0x4c9/0xfe0 [ 1004.108670] file_tty_write.constprop.0+0x529/0x910 [ 1004.108674] redirected_tty_write+0xa5/0xd0 [ 1004.108678] do_iter_readv_writev+0x476/0x750 [ 1004.108681] do_iter_write+0x191/0x700 [ 1004.108685] vfs_writev+0x1ae/0x620 [ 1004.108688] do_writev+0x139/0x300 [ 1004.108692] do_syscall_64+0x33/0x40 [ 1004.108697] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1004.108698] [ 1004.108700] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 1004.108715] _raw_spin_lock_irqsave+0x36/0x60 [ 1004.108719] serial8250_console_write+0x9f5/0xc60 [ 1004.108723] console_unlock+0x82a/0xb40 [ 1004.108726] register_console+0x40c/0x850 [ 1004.108731] univ8250_console_init+0x3a/0x4a [ 1004.108734] console_init+0x24c/0x356 [ 1004.108738] start_kernel+0x2e6/0x489 [ 1004.108743] secondary_startup_64_no_verify+0xbe/0xcb [ 1004.108744] [ 1004.108746] -> #0 (console_owner){-.-.}-{0:0}: [ 1004.108761] __lock_acquire+0x29e7/0x5b00 [ 1004.108764] lock_acquire+0x197/0x470 [ 1004.108768] console_unlock+0x360/0xb40 [ 1004.108771] vprintk_emit+0x1de/0x4e0 [ 1004.108775] vprintk_func+0x8b/0x140 [ 1004.108779] printk+0xba/0xf1 [ 1004.108782] should_fail+0x47a/0x5a0 [ 1004.108787] __alloc_pages_nodemask+0x182/0x600 [ 1004.108791] alloc_pages_current+0x187/0x280 [ 1004.108795] allocate_slab+0x26f/0x380 [ 1004.108798] ___slab_alloc+0x470/0x700 [ 1004.108802] __kmalloc+0x348/0x390 [ 1004.108805] tty_buffer_alloc+0x243/0x2b0 [ 1004.108810] __tty_buffer_request_room+0x156/0x2a0 [ 1004.108815] tty_insert_flip_string_fixed_flag+0x91/0x250 [ 1004.108820] tty_insert_flip_string_and_push_buffer+0x3e/0x160 [ 1004.108823] pty_write+0xe6/0x110 [ 1004.108827] n_tty_write+0xa86/0xfe0 [ 1004.108831] file_tty_write.constprop.0+0x529/0x910 [ 1004.108835] do_iter_readv_writev+0x476/0x750 [ 1004.108838] do_iter_write+0x191/0x700 [ 1004.108842] vfs_iter_write+0x70/0xa0 [ 1004.108846] iter_file_splice_write+0x726/0xc90 [ 1004.108850] direct_splice_actor+0x10f/0x170 [ 1004.108854] splice_direct_to_actor+0x387/0x980 [ 1004.108858] do_splice_direct+0x1c4/0x290 [ 1004.108862] do_sendfile+0x553/0x11e0 [ 1004.108866] __x64_sys_sendfile64+0x1d1/0x210 [ 1004.108869] do_syscall_64+0x33/0x40 [ 1004.108874] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1004.108876] [ 1004.108879] other info that might help us debug this: [ 1004.108881] [ 1004.108884] Chain exists of: [ 1004.108886] console_owner --> &port_lock_key --> &port->lock [ 1004.108903] [ 1004.108907] Possible unsafe locking scenario: [ 1004.108909] [ 1004.108912] CPU0 CPU1 [ 1004.108916] ---- ---- [ 1004.108919] lock(&port->lock); [ 1004.108928] lock(&port_lock_key); [ 1004.108937] lock(&port->lock); [ 1004.108944] lock(console_owner); [ 1004.108951] [ 1004.108954] *** DEADLOCK *** [ 1004.108955] [ 1004.108959] 6 locks held by syz-executor.2/7871: [ 1004.108961] #0: ffff888053d7c098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x90 [ 1004.108979] #1: ffff888053d7c130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: file_tty_write.constprop.0+0x29f/0x910 [ 1004.108998] #2: ffff888053d7c2e8 (&tty->termios_rwsem){++++}-{3:3}, at: n_tty_write+0x1bf/0xfe0 [ 1004.109015] #3: ffffc90011c5d378 (&ldata->output_lock){+.+.}-{3:3}, at: n_tty_write+0xa4d/0xfe0 [ 1004.109032] #4: ffff88801fe08958 (&port->lock){-.-.}-{2:2}, at: tty_insert_flip_string_and_push_buffer+0x2b/0x160 [ 1004.109050] #5: ffffffff84fed820 (console_lock){+.+.}-{0:0}, at: vprintk_func+0x8b/0x140 [ 1004.109067] [ 1004.109070] stack backtrace: [ 1004.109075] CPU: 0 PID: 7871 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1004.109081] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1004.109084] Call Trace: [ 1004.109087] dump_stack+0x107/0x167 [ 1004.109091] check_noncircular+0x263/0x2e0 [ 1004.109095] ? stack_trace_consume_entry+0x160/0x160 [ 1004.109099] ? print_circular_bug+0x470/0x470 [ 1004.109102] ? memcpy+0x39/0x60 [ 1004.109105] ? alloc_chain_hlocks+0x342/0x5a0 [ 1004.109109] __lock_acquire+0x29e7/0x5b00 [ 1004.109113] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1004.109116] ? SOFTIRQ_verbose+0x10/0x10 [ 1004.109120] ? __lockdep_reset_lock+0x180/0x180 [ 1004.109124] lock_acquire+0x197/0x470 [ 1004.109127] ? console_unlock+0x2e1/0xb40 [ 1004.109130] ? lock_release+0x680/0x680 [ 1004.109134] ? lock_downgrade+0x6d0/0x6d0 [ 1004.109137] ? do_raw_spin_lock+0x121/0x260 [ 1004.109141] ? rwlock_bug.part.0+0x90/0x90 [ 1004.109144] console_unlock+0x360/0xb40 [ 1004.109148] ? console_unlock+0x2e1/0xb40 [ 1004.109151] ? devkmsg_read+0x730/0x730 [ 1004.109155] ? lock_release+0x680/0x680 [ 1004.109158] ? do_raw_spin_unlock+0x4f/0x220 [ 1004.109162] ? vprintk_func+0x8b/0x140 [ 1004.109165] vprintk_emit+0x1de/0x4e0 [ 1004.109169] vprintk_func+0x8b/0x140 [ 1004.109171] printk+0xba/0xf1 [ 1004.109175] ? record_print_text.cold+0x16/0x16 [ 1004.109179] should_fail+0x47a/0x5a0 [ 1004.109183] __alloc_pages_nodemask+0x182/0x600 [ 1004.109187] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1004.109190] ? __kmalloc+0x348/0x390 [ 1004.109194] alloc_pages_current+0x187/0x280 [ 1004.109197] allocate_slab+0x26f/0x380 [ 1004.109200] ___slab_alloc+0x470/0x700 [ 1004.109204] ? tty_buffer_alloc+0x243/0x2b0 [ 1004.109208] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1004.109212] ? SOFTIRQ_verbose+0x10/0x10 [ 1004.109215] ? tty_buffer_alloc+0x243/0x2b0 [ 1004.109218] ? __kmalloc+0x348/0x390 [ 1004.109221] __kmalloc+0x348/0x390 [ 1004.109225] tty_buffer_alloc+0x243/0x2b0 [ 1004.109229] __tty_buffer_request_room+0x156/0x2a0 [ 1004.109233] tty_insert_flip_string_fixed_flag+0x91/0x250 [ 1004.109236] ? n_tty_write+0x1eb/0xfe0 [ 1004.109241] tty_insert_flip_string_and_push_buffer+0x3e/0x160 [ 1004.109244] pty_write+0xe6/0x110 [ 1004.109247] n_tty_write+0xa86/0xfe0 [ 1004.109252] ? n_tty_receive_char_lnext+0x6f0/0x6f0 [ 1004.109255] ? _copy_from_iter+0x37b/0xe80 [ 1004.109259] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 1004.109263] file_tty_write.constprop.0+0x529/0x910 [ 1004.109267] ? n_tty_receive_char_lnext+0x6f0/0x6f0 [ 1004.109270] do_iter_readv_writev+0x476/0x750 [ 1004.109274] ? _cond_resched+0x10/0x30 [ 1004.109277] ? new_sync_write+0x660/0x660 [ 1004.109281] ? avc_policy_seqno+0x9/0x70 [ 1004.109284] ? selinux_file_permission+0x92/0x520 [ 1004.109288] ? security_file_permission+0xb1/0xe0 [ 1004.109291] do_iter_write+0x191/0x700 [ 1004.109295] ? trace_hardirqs_on+0x5b/0x180 [ 1004.109298] vfs_iter_write+0x70/0xa0 [ 1004.109302] iter_file_splice_write+0x726/0xc90 [ 1004.109306] ? generic_splice_sendpage+0x140/0x140 [ 1004.109310] ? security_file_permission+0xb1/0xe0 [ 1004.109314] ? generic_splice_sendpage+0x140/0x140 [ 1004.109318] direct_splice_actor+0x10f/0x170 [ 1004.109321] splice_direct_to_actor+0x387/0x980 [ 1004.109325] ? pipe_to_sendpage+0x380/0x380 [ 1004.109328] ? do_splice_to+0x160/0x160 [ 1004.109332] ? security_file_permission+0xb1/0xe0 [ 1004.109336] do_splice_direct+0x1c4/0x290 [ 1004.109339] ? splice_direct_to_actor+0x980/0x980 [ 1004.109343] ? avc_policy_seqno+0x9/0x70 [ 1004.109347] ? security_file_permission+0xb1/0xe0 [ 1004.109350] do_sendfile+0x553/0x11e0 [ 1004.109353] ? do_pwritev+0x270/0x270 [ 1004.109358] ? wait_for_completion_io+0x270/0x270 [ 1004.109362] ? rcu_read_lock_any_held+0x75/0xa0 [ 1004.109365] ? vfs_write+0x354/0xb10 [ 1004.109368] __x64_sys_sendfile64+0x1d1/0x210 [ 1004.109372] ? __ia32_sys_sendfile+0x220/0x220 [ 1004.109376] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1004.109380] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1004.109384] do_syscall_64+0x33/0x40 [ 1004.109388] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1004.109391] RIP: 0033:0x7fe3014fcb19 [ 1004.109404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1004.109408] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1004.109417] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 1004.109422] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1004.109428] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 1004.109433] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 1004.109439] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 1004.210836] loop6: detected capacity change from 0 to 2102784 [ 1004.245228] EXT4-fs warning (device loop6): read_mmp_block:114: Error -117 while reading MMP block 0 [ 1004.303453] FAULT_INJECTION: forcing a failure. [ 1004.303453] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.303468] CPU: 0 PID: 7897 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1004.303475] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1004.303479] Call Trace: [ 1004.303500] dump_stack+0x107/0x167 [ 1004.303513] should_fail.cold+0x5/0xa [ 1004.303525] ? SOFTIRQ_verbose+0x10/0x10 [ 1004.303538] ? tty_buffer_alloc+0x243/0x2b0 [ 1004.303553] should_failslab+0x5/0x20 [ 1004.303565] __kmalloc+0x72/0x390 [ 1004.303579] tty_buffer_alloc+0x243/0x2b0 [ 1004.303592] __tty_buffer_request_room+0x156/0x2a0 [ 1004.303608] tty_insert_flip_string_fixed_flag+0x91/0x250 [ 1004.303618] ? n_tty_write+0x1eb/0xfe0 [ 1004.303635] tty_insert_flip_string_and_push_buffer+0x3e/0x160 [ 1004.303649] pty_write+0xe6/0x110 [ 1004.303661] n_tty_write+0xa86/0xfe0 [ 1004.303675] ? lock_release+0x4d1/0x680 [ 1004.303686] ? lock_release+0x4d1/0x680 [ 1004.303702] ? n_tty_receive_char_lnext+0x6f0/0x6f0 [ 1004.303714] ? _copy_from_iter+0x37b/0xe80 [ 1004.303728] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 1004.303745] file_tty_write.constprop.0+0x529/0x910 [ 1004.303756] ? n_tty_receive_char_lnext+0x6f0/0x6f0 [ 1004.303773] do_iter_readv_writev+0x476/0x750 [ 1004.303788] ? _cond_resched+0x10/0x30 [ 1004.303799] ? new_sync_write+0x660/0x660 [ 1004.303811] ? avc_policy_seqno+0x9/0x70 [ 1004.303823] ? selinux_file_permission+0x92/0x520 [ 1004.303836] ? security_file_permission+0xb1/0xe0 [ 1004.303852] do_iter_write+0x191/0x700 [ 1004.303865] ? trace_hardirqs_on+0x5b/0x180 [ 1004.303880] vfs_iter_write+0x70/0xa0 [ 1004.303895] iter_file_splice_write+0x726/0xc90 [ 1004.303913] ? generic_splice_sendpage+0x140/0x140 [ 1004.303932] ? security_file_permission+0xb1/0xe0 [ 1004.303945] ? generic_splice_sendpage+0x140/0x140 [ 1004.303958] direct_splice_actor+0x10f/0x170 [ 1004.303971] splice_direct_to_actor+0x387/0x980 [ 1004.303984] ? pipe_to_sendpage+0x380/0x380 [ 1004.303997] ? do_splice_to+0x160/0x160 [ 1004.304008] ? security_file_permission+0xb1/0xe0 [ 1004.304022] do_splice_direct+0x1c4/0x290 [ 1004.304034] ? splice_direct_to_actor+0x980/0x980 [ 1004.304044] ? avc_policy_seqno+0x9/0x70 [ 1004.304058] ? security_file_permission+0xb1/0xe0 [ 1004.304073] do_sendfile+0x553/0x11e0 [ 1004.304090] ? do_pwritev+0x270/0x270 [ 1004.304101] ? wait_for_completion_io+0x270/0x270 [ 1004.304114] ? vfs_write+0x354/0xb10 [ 1004.304126] __x64_sys_sendfile64+0x1d1/0x210 [ 1004.304136] ? __ia32_sys_sendfile+0x220/0x220 [ 1004.304152] ? fpregs_assert_state_consistent+0xb9/0xe0 [ 1004.304165] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1004.304178] do_syscall_64+0x33/0x40 [ 1004.304190] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1004.304197] RIP: 0033:0x7fe3014fcb19 [ 1004.304209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1004.304216] RSP: 002b:00007fe2fea72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1004.304229] RAX: ffffffffffffffda RBX: 00007fe30160ff60 RCX: 00007fe3014fcb19 [ 1004.304236] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1004.304242] RBP: 00007fe2fea721d0 R08: 0000000000000000 R09: 0000000000000000 [ 1004.304249] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000002 [ 1004.304256] R13: 00007ffe7419b63f R14: 00007fe2fea72300 R15: 0000000000022000 [ 1004.622878] loop1: detected capacity change from 0 to 2097152 [ 1004.637631] EXT4-fs error (device loop1): ext4_quota_enable:6459: comm syz-executor.1: Bad quota inum: 4608, type: 0 [ 1004.639046] EXT4-fs warning (device loop1): ext4_enable_quotas:6504: Failed to enable quota tracking (type=0, err=-117, ino=4608). Please run e2fsck to fix. [ 1004.641407] EXT4-fs (loop1): mount failed VM DIAGNOSIS: 03:17:21 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=1ffff11001faced3 RCX=ffffffff8127497f RDX=0000000000000000 RSI=0000000000000008 RDI=ffff88806ce3c128 RBP=0000000000000001 RSP=ffff88800fd67680 R8 =0000000000000000 R9 =ffffffff8567874f R10=fffffbfff0acf0e9 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffff8880534ee800 R15=0000000000000000 RIP=ffffffff812e06f7 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f87e16a6900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f87e0b240d0 CR3=000000000e89e000 CR4=00350ef0 DR0=0000000100000000 DR1=0000000100000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=000000000011060a EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=30306234386136303638616663356134 XMM02=38303062343861363036386166633561 XMM03=2f6c616e72756f6a2f676f6c2f6e7572 XMM04=95a609c9d35cf2170000000000335890 XMM05=d3fdd5f48436fbd700000000000aeab0 XMM06=741c93f8cfd57bec00000000000ae968 XMM07=00000000000000000000000000000000 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=00002020000000000000200000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822e0031 RDI=ffffffff879f3140 RBP=ffffffff879f3100 RSP=ffff8880585576b8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000073 R13=0000000000000073 R14=ffffffff879f3100 R15=dffffc0000000000 RIP=ffffffff822e0088 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd8a320d700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000558fa1d5d468 CR3=000000004c122000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000000000000000000000000000ff XMM02=7463656a6e695f31313230385f7a7973 XMM03=000000000000006a6e695f3131323038 XMM04=253d7367726100656d6172665f746365 XMM05=918f22b8205e7dbbbf6d6ebf675ed672 XMM06=b82b985e75f7c1707ca74bcfb1bade26 XMM07=78bb43e183e5d9c6a2dbf00a9964c683 XMM08=4913ceca5f64f26cb56a83e38458991f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000