ffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) dup2(r2, r1) recvmmsg$unix(r2, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:29:42 executing program 1: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x10, r1, 0x0) 13:29:42 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x2d4, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @algo_auth={0xc9, 0x1, {{'sha1\x00'}, 0x408, "86ea4203649c7b4dcc68d287acd97dbca7f7afdd711bfa0a2fc0a760f54e4fd2234c6c4ce83b94097d067c72d1cd08b611adb709b3a887d2e3b9ed6f58de33f24c70ee0d569ebdc502ddb1e93f7b16342f5f7441100b68a47b02e40ea22b46d8260af25c1979c43d1126232aa7e1faef15b656abed3837094e0949143b99c1bbe8"}}, @proto={0x5, 0x19, 0x3c}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:29:42 executing program 0: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000001) 13:29:42 executing program 7: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) 13:29:42 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1e0}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:29:55 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1e0}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:29:55 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) 13:29:55 executing program 7: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) 13:29:55 executing program 1: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x10, r1, 0x0) 13:29:55 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1e0}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:29:55 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000001) 13:29:55 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x2d4, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @algo_auth={0xc9, 0x1, {{'sha1\x00'}, 0x408, "86ea4203649c7b4dcc68d287acd97dbca7f7afdd711bfa0a2fc0a760f54e4fd2234c6c4ce83b94097d067c72d1cd08b611adb709b3a887d2e3b9ed6f58de33f24c70ee0d569ebdc502ddb1e93f7b16342f5f7441100b68a47b02e40ea22b46d8260af25c1979c43d1126232aa7e1faef15b656abed3837094e0949143b99c1bbe8"}}, @proto={0x5, 0x19, 0x3c}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:29:55 executing program 6: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) 13:29:55 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 13:29:56 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1d0}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:29:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r2 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x2d4, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @algo_auth={0xc9, 0x1, {{'sha1\x00'}, 0x408, "86ea4203649c7b4dcc68d287acd97dbca7f7afdd711bfa0a2fc0a760f54e4fd2234c6c4ce83b94097d067c72d1cd08b611adb709b3a887d2e3b9ed6f58de33f24c70ee0d569ebdc502ddb1e93f7b16342f5f7441100b68a47b02e40ea22b46d8260af25c1979c43d1126232aa7e1faef15b656abed3837094e0949143b99c1bbe8"}}, @proto={0x5, 0x19, 0x3c}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:29:56 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1d0}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:29:56 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x2d4, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @algo_auth={0xc9, 0x1, {{'sha1\x00'}, 0x408, "86ea4203649c7b4dcc68d287acd97dbca7f7afdd711bfa0a2fc0a760f54e4fd2234c6c4ce83b94097d067c72d1cd08b611adb709b3a887d2e3b9ed6f58de33f24c70ee0d569ebdc502ddb1e93f7b16342f5f7441100b68a47b02e40ea22b46d8260af25c1979c43d1126232aa7e1faef15b656abed3837094e0949143b99c1bbe8"}}, @proto={0x5, 0x19, 0x3c}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:29:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r2 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x2d4, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @algo_auth={0xc9, 0x1, {{'sha1\x00'}, 0x408, "86ea4203649c7b4dcc68d287acd97dbca7f7afdd711bfa0a2fc0a760f54e4fd2234c6c4ce83b94097d067c72d1cd08b611adb709b3a887d2e3b9ed6f58de33f24c70ee0d569ebdc502ddb1e93f7b16342f5f7441100b68a47b02e40ea22b46d8260af25c1979c43d1126232aa7e1faef15b656abed3837094e0949143b99c1bbe8"}}, @proto={0x5, 0x19, 0x3c}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:30:09 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1d0}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:30:09 executing program 4: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:30:09 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r2 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x2d4, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @algo_auth={0xc9, 0x1, {{'sha1\x00'}, 0x408, "86ea4203649c7b4dcc68d287acd97dbca7f7afdd711bfa0a2fc0a760f54e4fd2234c6c4ce83b94097d067c72d1cd08b611adb709b3a887d2e3b9ed6f58de33f24c70ee0d569ebdc502ddb1e93f7b16342f5f7441100b68a47b02e40ea22b46d8260af25c1979c43d1126232aa7e1faef15b656abed3837094e0949143b99c1bbe8"}}, @proto={0x5, 0x19, 0x3c}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:30:09 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 13:30:09 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r0, 0xffffffffffffffff}, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r3, 0x7, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', r2, &(0x7f00000002c0)='./file1\x00') r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000300)='`', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001740)=',', 0x1}], 0x1, &(0x7f0000002040)=ANY=[@ANYBLOB="100000001a0000000100000001000000"], 0x10}}], 0x2, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0xa8, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffc0000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xdc4a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x19d0}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x35d6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x82ed}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x880}, 0x80) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) 13:30:09 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:30:09 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r2 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x2d4, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @algo_auth={0xc9, 0x1, {{'sha1\x00'}, 0x408, "86ea4203649c7b4dcc68d287acd97dbca7f7afdd711bfa0a2fc0a760f54e4fd2234c6c4ce83b94097d067c72d1cd08b611adb709b3a887d2e3b9ed6f58de33f24c70ee0d569ebdc502ddb1e93f7b16342f5f7441100b68a47b02e40ea22b46d8260af25c1979c43d1126232aa7e1faef15b656abed3837094e0949143b99c1bbe8"}}, @proto={0x5, 0x19, 0x3c}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:30:09 executing program 1: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) [ 1824.127773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10919 comm=syz-executor.2 13:30:09 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 13:30:09 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1f8}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:30:09 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:30:09 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:30:09 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1f8}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:30:09 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r0, 0xffffffffffffffff}, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r3, 0x7, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', r2, &(0x7f00000002c0)='./file1\x00') r5 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r5, 0x0, r5) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0xa8, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffc0000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xdc4a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x19d0}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x35d6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x82ed}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x880}, 0x80) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) 13:30:09 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) [ 1824.571083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10948 comm=syz-executor.0 13:30:09 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:30:09 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000000)) r2 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x2d4, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @algo_auth={0xc9, 0x1, {{'sha1\x00'}, 0x408, "86ea4203649c7b4dcc68d287acd97dbca7f7afdd711bfa0a2fc0a760f54e4fd2234c6c4ce83b94097d067c72d1cd08b611adb709b3a887d2e3b9ed6f58de33f24c70ee0d569ebdc502ddb1e93f7b16342f5f7441100b68a47b02e40ea22b46d8260af25c1979c43d1126232aa7e1faef15b656abed3837094e0949143b99c1bbe8"}}, @proto={0x5, 0x19, 0x3c}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:30:09 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1f8}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:30:09 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000000)) r2 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x2d4, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @algo_auth={0xc9, 0x1, {{'sha1\x00'}, 0x408, "86ea4203649c7b4dcc68d287acd97dbca7f7afdd711bfa0a2fc0a760f54e4fd2234c6c4ce83b94097d067c72d1cd08b611adb709b3a887d2e3b9ed6f58de33f24c70ee0d569ebdc502ddb1e93f7b16342f5f7441100b68a47b02e40ea22b46d8260af25c1979c43d1126232aa7e1faef15b656abed3837094e0949143b99c1bbe8"}}, @proto={0x5, 0x19, 0x3c}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:30:10 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000000)) r2 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x2d4, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @algo_auth={0xc9, 0x1, {{'sha1\x00'}, 0x408, "86ea4203649c7b4dcc68d287acd97dbca7f7afdd711bfa0a2fc0a760f54e4fd2234c6c4ce83b94097d067c72d1cd08b611adb709b3a887d2e3b9ed6f58de33f24c70ee0d569ebdc502ddb1e93f7b16342f5f7441100b68a47b02e40ea22b46d8260af25c1979c43d1126232aa7e1faef15b656abed3837094e0949143b99c1bbe8"}}, @proto={0x5, 0x19, 0x3c}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:30:10 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000000)) r2 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x2d4, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @algo_auth={0xc9, 0x1, {{'sha1\x00'}, 0x408, "86ea4203649c7b4dcc68d287acd97dbca7f7afdd711bfa0a2fc0a760f54e4fd2234c6c4ce83b94097d067c72d1cd08b611adb709b3a887d2e3b9ed6f58de33f24c70ee0d569ebdc502ddb1e93f7b16342f5f7441100b68a47b02e40ea22b46d8260af25c1979c43d1126232aa7e1faef15b656abed3837094e0949143b99c1bbe8"}}, @proto={0x5, 0x19, 0x3c}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:30:10 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:30:10 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1f8}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:30:10 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:30:22 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) dup2(r2, 0xffffffffffffffff) recvmmsg$unix(r2, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:30:22 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1f8}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:30:22 executing program 1: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:30:22 executing program 7: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:30:22 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 13:30:22 executing program 4: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r0, 0xffffffffffffffff}, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r3, 0x7, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', r2, &(0x7f00000002c0)='./file1\x00') r5 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r5, 0x0, r5) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000300)='`', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001740)=',', 0x1}], 0x1, &(0x7f0000002040)=ANY=[@ANYBLOB="100000001a0000000100000001000000"], 0x10}}], 0x2, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0xa8, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffc0000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xdc4a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x19d0}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x35d6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x82ed}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x880}, 0x80) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) 13:30:22 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x2d4, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @algo_auth={0xc9, 0x1, {{'sha1\x00'}, 0x408, "86ea4203649c7b4dcc68d287acd97dbca7f7afdd711bfa0a2fc0a760f54e4fd2234c6c4ce83b94097d067c72d1cd08b611adb709b3a887d2e3b9ed6f58de33f24c70ee0d569ebdc502ddb1e93f7b16342f5f7441100b68a47b02e40ea22b46d8260af25c1979c43d1126232aa7e1faef15b656abed3837094e0949143b99c1bbe8"}}, @proto={0x5, 0x19, 0x3c}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:30:22 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x2d4, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @algo_auth={0xc9, 0x1, {{'sha1\x00'}, 0x408, "86ea4203649c7b4dcc68d287acd97dbca7f7afdd711bfa0a2fc0a760f54e4fd2234c6c4ce83b94097d067c72d1cd08b611adb709b3a887d2e3b9ed6f58de33f24c70ee0d569ebdc502ddb1e93f7b16342f5f7441100b68a47b02e40ea22b46d8260af25c1979c43d1126232aa7e1faef15b656abed3837094e0949143b99c1bbe8"}}, @proto={0x5, 0x19, 0x3c}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x80}, 0x40001) [ 1837.808453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10993 comm=syz-executor.4 13:30:23 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 1) 13:30:23 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1f8}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:30:23 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 1) [ 1838.244290] FAULT_INJECTION: forcing a failure. [ 1838.244290] name failslab, interval 1, probability 0, space 0, times 1 [ 1838.244351] CPU: 1 PID: 11011 Comm: syz-executor.0 Not tainted 5.10.220 #1 [ 1838.244360] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 13:30:23 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 2) 13:30:23 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 1) [ 1838.244366] Call Trace: [ 1838.244389] dump_stack+0x107/0x167 [ 1838.244407] should_fail.cold+0x5/0xa [ 1838.244427] ? alloc_pipe_info+0x10a/0x590 [ 1838.244446] should_failslab+0x5/0x20 [ 1838.244464] kmem_cache_alloc_trace+0x55/0x320 13:30:23 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1f8}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) [ 1838.244487] alloc_pipe_info+0x10a/0x590 [ 1838.244504] ? __lock_acquire+0xbb1/0x5b00 [ 1838.244524] splice_direct_to_actor+0x774/0x980 [ 1838.244544] ? _cond_resched+0x12/0x80 [ 1838.244560] ? inode_security+0x107/0x140 [ 1838.244573] ? pipe_to_sendpage+0x380/0x380 [ 1838.244588] ? avc_policy_seqno+0x9/0x70 [ 1838.244603] ? selinux_file_permission+0x92/0x520 [ 1838.244620] ? do_splice_to+0x160/0x160 [ 1838.244639] ? security_file_permission+0xb1/0xe0 13:30:23 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 2) 13:30:23 executing program 1: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:30:23 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 2) [ 1838.244662] do_splice_direct+0x1c4/0x290 [ 1838.244679] ? splice_direct_to_actor+0x980/0x980 [ 1838.244694] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1838.244728] do_sendfile+0x553/0x11e0 [ 1838.244754] ? do_pwritev+0x270/0x270 [ 1838.244777] ? ksys_write+0x19b/0x260 [ 1838.244805] __x64_sys_sendfile64+0x1d1/0x210 [ 1838.244824] ? __ia32_sys_sendfile+0x220/0x220 [ 1838.244845] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1838.244861] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1838.244879] do_syscall_64+0x33/0x40 [ 1838.244894] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1838.244905] RIP: 0033:0x7fcab4ef4b19 [ 1838.244920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1838.244929] RSP: 002b:00007fcab246a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1838.244948] RAX: ffffffffffffffda RBX: 00007fcab5007f60 RCX: 00007fcab4ef4b19 [ 1838.244957] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1838.244967] RBP: 00007fcab246a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1838.244976] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1838.244986] R13: 00007ffe07a1757f R14: 00007fcab246a300 R15: 0000000000022000 [ 1838.571718] FAULT_INJECTION: forcing a failure. [ 1838.571718] name failslab, interval 1, probability 0, space 0, times 0 [ 1838.571744] CPU: 1 PID: 11019 Comm: syz-executor.6 Not tainted 5.10.220 #1 [ 1838.571757] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1838.571764] Call Trace: [ 1838.571798] dump_stack+0x107/0x167 [ 1838.571824] should_fail.cold+0x5/0xa [ 1838.571852] ? alloc_pipe_info+0x10a/0x590 [ 1838.571879] should_failslab+0x5/0x20 [ 1838.571903] kmem_cache_alloc_trace+0x55/0x320 [ 1838.571936] alloc_pipe_info+0x10a/0x590 [ 1838.571960] ? __lock_acquire+0xbb1/0x5b00 [ 1838.571988] splice_direct_to_actor+0x774/0x980 [ 1838.572017] ? _cond_resched+0x12/0x80 [ 1838.572036] ? inode_security+0x107/0x140 [ 1838.572048] ? pipe_to_sendpage+0x380/0x380 [ 1838.572062] ? avc_policy_seqno+0x9/0x70 [ 1838.572076] ? selinux_file_permission+0x92/0x520 [ 1838.572091] ? do_splice_to+0x160/0x160 [ 1838.572109] ? security_file_permission+0xb1/0xe0 [ 1838.572130] do_splice_direct+0x1c4/0x290 [ 1838.572146] ? splice_direct_to_actor+0x980/0x980 [ 1838.572161] ? avc_policy_seqno+0x9/0x70 [ 1838.572186] ? security_file_permission+0xb1/0xe0 [ 1838.572209] do_sendfile+0x553/0x11e0 [ 1838.572234] ? do_pwritev+0x270/0x270 [ 1838.572251] ? wait_for_completion_io+0x270/0x270 [ 1838.572270] ? rcu_read_lock_any_held+0x75/0xa0 [ 1838.572283] ? vfs_write+0x354/0xb10 [ 1838.572304] __x64_sys_sendfile64+0x1d1/0x210 [ 1838.572322] ? __ia32_sys_sendfile+0x220/0x220 [ 1838.572341] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1838.572355] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1838.572372] do_syscall_64+0x33/0x40 [ 1838.572386] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1838.572397] RIP: 0033:0x7f8caec11b19 [ 1838.572411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1838.572419] RSP: 002b:00007f8cac187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1838.572436] RAX: ffffffffffffffda RBX: 00007f8caed24f60 RCX: 00007f8caec11b19 [ 1838.572445] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1838.572453] RBP: 00007f8cac1871d0 R08: 0000000000000000 R09: 0000000000000000 [ 1838.572462] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1838.572471] R13: 00007fff84cedf2f R14: 00007f8cac187300 R15: 0000000000022000 [ 1838.604385] FAULT_INJECTION: forcing a failure. [ 1838.604385] name failslab, interval 1, probability 0, space 0, times 0 [ 1838.604410] CPU: 1 PID: 11024 Comm: syz-executor.2 Not tainted 5.10.220 #1 [ 1838.604423] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1838.604430] Call Trace: [ 1838.604455] dump_stack+0x107/0x167 [ 1838.604480] should_fail.cold+0x5/0xa [ 1838.604507] ? alloc_pipe_info+0x10a/0x590 [ 1838.604541] should_failslab+0x5/0x20 [ 1838.604564] kmem_cache_alloc_trace+0x55/0x320 [ 1838.604604] alloc_pipe_info+0x10a/0x590 [ 1838.604627] ? __lock_acquire+0xbb1/0x5b00 [ 1838.604655] splice_direct_to_actor+0x774/0x980 [ 1838.604676] ? _cond_resched+0x12/0x80 [ 1838.604690] ? inode_security+0x107/0x140 [ 1838.604702] ? pipe_to_sendpage+0x380/0x380 [ 1838.604716] ? avc_policy_seqno+0x9/0x70 [ 1838.604729] ? selinux_file_permission+0x92/0x520 [ 1838.604744] ? do_splice_to+0x160/0x160 [ 1838.604762] ? security_file_permission+0xb1/0xe0 [ 1838.604783] do_splice_direct+0x1c4/0x290 [ 1838.604798] ? splice_direct_to_actor+0x980/0x980 [ 1838.604812] ? avc_policy_seqno+0x9/0x70 [ 1838.604834] ? security_file_permission+0xb1/0xe0 [ 1838.604857] do_sendfile+0x553/0x11e0 [ 1838.604881] ? do_pwritev+0x270/0x270 [ 1838.604898] ? wait_for_completion_io+0x270/0x270 [ 1838.604915] ? rcu_read_lock_any_held+0x75/0xa0 [ 1838.604928] ? vfs_write+0x354/0xb10 [ 1838.604949] __x64_sys_sendfile64+0x1d1/0x210 [ 1838.604967] ? __ia32_sys_sendfile+0x220/0x220 [ 1838.604985] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1838.604999] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1838.605016] do_syscall_64+0x33/0x40 [ 1838.605029] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1838.605040] RIP: 0033:0x7f153dedab19 [ 1838.605054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1838.605062] RSP: 002b:00007f153b450188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1838.605079] RAX: ffffffffffffffda RBX: 00007f153dfedf60 RCX: 00007f153dedab19 [ 1838.605088] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1838.605096] RBP: 00007f153b4501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1838.605104] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1838.605113] R13: 00007ffd2819606f R14: 00007f153b450300 R15: 0000000000022000 [ 1838.658561] FAULT_INJECTION: forcing a failure. [ 1838.658561] name failslab, interval 1, probability 0, space 0, times 0 [ 1838.658595] CPU: 1 PID: 11023 Comm: syz-executor.0 Not tainted 5.10.220 #1 [ 1838.658607] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1838.658613] Call Trace: [ 1838.658637] dump_stack+0x107/0x167 [ 1838.658661] should_fail.cold+0x5/0xa [ 1838.658686] ? create_object.isra.0+0x3a/0xa20 [ 1838.658712] should_failslab+0x5/0x20 [ 1838.658733] kmem_cache_alloc+0x5b/0x310 [ 1838.658763] create_object.isra.0+0x3a/0xa20 [ 1838.658792] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1838.658823] kmem_cache_alloc_trace+0x151/0x320 [ 1838.658852] alloc_pipe_info+0x10a/0x590 [ 1838.658866] ? __lock_acquire+0xbb1/0x5b00 [ 1838.658883] splice_direct_to_actor+0x774/0x980 [ 1838.658900] ? _cond_resched+0x12/0x80 [ 1838.658914] ? inode_security+0x107/0x140 [ 1838.658926] ? pipe_to_sendpage+0x380/0x380 [ 1838.658939] ? avc_policy_seqno+0x9/0x70 [ 1838.658952] ? selinux_file_permission+0x92/0x520 [ 1838.658966] ? do_splice_to+0x160/0x160 [ 1838.658983] ? security_file_permission+0xb1/0xe0 [ 1838.659004] do_splice_direct+0x1c4/0x290 [ 1838.659019] ? splice_direct_to_actor+0x980/0x980 [ 1838.659031] ? avc_policy_seqno+0x9/0x70 [ 1838.659052] ? security_file_permission+0xb1/0xe0 [ 1838.659074] do_sendfile+0x553/0x11e0 [ 1838.659097] ? do_pwritev+0x270/0x270 [ 1838.659114] ? wait_for_completion_io+0x270/0x270 [ 1838.659131] ? rcu_read_lock_any_held+0x75/0xa0 [ 1838.659143] ? vfs_write+0x354/0xb10 [ 1838.659164] __x64_sys_sendfile64+0x1d1/0x210 [ 1838.659180] ? __ia32_sys_sendfile+0x220/0x220 [ 1838.659198] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1838.659212] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1838.659228] do_syscall_64+0x33/0x40 [ 1838.659241] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1838.659251] RIP: 0033:0x7fcab4ef4b19 [ 1838.659264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1838.659272] RSP: 002b:00007fcab246a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1838.659289] RAX: ffffffffffffffda RBX: 00007fcab5007f60 RCX: 00007fcab4ef4b19 [ 1838.659297] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1838.659305] RBP: 00007fcab246a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1838.659313] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1838.659321] R13: 00007ffe07a1757f R14: 00007fcab246a300 R15: 0000000000022000 [ 1838.896586] FAULT_INJECTION: forcing a failure. [ 1838.896586] name failslab, interval 1, probability 0, space 0, times 0 [ 1838.896612] CPU: 0 PID: 11033 Comm: syz-executor.6 Not tainted 5.10.220 #1 [ 1838.896624] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1838.896630] Call Trace: [ 1838.896655] dump_stack+0x107/0x167 [ 1838.896680] should_fail.cold+0x5/0xa [ 1838.896706] ? create_object.isra.0+0x3a/0xa20 [ 1838.896737] should_failslab+0x5/0x20 [ 1838.896760] kmem_cache_alloc+0x5b/0x310 [ 1838.896795] create_object.isra.0+0x3a/0xa20 [ 1838.896822] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1838.896852] kmem_cache_alloc_trace+0x151/0x320 [ 1838.896882] alloc_pipe_info+0x10a/0x590 [ 1838.896896] ? __lock_acquire+0xbb1/0x5b00 [ 1838.896913] splice_direct_to_actor+0x774/0x980 [ 1838.896930] ? _cond_resched+0x12/0x80 [ 1838.896944] ? inode_security+0x107/0x140 [ 1838.896955] ? pipe_to_sendpage+0x380/0x380 [ 1838.896972] ? avc_policy_seqno+0x9/0x70 [ 1838.896988] ? selinux_file_permission+0x92/0x520 [ 1838.897002] ? do_splice_to+0x160/0x160 [ 1838.897018] ? security_file_permission+0xb1/0xe0 [ 1838.897037] do_splice_direct+0x1c4/0x290 [ 1838.897051] ? splice_direct_to_actor+0x980/0x980 [ 1838.897062] ? avc_policy_seqno+0x9/0x70 [ 1838.897083] ? security_file_permission+0xb1/0xe0 [ 1838.897103] do_sendfile+0x553/0x11e0 [ 1838.897125] ? do_pwritev+0x270/0x270 [ 1838.897141] ? wait_for_completion_io+0x270/0x270 [ 1838.897158] ? rcu_read_lock_any_held+0x75/0xa0 [ 1838.897170] ? vfs_write+0x354/0xb10 [ 1838.897189] __x64_sys_sendfile64+0x1d1/0x210 [ 1838.897205] ? __ia32_sys_sendfile+0x220/0x220 [ 1838.897222] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1838.897236] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1838.897251] do_syscall_64+0x33/0x40 [ 1838.897264] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1838.897274] RIP: 0033:0x7f8caec11b19 [ 1838.897287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1838.897295] RSP: 002b:00007f8cac187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1838.897310] RAX: ffffffffffffffda RBX: 00007f8caed24f60 RCX: 00007f8caec11b19 [ 1838.897318] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1838.897326] RBP: 00007f8cac1871d0 R08: 0000000000000000 R09: 0000000000000000 [ 1838.897333] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1838.897341] R13: 00007fff84cedf2f R14: 00007f8cac187300 R15: 0000000000022000 [ 1838.938402] FAULT_INJECTION: forcing a failure. [ 1838.938402] name failslab, interval 1, probability 0, space 0, times 0 [ 1838.938438] CPU: 0 PID: 11039 Comm: syz-executor.2 Not tainted 5.10.220 #1 [ 1838.938450] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1838.938457] Call Trace: [ 1838.938479] dump_stack+0x107/0x167 [ 1838.938503] should_fail.cold+0x5/0xa [ 1838.938526] ? create_object.isra.0+0x3a/0xa20 [ 1838.938551] should_failslab+0x5/0x20 [ 1838.938584] kmem_cache_alloc+0x5b/0x310 [ 1838.938617] ? alloc_pipe_info+0x10a/0x590 [ 1838.938655] create_object.isra.0+0x3a/0xa20 [ 1838.938678] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1838.938707] kmem_cache_alloc_trace+0x151/0x320 [ 1838.938725] alloc_pipe_info+0x10a/0x590 [ 1838.938738] ? __lock_acquire+0xbb1/0x5b00 [ 1838.938754] splice_direct_to_actor+0x774/0x980 [ 1838.938769] ? _cond_resched+0x12/0x80 [ 1838.938782] ? inode_security+0x107/0x140 [ 1838.938793] ? pipe_to_sendpage+0x380/0x380 [ 1838.938805] ? avc_policy_seqno+0x9/0x70 [ 1838.938821] ? selinux_file_permission+0x92/0x520 [ 1838.938835] ? do_splice_to+0x160/0x160 [ 1838.938850] ? security_file_permission+0xb1/0xe0 [ 1838.938868] do_splice_direct+0x1c4/0x290 [ 1838.938882] ? splice_direct_to_actor+0x980/0x980 [ 1838.938893] ? avc_policy_seqno+0x9/0x70 [ 1838.938913] ? security_file_permission+0xb1/0xe0 [ 1838.938933] do_sendfile+0x553/0x11e0 [ 1838.938954] ? do_pwritev+0x270/0x270 [ 1838.938969] ? wait_for_completion_io+0x270/0x270 [ 1838.938985] ? rcu_read_lock_any_held+0x75/0xa0 [ 1838.938996] ? vfs_write+0x354/0xb10 [ 1838.939015] __x64_sys_sendfile64+0x1d1/0x210 [ 1838.939030] ? __ia32_sys_sendfile+0x220/0x220 [ 1838.939047] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1838.939059] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1838.939074] do_syscall_64+0x33/0x40 [ 1838.939086] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1838.939095] RIP: 0033:0x7f153dedab19 [ 1838.939107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1838.939114] RSP: 002b:00007f153b450188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1838.939129] RAX: ffffffffffffffda RBX: 00007f153dfedf60 RCX: 00007f153dedab19 [ 1838.939136] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1838.939143] RBP: 00007f153b4501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1838.939151] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1838.939159] R13: 00007ffd2819606f R14: 00007f153b450300 R15: 0000000000022000 13:30:36 executing program 4: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r0, 0xffffffffffffffff}, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r3, 0x7, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', r2, &(0x7f00000002c0)='./file1\x00') r5 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r5, 0x0, r5) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000300)='`', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001740)=',', 0x1}], 0x1, &(0x7f0000002040)=ANY=[@ANYBLOB="100000001a0000000100000001000000"], 0x10}}], 0x2, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0xa8, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffc0000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xdc4a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x19d0}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x35d6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x82ed}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x880}, 0x80) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) 13:30:36 executing program 7: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:30:36 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 3) 13:30:36 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 13:30:36 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1f8}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:30:36 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 3) 13:30:36 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 3) 13:30:36 executing program 1: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) [ 1851.565399] FAULT_INJECTION: forcing a failure. [ 1851.565399] name failslab, interval 1, probability 0, space 0, times 0 [ 1851.566520] CPU: 1 PID: 11060 Comm: syz-executor.0 Not tainted 5.10.220 #1 [ 1851.567257] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1851.567937] Call Trace: [ 1851.568162] dump_stack+0x107/0x167 [ 1851.568465] should_fail.cold+0x5/0xa [ 1851.568781] ? alloc_pipe_info+0x1e5/0x590 [ 1851.569133] should_failslab+0x5/0x20 [ 1851.569446] __kmalloc+0x72/0x390 [ 1851.569735] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1851.570154] alloc_pipe_info+0x1e5/0x590 [ 1851.570491] ? __lock_acquire+0xbb1/0x5b00 [ 1851.570849] splice_direct_to_actor+0x774/0x980 [ 1851.571236] ? _cond_resched+0x12/0x80 [ 1851.571555] ? inode_security+0x107/0x140 [ 1851.571897] ? pipe_to_sendpage+0x380/0x380 [ 1851.572256] ? avc_policy_seqno+0x9/0x70 [ 1851.572590] ? selinux_file_permission+0x92/0x520 [ 1851.572987] ? do_splice_to+0x160/0x160 [ 1851.573315] ? security_file_permission+0xb1/0xe0 [ 1851.573714] do_splice_direct+0x1c4/0x290 [ 1851.574059] ? splice_direct_to_actor+0x980/0x980 [ 1851.574451] ? avc_policy_seqno+0x9/0x70 [ 1851.574799] ? security_file_permission+0xb1/0xe0 [ 1851.575197] do_sendfile+0x553/0x11e0 [ 1851.575511] ? do_pwritev+0x270/0x270 [ 1851.575821] ? wait_for_completion_io+0x270/0x270 [ 1851.576216] ? rcu_read_lock_any_held+0x75/0xa0 [ 1851.576595] ? vfs_write+0x354/0xb10 [ 1851.576906] __x64_sys_sendfile64+0x1d1/0x210 [ 1851.577272] ? __ia32_sys_sendfile+0x220/0x220 [ 1851.577645] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1851.578071] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1851.578492] do_syscall_64+0x33/0x40 [ 1851.578802] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1851.579223] RIP: 0033:0x7fcab4ef4b19 [ 1851.579530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1851.581007] RSP: 002b:00007fcab246a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1851.581630] RAX: ffffffffffffffda RBX: 00007fcab5007f60 RCX: 00007fcab4ef4b19 [ 1851.582208] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1851.582796] RBP: 00007fcab246a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1851.583376] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1851.583947] R13: 00007ffe07a1757f R14: 00007fcab246a300 R15: 0000000000022000 [ 1851.635202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11062 comm=syz-executor.4 [ 1851.649478] FAULT_INJECTION: forcing a failure. [ 1851.649478] name failslab, interval 1, probability 0, space 0, times 0 [ 1851.650751] CPU: 1 PID: 11067 Comm: syz-executor.2 Not tainted 5.10.220 #1 [ 1851.651337] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1851.652026] Call Trace: [ 1851.652267] dump_stack+0x107/0x167 [ 1851.652585] should_fail.cold+0x5/0xa [ 1851.652902] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1851.653329] should_failslab+0x5/0x20 [ 1851.653634] __kmalloc_node+0x76/0x420 [ 1851.653954] ? lock_downgrade+0x6d0/0x6d0 [ 1851.654294] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1851.654712] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1851.655126] ? trace_hardirqs_on+0x5b/0x180 [ 1851.655483] kmem_cache_alloc_trace+0x169/0x320 [ 1851.655865] alloc_pipe_info+0x10a/0x590 [ 1851.656198] ? __lock_acquire+0xbb1/0x5b00 [ 1851.656567] splice_direct_to_actor+0x774/0x980 [ 1851.657131] ? _cond_resched+0x12/0x80 [ 1851.657453] ? inode_security+0x107/0x140 [ 1851.657786] ? pipe_to_sendpage+0x380/0x380 [ 1851.658134] ? avc_policy_seqno+0x9/0x70 [ 1851.658609] ? selinux_file_permission+0x92/0x520 [ 1851.659011] ? do_splice_to+0x160/0x160 [ 1851.659338] ? security_file_permission+0xb1/0xe0 [ 1851.659880] do_splice_direct+0x1c4/0x290 [ 1851.660376] ? splice_direct_to_actor+0x980/0x980 [ 1851.660859] ? avc_policy_seqno+0x9/0x70 [ 1851.661223] ? security_file_permission+0xb1/0xe0 [ 1851.661621] do_sendfile+0x553/0x11e0 [ 1851.661938] ? do_pwritev+0x270/0x270 [ 1851.662250] ? wait_for_completion_io+0x270/0x270 [ 1851.662640] ? rcu_read_lock_any_held+0x75/0xa0 [ 1851.663025] ? vfs_write+0x354/0xb10 [ 1851.663335] __x64_sys_sendfile64+0x1d1/0x210 [ 1851.663697] ? __ia32_sys_sendfile+0x220/0x220 [ 1851.664070] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1851.664499] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1851.664916] do_syscall_64+0x33/0x40 [ 1851.665219] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1851.665639] RIP: 0033:0x7f153dedab19 [ 1851.665943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1851.667431] RSP: 002b:00007f153b450188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1851.668051] RAX: ffffffffffffffda RBX: 00007f153dfedf60 RCX: 00007f153dedab19 [ 1851.668758] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1851.669388] RBP: 00007f153b4501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1851.670057] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1851.670809] R13: 00007ffd2819606f R14: 00007f153b450300 R15: 0000000000022000 [ 1851.693164] FAULT_INJECTION: forcing a failure. [ 1851.693164] name failslab, interval 1, probability 0, space 0, times 0 [ 1851.694325] CPU: 1 PID: 11059 Comm: syz-executor.6 Not tainted 5.10.220 #1 [ 1851.694893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1851.695569] Call Trace: [ 1851.695779] dump_stack+0x107/0x167 [ 1851.696070] should_fail.cold+0x5/0xa [ 1851.696370] ? alloc_pipe_info+0x1e5/0x590 [ 1851.696703] should_failslab+0x5/0x20 [ 1851.697015] __kmalloc+0x72/0x390 [ 1851.697299] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1851.697701] alloc_pipe_info+0x1e5/0x590 [ 1851.698023] ? __lock_acquire+0xbb1/0x5b00 [ 1851.698367] splice_direct_to_actor+0x774/0x980 [ 1851.698742] ? _cond_resched+0x12/0x80 [ 1851.699062] ? inode_security+0x107/0x140 [ 1851.699403] ? pipe_to_sendpage+0x380/0x380 [ 1851.699757] ? avc_policy_seqno+0x9/0x70 [ 1851.700092] ? selinux_file_permission+0x92/0x520 [ 1851.700481] ? do_splice_to+0x160/0x160 [ 1851.700804] ? security_file_permission+0xb1/0xe0 [ 1851.701197] do_splice_direct+0x1c4/0x290 [ 1851.701538] ? splice_direct_to_actor+0x980/0x980 [ 1851.701926] ? avc_policy_seqno+0x9/0x70 [ 1851.702256] ? security_file_permission+0xb1/0xe0 [ 1851.702658] do_sendfile+0x553/0x11e0 [ 1851.702988] ? do_pwritev+0x270/0x270 [ 1851.703318] ? wait_for_completion_io+0x270/0x270 [ 1851.703707] ? rcu_read_lock_any_held+0x75/0xa0 [ 1851.704071] ? vfs_write+0x354/0xb10 [ 1851.704377] __x64_sys_sendfile64+0x1d1/0x210 [ 1851.704741] ? __ia32_sys_sendfile+0x220/0x220 [ 1851.705114] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1851.705528] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1851.705967] do_syscall_64+0x33/0x40 [ 1851.706262] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1851.706674] RIP: 0033:0x7f8caec11b19 [ 1851.706978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1851.708444] RSP: 002b:00007f8cac187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1851.709045] RAX: ffffffffffffffda RBX: 00007f8caed24f60 RCX: 00007f8caec11b19 [ 1851.709609] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000008 [ 1851.710183] RBP: 00007f8cac1871d0 R08: 0000000000000000 R09: 0000000000000000 [ 1851.710746] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1851.711319] R13: 00007fff84cedf2f R14: 00007f8cac187300 R15: 0000000000022000 13:30:49 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 13:30:49 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1f8}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:30:49 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 1) 13:30:49 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 4) 13:30:49 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 4) 13:30:49 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 4) 13:30:49 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) (fail_nth: 1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:30:49 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (fail_nth: 1) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) [ 1864.423676] FAULT_INJECTION: forcing a failure. [ 1864.423676] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.425314] FAULT_INJECTION: forcing a failure. [ 1864.425314] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.425520] CPU: 0 PID: 11105 Comm: syz-executor.1 Not tainted 5.10.220 #1 [ 1864.425576] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.425583] Call Trace: [ 1864.425606] dump_stack+0x107/0x167 [ 1864.429725] should_fail.cold+0x5/0xa [ 1864.430269] ? __sigqueue_alloc+0x1ed/0x5c0 [ 1864.430898] should_failslab+0x5/0x20 [ 1864.431437] kmem_cache_alloc+0x5b/0x310 [ 1864.432025] __sigqueue_alloc+0x1ed/0x5c0 [ 1864.432608] __send_signal+0x6f5/0x11e0 [ 1864.433177] tty_signal_session_leader+0x18d/0x5c0 [ 1864.433885] __tty_hangup.part.0+0x33c/0x9b0 [ 1864.434517] tty_ioctl+0x12b7/0x18b0 [ 1864.435072] ? tty_fasync+0x390/0x390 [ 1864.435610] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1864.436416] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1864.437140] ? do_vfs_ioctl+0x283/0x10d0 [ 1864.437706] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1864.438450] ? generic_block_fiemap+0x60/0x60 [ 1864.439107] ? lock_downgrade+0x6d0/0x6d0 [ 1864.439682] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1864.440359] ? wait_for_completion_io+0x270/0x270 [ 1864.441044] ? selinux_file_ioctl+0xb6/0x270 [ 1864.441663] ? tty_fasync+0x390/0x390 [ 1864.442200] __x64_sys_ioctl+0x19a/0x210 [ 1864.442769] do_syscall_64+0x33/0x40 [ 1864.443340] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1864.444051] RIP: 0033:0x7ff50de65b19 [ 1864.444578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1864.447139] RSP: 002b:00007ff50b3db188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1864.448202] RAX: ffffffffffffffda RBX: 00007ff50df78f60 RCX: 00007ff50de65b19 [ 1864.449193] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000004 [ 1864.450186] RBP: 00007ff50b3db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1864.451184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1864.452182] R13: 00007ffd523dddcf R14: 00007ff50b3db300 R15: 0000000000022000 [ 1864.453214] CPU: 1 PID: 11101 Comm: syz-executor.4 Not tainted 5.10.220 #1 [ 1864.453826] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.454529] Call Trace: [ 1864.454764] dump_stack+0x107/0x167 [ 1864.455092] should_fail.cold+0x5/0xa [ 1864.455420] ? alloc_pipe_info+0x10a/0x590 [ 1864.455788] should_failslab+0x5/0x20 [ 1864.456119] kmem_cache_alloc_trace+0x55/0x320 [ 1864.456523] alloc_pipe_info+0x10a/0x590 [ 1864.456872] splice_direct_to_actor+0x774/0x980 [ 1864.457275] ? _cond_resched+0x12/0x80 [ 1864.457623] ? inode_security+0x107/0x140 [ 1864.457986] ? pipe_to_sendpage+0x380/0x380 [ 1864.458364] ? avc_policy_seqno+0x9/0x70 [ 1864.458714] ? selinux_file_permission+0x92/0x520 [ 1864.459135] ? do_splice_to+0x160/0x160 [ 1864.459490] ? security_file_permission+0xb1/0xe0 [ 1864.459916] do_splice_direct+0x1c4/0x290 [ 1864.460278] ? splice_direct_to_actor+0x980/0x980 [ 1864.460696] ? avc_policy_seqno+0x9/0x70 [ 1864.461065] ? security_file_permission+0xb1/0xe0 [ 1864.461486] do_sendfile+0x553/0x11e0 [ 1864.461819] ? do_pwritev+0x270/0x270 [ 1864.462147] ? wait_for_completion_io+0x270/0x270 [ 1864.462566] ? rcu_read_lock_any_held+0x75/0xa0 [ 1864.462969] ? vfs_write+0x354/0xb10 [ 1864.463295] __x64_sys_sendfile64+0x1d1/0x210 [ 1864.463677] ? __ia32_sys_sendfile+0x220/0x220 [ 1864.464073] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1864.464516] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1864.464972] do_syscall_64+0x33/0x40 [ 1864.465291] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1864.465732] RIP: 0033:0x7f30a7fb2b19 [ 1864.466059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1864.467633] RSP: 002b:00007f30a5528188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1864.468304] RAX: ffffffffffffffda RBX: 00007f30a80c5f60 RCX: 00007f30a7fb2b19 [ 1864.468920] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1864.469539] RBP: 00007f30a55281d0 R08: 0000000000000000 R09: 0000000000000000 [ 1864.470144] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 1864.470748] R13: 00007ffc98681eef R14: 00007f30a5528300 R15: 0000000000022000 13:30:49 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (fail_nth: 2) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:30:49 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) (fail_nth: 2) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) [ 1864.538280] FAULT_INJECTION: forcing a failure. [ 1864.538280] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.538295] CPU: 1 PID: 11096 Comm: syz-executor.6 Not tainted 5.10.220 #1 [ 1864.538300] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.538304] Call Trace: [ 1864.538319] dump_stack+0x107/0x167 [ 1864.538330] should_fail.cold+0x5/0xa [ 1864.538342] ? create_object.isra.0+0x3a/0xa20 [ 1864.538354] should_failslab+0x5/0x20 [ 1864.538364] kmem_cache_alloc+0x5b/0x310 [ 1864.538376] create_object.isra.0+0x3a/0xa20 [ 1864.538386] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1864.538397] __kmalloc+0x16e/0x390 [ 1864.538411] alloc_pipe_info+0x1e5/0x590 [ 1864.538421] ? __lock_acquire+0xbb1/0x5b00 [ 1864.538433] splice_direct_to_actor+0x774/0x980 [ 1864.538446] ? _cond_resched+0x12/0x80 [ 1864.538456] ? inode_security+0x107/0x140 [ 1864.538464] ? pipe_to_sendpage+0x380/0x380 [ 1864.538472] ? avc_policy_seqno+0x9/0x70 [ 1864.538481] ? selinux_file_permission+0x92/0x520 [ 1864.538490] ? do_splice_to+0x160/0x160 [ 1864.538501] ? security_file_permission+0xb1/0xe0 [ 1864.538515] do_splice_direct+0x1c4/0x290 [ 1864.538524] ? splice_direct_to_actor+0x980/0x980 [ 1864.538532] ? avc_policy_seqno+0x9/0x70 [ 1864.538546] ? security_file_permission+0xb1/0xe0 13:30:49 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 2) 13:30:49 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1f8}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) [ 1864.538560] do_sendfile+0x553/0x11e0 [ 1864.538575] ? do_pwritev+0x270/0x270 [ 1864.538585] ? wait_for_completion_io+0x270/0x270 [ 1864.538597] ? rcu_read_lock_any_held+0x75/0xa0 [ 1864.538605] ? vfs_write+0x354/0xb10 [ 1864.538618] __x64_sys_sendfile64+0x1d1/0x210 [ 1864.538629] ? __ia32_sys_sendfile+0x220/0x220 [ 1864.538640] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1864.538649] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1864.538659] do_syscall_64+0x33/0x40 [ 1864.538668] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1864.538675] RIP: 0033:0x7f8caec11b19 [ 1864.538684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 13:30:49 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 5) [ 1864.538689] RSP: 002b:00007f8cac187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1864.538700] RAX: ffffffffffffffda RBX: 00007f8caed24f60 RCX: 00007f8caec11b19 [ 1864.538705] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000008 [ 1864.538711] RBP: 00007f8cac1871d0 R08: 0000000000000000 R09: 0000000000000000 [ 1864.538716] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1864.538721] R13: 00007fff84cedf2f R14: 00007f8cac187300 R15: 0000000000022000 [ 1864.551535] FAULT_INJECTION: forcing a failure. [ 1864.551535] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.551546] CPU: 1 PID: 11093 Comm: syz-executor.2 Not tainted 5.10.220 #1 [ 1864.551551] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.551554] Call Trace: [ 1864.551566] dump_stack+0x107/0x167 [ 1864.551576] should_fail.cold+0x5/0xa [ 1864.551587] ? create_object.isra.0+0x3a/0xa20 [ 1864.551598] should_failslab+0x5/0x20 [ 1864.551607] kmem_cache_alloc+0x5b/0x310 [ 1864.551619] create_object.isra.0+0x3a/0xa20 [ 1864.551629] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1864.551640] __kmalloc+0x16e/0x390 [ 1864.551653] alloc_pipe_info+0x1e5/0x590 [ 1864.551662] ? __lock_acquire+0xbb1/0x5b00 [ 1864.551673] splice_direct_to_actor+0x774/0x980 [ 1864.551685] ? _cond_resched+0x12/0x80 [ 1864.551694] ? inode_security+0x107/0x140 [ 1864.551701] ? pipe_to_sendpage+0x380/0x380 [ 1864.551710] ? avc_policy_seqno+0x9/0x70 [ 1864.551718] ? selinux_file_permission+0x92/0x520 [ 1864.551727] ? do_splice_to+0x160/0x160 [ 1864.551738] ? security_file_permission+0xb1/0xe0 [ 1864.551751] do_splice_direct+0x1c4/0x290 [ 1864.551760] ? splice_direct_to_actor+0x980/0x980 [ 1864.551768] ? avc_policy_seqno+0x9/0x70 [ 1864.551786] ? security_file_permission+0xb1/0xe0 [ 1864.551800] do_sendfile+0x553/0x11e0 [ 1864.551815] ? do_pwritev+0x270/0x270 [ 1864.551825] ? wait_for_completion_io+0x270/0x270 [ 1864.551836] ? rcu_read_lock_any_held+0x75/0xa0 [ 1864.551844] ? vfs_write+0x354/0xb10 [ 1864.551857] __x64_sys_sendfile64+0x1d1/0x210 [ 1864.551868] ? __ia32_sys_sendfile+0x220/0x220 [ 1864.551879] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1864.551888] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1864.551898] do_syscall_64+0x33/0x40 [ 1864.551907] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1864.551913] RIP: 0033:0x7f153dedab19 [ 1864.551921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1864.551926] RSP: 002b:00007f153b450188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1864.551936] RAX: ffffffffffffffda RBX: 00007f153dfedf60 RCX: 00007f153dedab19 [ 1864.551941] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1864.551947] RBP: 00007f153b4501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1864.551952] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1864.551957] R13: 00007ffd2819606f R14: 00007f153b450300 R15: 0000000000022000 [ 1864.573319] FAULT_INJECTION: forcing a failure. [ 1864.573319] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.573342] CPU: 0 PID: 11102 Comm: syz-executor.0 Not tainted 5.10.220 #1 [ 1864.573352] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.573357] Call Trace: [ 1864.573380] dump_stack+0x107/0x167 [ 1864.573399] should_fail.cold+0x5/0xa [ 1864.573420] ? create_object.isra.0+0x3a/0xa20 [ 1864.573441] should_failslab+0x5/0x20 [ 1864.573458] kmem_cache_alloc+0x5b/0x310 [ 1864.573479] create_object.isra.0+0x3a/0xa20 [ 1864.573496] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 13:30:50 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1f8}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) [ 1864.573517] __kmalloc+0x16e/0x390 [ 1864.573541] alloc_pipe_info+0x1e5/0x590 [ 1864.573558] ? __lock_acquire+0xbb1/0x5b00 [ 1864.573579] splice_direct_to_actor+0x774/0x980 [ 1864.573601] ? _cond_resched+0x12/0x80 [ 1864.573618] ? inode_security+0x107/0x140 [ 1864.573631] ? pipe_to_sendpage+0x380/0x380 [ 1864.573647] ? avc_policy_seqno+0x9/0x70 [ 1864.573662] ? selinux_file_permission+0x92/0x520 [ 1864.573679] ? do_splice_to+0x160/0x160 [ 1864.573699] ? security_file_permission+0xb1/0xe0 [ 1864.573722] do_splice_direct+0x1c4/0x290 [ 1864.573745] ? splice_direct_to_actor+0x980/0x980 [ 1864.573759] ? avc_policy_seqno+0x9/0x70 [ 1864.573783] ? security_file_permission+0xb1/0xe0 [ 1864.573809] do_sendfile+0x553/0x11e0 [ 1864.573835] ? do_pwritev+0x270/0x270 [ 1864.573854] ? wait_for_completion_io+0x270/0x270 [ 1864.573875] ? rcu_read_lock_any_held+0x75/0xa0 [ 1864.573889] ? vfs_write+0x354/0xb10 [ 1864.573913] __x64_sys_sendfile64+0x1d1/0x210 [ 1864.573932] ? __ia32_sys_sendfile+0x220/0x220 [ 1864.573952] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1864.573969] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1864.573987] do_syscall_64+0x33/0x40 [ 1864.574003] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1864.574014] RIP: 0033:0x7fcab4ef4b19 [ 1864.574029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1864.574038] RSP: 002b:00007fcab246a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1864.574057] RAX: ffffffffffffffda RBX: 00007fcab5007f60 RCX: 00007fcab4ef4b19 [ 1864.574066] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1864.574075] RBP: 00007fcab246a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1864.574084] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1864.574094] R13: 00007ffe07a1757f R14: 00007fcab246a300 R15: 0000000000022000 [ 1864.594592] FAULT_INJECTION: forcing a failure. [ 1864.594592] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.594610] CPU: 0 PID: 11104 Comm: syz-executor.7 Not tainted 5.10.220 #1 [ 1864.594619] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.594624] Call Trace: [ 1864.594641] dump_stack+0x107/0x167 [ 1864.594658] should_fail.cold+0x5/0xa [ 1864.594684] ? alloc_pipe_info+0x10a/0x590 [ 1864.594702] should_failslab+0x5/0x20 [ 1864.594718] kmem_cache_alloc_trace+0x55/0x320 [ 1864.594741] alloc_pipe_info+0x10a/0x590 [ 1864.594756] ? __lock_acquire+0xbb1/0x5b00 [ 1864.594775] splice_direct_to_actor+0x774/0x980 [ 1864.594794] ? _cond_resched+0x12/0x80 [ 1864.594821] ? inode_security+0x107/0x140 [ 1864.594834] ? pipe_to_sendpage+0x380/0x380 [ 1864.594849] ? avc_policy_seqno+0x9/0x70 [ 1864.594864] ? selinux_file_permission+0x92/0x520 [ 1864.594880] ? do_splice_to+0x160/0x160 [ 1864.594899] ? security_file_permission+0xb1/0xe0 [ 1864.594923] do_splice_direct+0x1c4/0x290 [ 1864.594940] ? splice_direct_to_actor+0x980/0x980 [ 1864.594954] ? avc_policy_seqno+0x9/0x70 [ 1864.594978] ? security_file_permission+0xb1/0xe0 [ 1864.595003] do_sendfile+0x553/0x11e0 [ 1864.595030] ? do_pwritev+0x270/0x270 [ 1864.595049] ? wait_for_completion_io+0x270/0x270 [ 1864.595068] ? rcu_read_lock_any_held+0x75/0xa0 [ 1864.595082] ? vfs_write+0x354/0xb10 [ 1864.595105] __x64_sys_sendfile64+0x1d1/0x210 [ 1864.595124] ? __ia32_sys_sendfile+0x220/0x220 [ 1864.595145] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1864.595161] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1864.595179] do_syscall_64+0x33/0x40 [ 1864.595195] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1864.595205] RIP: 0033:0x7fa7422adb19 [ 1864.595220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1864.595229] RSP: 002b:00007fa73f823188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1864.595246] RAX: ffffffffffffffda RBX: 00007fa7423c0f60 RCX: 00007fa7422adb19 [ 1864.595255] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000007 [ 1864.595266] RBP: 00007fa73f8231d0 R08: 0000000000000000 R09: 0000000000000000 [ 1864.595275] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1864.595285] R13: 00007ffe3fb62d9f R14: 00007fa73f823300 R15: 0000000000022000 [ 1864.713376] FAULT_INJECTION: forcing a failure. [ 1864.713376] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.713389] CPU: 1 PID: 11123 Comm: syz-executor.7 Not tainted 5.10.220 #1 [ 1864.713394] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.713397] Call Trace: [ 1864.713413] dump_stack+0x107/0x167 [ 1864.713423] should_fail.cold+0x5/0xa [ 1864.713434] ? create_object.isra.0+0x3a/0xa20 [ 1864.713446] should_failslab+0x5/0x20 [ 1864.713456] kmem_cache_alloc+0x5b/0x310 [ 1864.713467] create_object.isra.0+0x3a/0xa20 [ 1864.713477] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1864.713489] kmem_cache_alloc_trace+0x151/0x320 [ 1864.713502] alloc_pipe_info+0x10a/0x590 [ 1864.713512] ? __lock_acquire+0xbb1/0x5b00 [ 1864.713524] splice_direct_to_actor+0x774/0x980 [ 1864.713536] ? _cond_resched+0x12/0x80 [ 1864.713546] ? inode_security+0x107/0x140 [ 1864.713553] ? pipe_to_sendpage+0x380/0x380 [ 1864.713567] ? avc_policy_seqno+0x9/0x70 [ 1864.713578] ? selinux_file_permission+0x92/0x520 [ 1864.713591] ? do_splice_to+0x160/0x160 [ 1864.713603] ? security_file_permission+0xb1/0xe0 [ 1864.713619] do_splice_direct+0x1c4/0x290 [ 1864.713631] ? splice_direct_to_actor+0x980/0x980 [ 1864.713645] ? avc_policy_seqno+0x9/0x70 [ 1864.713660] ? security_file_permission+0xb1/0xe0 [ 1864.713676] do_sendfile+0x553/0x11e0 [ 1864.713693] ? do_pwritev+0x270/0x270 [ 1864.713705] ? wait_for_completion_io+0x270/0x270 [ 1864.713717] ? rcu_read_lock_any_held+0x75/0xa0 [ 1864.713727] ? vfs_write+0x354/0xb10 [ 1864.713742] __x64_sys_sendfile64+0x1d1/0x210 [ 1864.713755] ? __ia32_sys_sendfile+0x220/0x220 [ 1864.713777] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1864.713789] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1864.713801] do_syscall_64+0x33/0x40 [ 1864.713813] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1864.713822] RIP: 0033:0x7fa7422adb19 [ 1864.713837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1864.713841] RSP: 002b:00007fa73f823188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1864.713854] RAX: ffffffffffffffda RBX: 00007fa7423c0f60 RCX: 00007fa7422adb19 [ 1864.713859] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000007 [ 1864.713864] RBP: 00007fa73f8231d0 R08: 0000000000000000 R09: 0000000000000000 [ 1864.713869] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1864.713874] R13: 00007ffe3fb62d9f R14: 00007fa73f823300 R15: 0000000000022000 [ 1864.738616] FAULT_INJECTION: forcing a failure. [ 1864.738616] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.738638] CPU: 0 PID: 11121 Comm: syz-executor.4 Not tainted 5.10.220 #1 [ 1864.738647] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.738653] Call Trace: [ 1864.738677] dump_stack+0x107/0x167 [ 1864.738697] should_fail.cold+0x5/0xa [ 1864.738717] ? create_object.isra.0+0x3a/0xa20 [ 1864.738738] should_failslab+0x5/0x20 [ 1864.738755] kmem_cache_alloc+0x5b/0x310 [ 1864.738786] create_object.isra.0+0x3a/0xa20 [ 1864.738816] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1864.738840] kmem_cache_alloc_trace+0x151/0x320 [ 1864.738865] alloc_pipe_info+0x10a/0x590 [ 1864.738888] splice_direct_to_actor+0x774/0x980 [ 1864.738908] ? _cond_resched+0x12/0x80 [ 1864.738926] ? inode_security+0x107/0x140 [ 1864.738939] ? pipe_to_sendpage+0x380/0x380 [ 1864.738956] ? avc_policy_seqno+0x9/0x70 [ 1864.738971] ? selinux_file_permission+0x92/0x520 [ 1864.738988] ? do_splice_to+0x160/0x160 [ 1864.739008] ? security_file_permission+0xb1/0xe0 [ 1864.739033] do_splice_direct+0x1c4/0x290 [ 1864.739050] ? splice_direct_to_actor+0x980/0x980 [ 1864.739064] ? avc_policy_seqno+0x9/0x70 [ 1864.739089] ? security_file_permission+0xb1/0xe0 [ 1864.739116] do_sendfile+0x553/0x11e0 [ 1864.739144] ? do_pwritev+0x270/0x270 [ 1864.739164] ? wait_for_completion_io+0x270/0x270 [ 1864.739185] ? rcu_read_lock_any_held+0x75/0xa0 [ 1864.739200] ? vfs_write+0x354/0xb10 [ 1864.739224] __x64_sys_sendfile64+0x1d1/0x210 [ 1864.739245] ? __ia32_sys_sendfile+0x220/0x220 [ 1864.739268] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1864.739284] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1864.739303] do_syscall_64+0x33/0x40 [ 1864.739319] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1864.739330] RIP: 0033:0x7f30a7fb2b19 [ 1864.739345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1864.739354] RSP: 002b:00007f30a5528188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1864.739373] RAX: ffffffffffffffda RBX: 00007f30a80c5f60 RCX: 00007f30a7fb2b19 [ 1864.739382] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1864.739392] RBP: 00007f30a55281d0 R08: 0000000000000000 R09: 0000000000000000 [ 1864.739408] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 1864.739418] R13: 00007ffc98681eef R14: 00007f30a5528300 R15: 0000000000022000 [ 1864.883670] FAULT_INJECTION: forcing a failure. [ 1864.883670] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.883693] CPU: 1 PID: 11132 Comm: syz-executor.2 Not tainted 5.10.220 #1 [ 1864.883704] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.883710] Call Trace: [ 1864.883733] dump_stack+0x107/0x167 [ 1864.883753] should_fail.cold+0x5/0xa [ 1864.883779] ? alloc_pipe_info+0x1e5/0x590 [ 1864.883791] should_failslab+0x5/0x20 [ 1864.883800] __kmalloc+0x72/0x390 [ 1864.883810] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1864.883822] alloc_pipe_info+0x1e5/0x590 [ 1864.883835] splice_direct_to_actor+0x774/0x980 [ 1864.883847] ? _cond_resched+0x12/0x80 [ 1864.883857] ? inode_security+0x107/0x140 [ 1864.883864] ? pipe_to_sendpage+0x380/0x380 [ 1864.883873] ? avc_policy_seqno+0x9/0x70 [ 1864.883882] ? selinux_file_permission+0x92/0x520 [ 1864.883891] ? do_splice_to+0x160/0x160 [ 1864.883902] ? security_file_permission+0xb1/0xe0 [ 1864.883915] do_splice_direct+0x1c4/0x290 [ 1864.883924] ? splice_direct_to_actor+0x980/0x980 [ 1864.883932] ? avc_policy_seqno+0x9/0x70 [ 1864.883945] ? security_file_permission+0xb1/0xe0 [ 1864.883960] do_sendfile+0x553/0x11e0 [ 1864.883975] ? do_pwritev+0x270/0x270 [ 1864.883986] ? wait_for_completion_io+0x270/0x270 [ 1864.883998] ? rcu_read_lock_any_held+0x75/0xa0 [ 1864.884006] ? vfs_write+0x354/0xb10 [ 1864.884018] __x64_sys_sendfile64+0x1d1/0x210 [ 1864.884029] ? __ia32_sys_sendfile+0x220/0x220 [ 1864.884041] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1864.884050] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1864.884060] do_syscall_64+0x33/0x40 [ 1864.884068] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1864.884075] RIP: 0033:0x7f153dedab19 [ 1864.884084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1864.884089] RSP: 002b:00007f153b450188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1864.884100] RAX: ffffffffffffffda RBX: 00007f153dfedf60 RCX: 00007f153dedab19 [ 1864.884105] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1864.884110] RBP: 00007f153b4501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1864.884115] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1864.884120] R13: 00007ffd2819606f R14: 00007f153b450300 R15: 0000000000022000 [ 1865.213117] FAULT_INJECTION: forcing a failure. [ 1865.213117] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1865.214478] CPU: 1 PID: 11119 Comm: syz-executor.1 Not tainted 5.10.220 #1 [ 1865.215046] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1865.215717] Call Trace: [ 1865.215939] dump_stack+0x107/0x167 [ 1865.216238] should_fail.cold+0x5/0xa [ 1865.216548] _copy_from_user+0x2e/0x1b0 [ 1865.216874] kstrtouint_from_user+0xbd/0x220 [ 1865.217233] ? kstrtou8_from_user+0x210/0x210 [ 1865.217600] ? lock_acquire+0x197/0x470 [ 1865.217920] ? ksys_write+0x12d/0x260 [ 1865.218238] proc_fail_nth_write+0x78/0x220 [ 1865.218590] ? proc_task_getattr+0x1f0/0x1f0 [ 1865.218954] ? proc_task_getattr+0x1f0/0x1f0 [ 1865.219312] vfs_write+0x29a/0xb10 [ 1865.219604] ksys_write+0x12d/0x260 [ 1865.219899] ? __ia32_sys_read+0xb0/0xb0 [ 1865.220233] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1865.220656] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1865.221077] do_syscall_64+0x33/0x40 [ 1865.221380] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1865.221788] RIP: 0033:0x7ff50de185ff [ 1865.222093] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1865.223562] RSP: 002b:00007ff50b3db170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1865.224172] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff50de185ff [ 1865.224738] RDX: 0000000000000001 RSI: 00007ff50b3db1e0 RDI: 0000000000000005 [ 1865.225304] RBP: 00007ff50b3db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1865.225870] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1865.226431] R13: 00007ffd523dddcf R14: 00007ff50b3db300 R15: 0000000000022000 13:31:02 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 6) 13:31:02 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) 13:31:02 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) (fail_nth: 3) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:31:02 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 5) 13:31:02 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 5) 13:31:02 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1f8}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:31:02 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 3) 13:31:02 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) [ 1877.667608] FAULT_INJECTION: forcing a failure. [ 1877.667608] name failslab, interval 1, probability 0, space 0, times 0 [ 1877.669405] CPU: 0 PID: 11153 Comm: syz-executor.4 Not tainted 5.10.220 #1 [ 1877.670430] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1877.671666] Call Trace: [ 1877.672080] dump_stack+0x107/0x167 [ 1877.672624] should_fail.cold+0x5/0xa [ 1877.673196] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1877.673979] should_failslab+0x5/0x20 [ 1877.674546] __kmalloc_node+0x76/0x420 [ 1877.675142] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1877.675903] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1877.676638] ? trace_hardirqs_on+0x5b/0x180 [ 1877.677288] kmem_cache_alloc_trace+0x169/0x320 [ 1877.677985] alloc_pipe_info+0x10a/0x590 [ 1877.678599] splice_direct_to_actor+0x774/0x980 [ 1877.679312] ? _cond_resched+0x12/0x80 [ 1877.679896] ? inode_security+0x107/0x140 [ 1877.680510] ? pipe_to_sendpage+0x380/0x380 [ 1877.681150] ? avc_policy_seqno+0x9/0x70 [ 1877.681757] ? selinux_file_permission+0x92/0x520 [ 1877.682485] ? do_splice_to+0x160/0x160 [ 1877.683079] ? security_file_permission+0xb1/0xe0 [ 1877.683814] do_splice_direct+0x1c4/0x290 [ 1877.684436] ? splice_direct_to_actor+0x980/0x980 [ 1877.685142] ? avc_policy_seqno+0x9/0x70 [ 1877.685754] ? security_file_permission+0xb1/0xe0 [ 1877.686468] do_sendfile+0x553/0x11e0 [ 1877.687054] ? do_pwritev+0x270/0x270 [ 1877.687612] ? wait_for_completion_io+0x270/0x270 [ 1877.688329] ? rcu_read_lock_any_held+0x75/0xa0 [ 1877.689020] ? vfs_write+0x354/0xb10 [ 1877.689569] __x64_sys_sendfile64+0x1d1/0x210 [ 1877.690225] ? __ia32_sys_sendfile+0x220/0x220 [ 1877.690902] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1877.691681] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1877.692438] do_syscall_64+0x33/0x40 [ 1877.692981] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1877.693728] RIP: 0033:0x7f30a7fb2b19 [ 1877.694272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1877.696952] RSP: 002b:00007f30a5528188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1877.698125] RAX: ffffffffffffffda RBX: 00007f30a80c5f60 RCX: 00007f30a7fb2b19 [ 1877.699164] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1877.700225] RBP: 00007f30a55281d0 R08: 0000000000000000 R09: 0000000000000000 [ 1877.701264] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 1877.702301] R13: 00007ffc98681eef R14: 00007f30a5528300 R15: 0000000000022000 13:31:02 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) [ 1877.788517] FAULT_INJECTION: forcing a failure. [ 1877.788517] name failslab, interval 1, probability 0, space 0, times 0 [ 1877.790240] CPU: 1 PID: 11150 Comm: syz-executor.2 Not tainted 5.10.220 #1 [ 1877.790250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1877.790255] Call Trace: [ 1877.790279] dump_stack+0x107/0x167 [ 1877.790302] should_fail.cold+0x5/0xa [ 1877.793994] ? create_object.isra.0+0x3a/0xa20 [ 1877.794014] should_failslab+0x5/0x20 [ 1877.794031] kmem_cache_alloc+0x5b/0x310 [ 1877.794052] create_object.isra.0+0x3a/0xa20 [ 1877.794070] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1877.794090] __kmalloc+0x16e/0x390 [ 1877.794115] alloc_pipe_info+0x1e5/0x590 [ 1877.794131] ? __lock_acquire+0xbb1/0x5b00 [ 1877.794151] splice_direct_to_actor+0x774/0x980 [ 1877.794172] ? _cond_resched+0x12/0x80 [ 1877.794188] ? inode_security+0x107/0x140 [ 1877.794201] ? pipe_to_sendpage+0x380/0x380 [ 1877.794217] ? avc_policy_seqno+0x9/0x70 [ 1877.794232] ? selinux_file_permission+0x92/0x520 [ 1877.794248] ? do_splice_to+0x160/0x160 [ 1877.794267] ? security_file_permission+0xb1/0xe0 [ 1877.794290] do_splice_direct+0x1c4/0x290 [ 1877.794307] ? splice_direct_to_actor+0x980/0x980 [ 1877.794321] ? avc_policy_seqno+0x9/0x70 [ 1877.794345] ? security_file_permission+0xb1/0xe0 [ 1877.794370] do_sendfile+0x553/0x11e0 [ 1877.794396] ? do_pwritev+0x270/0x270 [ 1877.794416] ? wait_for_completion_io+0x270/0x270 [ 1877.794435] ? rcu_read_lock_any_held+0x75/0xa0 [ 1877.794450] ? vfs_write+0x354/0xb10 [ 1877.794473] __x64_sys_sendfile64+0x1d1/0x210 [ 1877.794492] ? __ia32_sys_sendfile+0x220/0x220 [ 1877.794513] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1877.794528] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1877.794546] do_syscall_64+0x33/0x40 [ 1877.794562] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1877.794573] RIP: 0033:0x7f153dedab19 [ 1877.794588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1877.794597] RSP: 002b:00007f153b450188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1877.794616] RAX: ffffffffffffffda RBX: 00007f153dfedf60 RCX: 00007f153dedab19 [ 1877.794625] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1877.794634] RBP: 00007f153b4501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1877.794643] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1877.794652] R13: 00007ffd2819606f R14: 00007f153b450300 R15: 0000000000022000 [ 1877.808608] FAULT_INJECTION: forcing a failure. [ 1877.808608] name failslab, interval 1, probability 0, space 0, times 0 [ 1877.808628] CPU: 0 PID: 11155 Comm: syz-executor.0 Not tainted 5.10.220 #1 [ 1877.808638] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1877.808643] Call Trace: [ 1877.808666] dump_stack+0x107/0x167 [ 1877.808684] should_fail.cold+0x5/0xa [ 1877.808704] ? iter_file_splice_write+0x16d/0xc30 [ 1877.808723] should_failslab+0x5/0x20 [ 1877.808739] __kmalloc+0x72/0x390 [ 1877.808761] iter_file_splice_write+0x16d/0xc30 [ 1877.808781] ? atime_needs_update+0x600/0x600 [ 1877.808811] ? generic_splice_sendpage+0x140/0x140 [ 1877.808826] ? pipe_to_user+0x170/0x170 [ 1877.808860] ? security_file_permission+0xb1/0xe0 [ 1877.808879] ? generic_splice_sendpage+0x140/0x140 [ 1877.808897] direct_splice_actor+0x10f/0x170 [ 1877.808917] splice_direct_to_actor+0x387/0x980 [ 1877.808938] ? pipe_to_sendpage+0x380/0x380 [ 1877.808958] ? do_splice_to+0x160/0x160 [ 1877.808976] ? security_file_permission+0xb1/0xe0 [ 1877.809000] do_splice_direct+0x1c4/0x290 [ 1877.809016] ? splice_direct_to_actor+0x980/0x980 [ 1877.809031] ? avc_policy_seqno+0x9/0x70 [ 1877.809056] ? security_file_permission+0xb1/0xe0 [ 1877.809081] do_sendfile+0x553/0x11e0 [ 1877.809107] ? do_pwritev+0x270/0x270 [ 1877.809131] ? wait_for_completion_io+0x270/0x270 [ 1877.809153] ? rcu_read_lock_any_held+0x75/0xa0 [ 1877.809167] ? vfs_write+0x354/0xb10 [ 1877.809190] __x64_sys_sendfile64+0x1d1/0x210 [ 1877.809210] ? __ia32_sys_sendfile+0x220/0x220 [ 1877.809231] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1877.809247] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1877.809265] do_syscall_64+0x33/0x40 [ 1877.809281] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1877.809292] RIP: 0033:0x7fcab4ef4b19 [ 1877.809307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1877.809316] RSP: 002b:00007fcab246a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1877.809335] RAX: ffffffffffffffda RBX: 00007fcab5007f60 RCX: 00007fcab4ef4b19 [ 1877.809344] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000007 [ 1877.809353] RBP: 00007fcab246a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1877.809363] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1877.809372] R13: 00007ffe07a1757f R14: 00007fcab246a300 R15: 0000000000022000 [ 1877.828486] FAULT_INJECTION: forcing a failure. [ 1877.828486] name failslab, interval 1, probability 0, space 0, times 0 [ 1877.828549] CPU: 1 PID: 11160 Comm: syz-executor.6 Not tainted 5.10.220 #1 [ 1877.828558] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1877.828564] Call Trace: [ 1877.828582] dump_stack+0x107/0x167 [ 1877.828599] should_fail.cold+0x5/0xa [ 1877.828615] ? iter_file_splice_write+0x16d/0xc30 [ 1877.828631] ? iter_file_splice_write+0x16d/0xc30 [ 1877.828650] should_failslab+0x5/0x20 [ 1877.828665] __kmalloc+0x72/0x390 [ 1877.828687] iter_file_splice_write+0x16d/0xc30 [ 1877.828702] ? atime_needs_update+0x600/0x600 [ 1877.828731] ? generic_splice_sendpage+0x140/0x140 [ 1877.828747] ? pipe_to_user+0x170/0x170 [ 1877.828780] ? security_file_permission+0xb1/0xe0 [ 1877.828799] ? generic_splice_sendpage+0x140/0x140 [ 1877.828817] direct_splice_actor+0x10f/0x170 [ 1877.828837] splice_direct_to_actor+0x387/0x980 [ 1877.828857] ? pipe_to_sendpage+0x380/0x380 [ 1877.828877] ? do_splice_to+0x160/0x160 [ 1877.828896] ? security_file_permission+0xb1/0xe0 [ 1877.828920] do_splice_direct+0x1c4/0x290 [ 1877.828936] ? splice_direct_to_actor+0x980/0x980 [ 1877.828950] ? avc_policy_seqno+0x9/0x70 [ 1877.828975] ? security_file_permission+0xb1/0xe0 [ 1877.829000] do_sendfile+0x553/0x11e0 [ 1877.829027] ? do_pwritev+0x270/0x270 [ 1877.829046] ? wait_for_completion_io+0x270/0x270 [ 1877.829065] ? rcu_read_lock_any_held+0x75/0xa0 [ 1877.829079] ? vfs_write+0x354/0xb10 [ 1877.829103] __x64_sys_sendfile64+0x1d1/0x210 [ 1877.829122] ? __ia32_sys_sendfile+0x220/0x220 [ 1877.829142] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1877.829158] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1877.829176] do_syscall_64+0x33/0x40 [ 1877.829191] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1877.829202] RIP: 0033:0x7f8caec11b19 [ 1877.829217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1877.829226] RSP: 002b:00007f8cac187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1877.829244] RAX: ffffffffffffffda RBX: 00007f8caed24f60 RCX: 00007f8caec11b19 [ 1877.829253] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1877.829262] RBP: 00007f8cac1871d0 R08: 0000000000000000 R09: 0000000000000000 [ 1877.829271] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1877.829281] R13: 00007fff84cedf2f R14: 00007f8cac187300 R15: 0000000000022000 [ 1877.841689] FAULT_INJECTION: forcing a failure. [ 1877.841689] name failslab, interval 1, probability 0, space 0, times 0 [ 1877.935651] CPU: 1 PID: 11158 Comm: syz-executor.7 Not tainted 5.10.220 #1 [ 1877.935660] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1877.935665] Call Trace: [ 1877.935682] dump_stack+0x107/0x167 [ 1877.935700] should_fail.cold+0x5/0xa [ 1877.935718] ? alloc_pipe_info+0x1e5/0x590 [ 1877.935737] should_failslab+0x5/0x20 [ 1877.935751] __kmalloc+0x72/0x390 [ 1877.935769] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1877.935791] alloc_pipe_info+0x1e5/0x590 [ 1877.935806] ? __lock_acquire+0xbb1/0x5b00 [ 1877.935825] splice_direct_to_actor+0x774/0x980 [ 1877.935844] ? _cond_resched+0x12/0x80 [ 1877.935859] ? inode_security+0x107/0x140 [ 1877.935872] ? pipe_to_sendpage+0x380/0x380 [ 1877.935887] ? avc_policy_seqno+0x9/0x70 [ 1877.935901] ? selinux_file_permission+0x92/0x520 [ 1877.935918] ? do_splice_to+0x160/0x160 [ 1877.935936] ? security_file_permission+0xb1/0xe0 [ 1877.935960] do_splice_direct+0x1c4/0x290 [ 1877.935977] ? splice_direct_to_actor+0x980/0x980 [ 1877.935991] ? avc_policy_seqno+0x9/0x70 [ 1877.936015] ? security_file_permission+0xb1/0xe0 [ 1877.936040] do_sendfile+0x553/0x11e0 [ 1877.936066] ? do_pwritev+0x270/0x270 [ 1877.936085] ? wait_for_completion_io+0x270/0x270 [ 1877.936104] ? rcu_read_lock_any_held+0x75/0xa0 [ 1877.936118] ? vfs_write+0x354/0xb10 [ 1877.936141] __x64_sys_sendfile64+0x1d1/0x210 [ 1877.936170] ? __ia32_sys_sendfile+0x220/0x220 [ 1877.936192] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1877.956541] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1877.956559] do_syscall_64+0x33/0x40 13:31:03 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1f8}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) [ 1877.956575] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1877.956586] RIP: 0033:0x7fa7422adb19 [ 1877.956601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1877.956610] RSP: 002b:00007fa73f823188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1877.956627] RAX: ffffffffffffffda RBX: 00007fa7423c0f60 RCX: 00007fa7422adb19 [ 1877.956636] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000009 [ 1877.956645] RBP: 00007fa73f8231d0 R08: 0000000000000000 R09: 0000000000000000 13:31:03 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 6) [ 1877.956655] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1877.956664] R13: 00007ffe3fb62d9f R14: 00007fa73f823300 R15: 0000000000022000 13:31:03 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 4) 13:31:03 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 6) 13:31:03 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x4b47, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) [ 1878.154165] FAULT_INJECTION: forcing a failure. [ 1878.154165] name failslab, interval 1, probability 0, space 0, times 0 [ 1878.156183] CPU: 1 PID: 11182 Comm: syz-executor.6 Not tainted 5.10.220 #1 [ 1878.157194] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1878.158395] Call Trace: [ 1878.158787] dump_stack+0x107/0x167 [ 1878.159336] should_fail.cold+0x5/0xa [ 1878.159892] ? create_object.isra.0+0x3a/0xa20 [ 1878.160563] should_failslab+0x5/0x20 [ 1878.161118] kmem_cache_alloc+0x5b/0x310 [ 1878.161719] create_object.isra.0+0x3a/0xa20 [ 1878.162371] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1878.163306] __kmalloc+0x16e/0x390 [ 1878.163832] alloc_pipe_info+0x1e5/0x590 [ 1878.164432] splice_direct_to_actor+0x774/0x980 [ 1878.165104] ? _cond_resched+0x12/0x80 [ 1878.165673] ? inode_security+0x107/0x140 [ 1878.166278] ? pipe_to_sendpage+0x380/0x380 [ 1878.166918] ? avc_policy_seqno+0x9/0x70 [ 1878.167658] ? selinux_file_permission+0x92/0x520 [ 1878.168473] ? do_splice_to+0x160/0x160 [ 1878.169239] ? security_file_permission+0xb1/0xe0 [ 1878.169943] do_splice_direct+0x1c4/0x290 [ 1878.170543] ? splice_direct_to_actor+0x980/0x980 [ 1878.171270] do_sendfile+0x553/0x11e0 [ 1878.171830] ? do_pwritev+0x270/0x270 [ 1878.172411] ? wait_for_completion_io+0x270/0x270 [ 1878.173237] ? rcu_read_lock_any_held+0x75/0xa0 [ 1878.173916] ? vfs_write+0x354/0xb10 [ 1878.174471] __x64_sys_sendfile64+0x1d1/0x210 [ 1878.175135] ? __ia32_sys_sendfile+0x220/0x220 [ 1878.175807] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1878.176566] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1878.177318] do_syscall_64+0x33/0x40 [ 1878.177865] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1878.178612] RIP: 0033:0x7f8caec11b19 [ 1878.179162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1878.181810] RSP: 002b:00007f8cac187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1878.182946] RAX: ffffffffffffffda RBX: 00007f8caed24f60 RCX: 00007f8caec11b19 [ 1878.183986] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1878.185112] RBP: 00007f8cac1871d0 R08: 0000000000000000 R09: 0000000000000000 [ 1878.186231] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1878.187604] R13: 00007fff84cedf2f R14: 00007f8cac187300 R15: 0000000000022000 13:31:03 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 7) [ 1878.353132] FAULT_INJECTION: forcing a failure. [ 1878.353132] name failslab, interval 1, probability 0, space 0, times 0 [ 1878.355024] CPU: 0 PID: 11188 Comm: syz-executor.0 Not tainted 5.10.220 #1 [ 1878.356051] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1878.357279] Call Trace: [ 1878.357685] dump_stack+0x107/0x167 [ 1878.358233] should_fail.cold+0x5/0xa [ 1878.358797] ? create_object.isra.0+0x3a/0xa20 [ 1878.359476] should_failslab+0x5/0x20 [ 1878.360036] kmem_cache_alloc+0x5b/0x310 [ 1878.360639] create_object.isra.0+0x3a/0xa20 [ 1878.361293] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1878.362035] __kmalloc+0x16e/0x390 [ 1878.362564] iter_file_splice_write+0x16d/0xc30 [ 1878.363252] ? atime_needs_update+0x600/0x600 [ 1878.363921] ? generic_splice_sendpage+0x140/0x140 [ 1878.364634] ? pipe_to_user+0x170/0x170 [ 1878.365234] ? security_file_permission+0xb1/0xe0 [ 1878.365939] ? generic_splice_sendpage+0x140/0x140 [ 1878.366656] direct_splice_actor+0x10f/0x170 [ 1878.367308] splice_direct_to_actor+0x387/0x980 [ 1878.367990] ? pipe_to_sendpage+0x380/0x380 [ 1878.368623] ? do_splice_to+0x160/0x160 [ 1878.369206] ? security_file_permission+0xb1/0xe0 [ 1878.369915] do_splice_direct+0x1c4/0x290 [ 1878.370520] ? splice_direct_to_actor+0x980/0x980 [ 1878.371223] ? avc_policy_seqno+0x9/0x70 [ 1878.371826] ? security_file_permission+0xb1/0xe0 [ 1878.372539] do_sendfile+0x553/0x11e0 [ 1878.373104] ? do_pwritev+0x270/0x270 [ 1878.373665] ? wait_for_completion_io+0x270/0x270 [ 1878.374368] ? rcu_read_lock_any_held+0x75/0xa0 [ 1878.375049] ? vfs_write+0x354/0xb10 [ 1878.375599] __x64_sys_sendfile64+0x1d1/0x210 [ 1878.376252] ? __ia32_sys_sendfile+0x220/0x220 [ 1878.376924] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1878.377685] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1878.378440] do_syscall_64+0x33/0x40 [ 1878.378991] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1878.379735] RIP: 0033:0x7fcab4ef4b19 [ 1878.380277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1878.382937] RSP: 002b:00007fcab246a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1878.384064] RAX: ffffffffffffffda RBX: 00007fcab5007f60 RCX: 00007fcab4ef4b19 [ 1878.385096] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1878.386131] RBP: 00007fcab246a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1878.387174] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1878.388215] R13: 00007ffe07a1757f R14: 00007fcab246a300 R15: 0000000000022000 [ 1878.429732] FAULT_INJECTION: forcing a failure. [ 1878.429732] name failslab, interval 1, probability 0, space 0, times 0 [ 1878.431602] CPU: 1 PID: 11186 Comm: syz-executor.7 Not tainted 5.10.220 #1 [ 1878.432641] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1878.433869] Call Trace: [ 1878.434281] dump_stack+0x107/0x167 [ 1878.434837] should_fail.cold+0x5/0xa [ 1878.435417] ? create_object.isra.0+0x3a/0xa20 [ 1878.436081] ? create_object.isra.0+0x3a/0xa20 [ 1878.436745] should_failslab+0x5/0x20 [ 1878.437308] kmem_cache_alloc+0x5b/0x310 [ 1878.438074] create_object.isra.0+0x3a/0xa20 [ 1878.438723] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1878.439469] __kmalloc+0x16e/0x390 [ 1878.439995] alloc_pipe_info+0x1e5/0x590 [ 1878.440589] splice_direct_to_actor+0x774/0x980 [ 1878.441257] ? _cond_resched+0x12/0x80 [ 1878.441830] ? inode_security+0x107/0x140 [ 1878.442437] ? pipe_to_sendpage+0x380/0x380 [ 1878.443063] ? avc_policy_seqno+0x9/0x70 [ 1878.443644] ? selinux_file_permission+0x92/0x520 [ 1878.444339] ? do_splice_to+0x160/0x160 [ 1878.444916] ? security_file_permission+0xb1/0xe0 [ 1878.445620] do_splice_direct+0x1c4/0x290 [ 1878.446226] ? splice_direct_to_actor+0x980/0x980 [ 1878.446936] ? avc_policy_seqno+0x9/0x70 [ 1878.447541] ? security_file_permission+0xb1/0xe0 [ 1878.448261] do_sendfile+0x553/0x11e0 [ 1878.448826] ? do_pwritev+0x270/0x270 [ 1878.449380] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 1878.450022] ? tick_program_event+0xa8/0x140 [ 1878.450674] __x64_sys_sendfile64+0x1d1/0x210 [ 1878.451343] ? __ia32_sys_sendfile+0x220/0x220 [ 1878.452006] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1878.452761] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1878.453508] do_syscall_64+0x33/0x40 [ 1878.454045] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1878.454793] RIP: 0033:0x7fa7422adb19 [ 1878.455343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1878.457980] RSP: 002b:00007fa73f823188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1878.459106] RAX: ffffffffffffffda RBX: 00007fa7423c0f60 RCX: 00007fa7422adb19 [ 1878.460130] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000007 [ 1878.461342] RBP: 00007fa73f8231d0 R08: 0000000000000000 R09: 0000000000000000 [ 1878.462580] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1878.463712] R13: 00007ffe3fb62d9f R14: 00007fa73f823300 R15: 0000000000022000 13:31:03 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1f8}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) [ 1878.503790] FAULT_INJECTION: forcing a failure. [ 1878.503790] name failslab, interval 1, probability 0, space 0, times 0 [ 1878.506222] CPU: 0 PID: 11198 Comm: syz-executor.2 Not tainted 5.10.220 #1 [ 1878.507254] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1878.508474] Call Trace: [ 1878.508868] dump_stack+0x107/0x167 [ 1878.509413] should_fail.cold+0x5/0xa [ 1878.509983] ? jbd2__journal_start+0x190/0x7e0 [ 1878.510661] should_failslab+0x5/0x20 [ 1878.511250] kmem_cache_alloc+0x5b/0x310 [ 1878.511852] jbd2__journal_start+0x190/0x7e0 [ 1878.512511] __ext4_journal_start_sb+0x214/0x390 [ 1878.513208] ext4_dirty_inode+0xbc/0x130 [ 1878.513805] ? ext4_setattr+0x2160/0x2160 [ 1878.514408] __mark_inode_dirty+0x492/0xd40 [ 1878.515053] ? security_inode_need_killpriv+0x79/0xa0 [ 1878.515806] generic_update_time+0x21c/0x370 [ 1878.516450] file_update_time+0x43a/0x520 [ 1878.517056] ? evict_inodes+0x420/0x420 [ 1878.517639] ? down_write_killable+0x180/0x180 [ 1878.518310] file_modified+0x7d/0xa0 [ 1878.518856] ext4_buffered_write_iter+0xf9/0x4a0 [ 1878.519565] ext4_file_write_iter+0x4fb/0x18d0 [ 1878.520236] ? stack_trace_save+0x8c/0xc0 [ 1878.520843] ? stack_trace_consume_entry+0x160/0x160 [ 1878.521596] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1878.522264] ? kasan_save_stack+0x32/0x40 [ 1878.522883] ? kasan_save_stack+0x1b/0x40 [ 1878.523508] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1878.524246] ? iter_file_splice_write+0x16d/0xc30 [ 1878.524945] ? direct_splice_actor+0x10f/0x170 [ 1878.525608] ? splice_direct_to_actor+0x387/0x980 [ 1878.526310] ? do_splice_direct+0x1c4/0x290 [ 1878.526950] ? do_sendfile+0x553/0x11e0 [ 1878.527546] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1878.528219] ? do_syscall_64+0x33/0x40 [ 1878.528778] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1878.529563] do_iter_readv_writev+0x476/0x750 [ 1878.530221] ? new_sync_write+0x660/0x660 [ 1878.530825] ? avc_policy_seqno+0x9/0x70 [ 1878.531420] ? selinux_file_permission+0x92/0x520 [ 1878.532134] ? security_file_permission+0xb1/0xe0 [ 1878.532851] do_iter_write+0x191/0x700 [ 1878.533418] ? trace_hardirqs_on+0x5b/0x180 [ 1878.534064] vfs_iter_write+0x70/0xa0 [ 1878.534627] iter_file_splice_write+0x762/0xc30 [ 1878.535328] ? generic_splice_sendpage+0x140/0x140 [ 1878.536066] ? security_file_permission+0xb1/0xe0 [ 1878.536790] ? generic_splice_sendpage+0x140/0x140 [ 1878.537505] direct_splice_actor+0x10f/0x170 [ 1878.538149] splice_direct_to_actor+0x387/0x980 [ 1878.538829] ? pipe_to_sendpage+0x380/0x380 [ 1878.539461] ? do_splice_to+0x160/0x160 [ 1878.540048] ? security_file_permission+0xb1/0xe0 [ 1878.540753] do_splice_direct+0x1c4/0x290 [ 1878.541359] ? splice_direct_to_actor+0x980/0x980 [ 1878.542053] ? avc_policy_seqno+0x9/0x70 [ 1878.542657] ? security_file_permission+0xb1/0xe0 [ 1878.543373] do_sendfile+0x553/0x11e0 [ 1878.543942] ? do_pwritev+0x270/0x270 [ 1878.544500] ? wait_for_completion_io+0x270/0x270 [ 1878.545206] ? rcu_read_lock_any_held+0x75/0xa0 [ 1878.545882] ? vfs_write+0x354/0xb10 [ 1878.546436] __x64_sys_sendfile64+0x1d1/0x210 [ 1878.547108] ? __ia32_sys_sendfile+0x220/0x220 [ 1878.547792] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1878.548555] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1878.549303] do_syscall_64+0x33/0x40 [ 1878.549849] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1878.550594] RIP: 0033:0x7f153dedab19 [ 1878.551147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1878.553811] RSP: 002b:00007f153b450188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1878.554922] RAX: ffffffffffffffda RBX: 00007f153dfedf60 RCX: 00007f153dedab19 [ 1878.555963] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1878.557003] RBP: 00007f153b4501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1878.558036] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1878.559081] R13: 00007ffd2819606f R14: 00007f153b450300 R15: 0000000000022000 13:31:03 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x4b49, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:31:03 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:31:03 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 7) 13:31:03 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) 13:31:03 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5409, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:31:03 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 5) 13:31:03 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 7) 13:31:03 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1f8}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) [ 1878.868622] FAULT_INJECTION: forcing a failure. [ 1878.868622] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1878.870449] CPU: 0 PID: 11208 Comm: syz-executor.6 Not tainted 5.10.220 #1 [ 1878.870459] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1878.870464] Call Trace: [ 1878.870495] dump_stack+0x107/0x167 [ 1878.873521] should_fail.cold+0x5/0xa [ 1878.873542] __alloc_pages_nodemask+0x182/0x600 [ 1878.873562] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1878.873584] ? find_get_entry+0x2c8/0x740 [ 1878.873609] alloc_pages_current+0x187/0x280 13:31:04 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x540b, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) [ 1878.873627] __page_cache_alloc+0x2d2/0x360 [ 1878.873648] pagecache_get_page+0x2c7/0xc80 [ 1878.873665] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1878.873686] ? __blkdev_direct_IO_simple+0x930/0x930 [ 1878.873700] grab_cache_page_write_begin+0x64/0xa0 13:31:04 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 8) [ 1878.873717] block_write_begin+0x33/0x1d0 [ 1878.873736] generic_perform_write+0x20a/0x4f0 [ 1878.873766] ? __mnt_drop_write_file+0x9/0x70 [ 1878.873781] ? page_cache_prev_miss+0x310/0x310 13:31:04 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 8) [ 1878.873796] ? evict_inodes+0x420/0x420 [ 1878.873822] __generic_file_write_iter+0x39d/0x5d0 [ 1878.873843] blkdev_write_iter+0x298/0x550 [ 1878.873863] ? bd_unlink_disk_holder+0x3f0/0x3f0 [ 1878.873884] ? direct_splice_actor+0x10f/0x170 [ 1878.873897] ? splice_direct_to_actor+0x387/0x980 [ 1878.873910] ? do_splice_direct+0x1c4/0x290 [ 1878.873925] ? do_sendfile+0x553/0x11e0 [ 1878.873941] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1878.873954] ? do_syscall_64+0x33/0x40 [ 1878.873968] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1878.873990] do_iter_readv_writev+0x476/0x750 [ 1878.874010] ? new_sync_write+0x660/0x660 [ 1878.874025] ? avc_policy_seqno+0x9/0x70 [ 1878.874039] ? selinux_file_permission+0x92/0x520 [ 1878.874062] ? security_file_permission+0xb1/0xe0 [ 1878.874086] do_iter_write+0x191/0x700 [ 1878.874115] vfs_iter_write+0x70/0xa0 [ 1878.874133] iter_file_splice_write+0x762/0xc30 [ 1878.874162] ? generic_splice_sendpage+0x140/0x140 [ 1878.874196] ? security_file_permission+0xb1/0xe0 [ 1878.874215] ? generic_splice_sendpage+0x140/0x140 [ 1878.874232] direct_splice_actor+0x10f/0x170 [ 1878.874251] splice_direct_to_actor+0x387/0x980 [ 1878.874271] ? pipe_to_sendpage+0x380/0x380 [ 1878.874290] ? do_splice_to+0x160/0x160 [ 1878.874308] ? security_file_permission+0xb1/0xe0 [ 1878.874330] do_splice_direct+0x1c4/0x290 [ 1878.874347] ? splice_direct_to_actor+0x980/0x980 [ 1878.874360] ? avc_policy_seqno+0x9/0x70 [ 1878.874384] ? security_file_permission+0xb1/0xe0 [ 1878.874408] do_sendfile+0x553/0x11e0 [ 1878.874433] ? do_pwritev+0x270/0x270 [ 1878.874453] ? wait_for_completion_io+0x270/0x270 [ 1878.874472] ? rcu_read_lock_any_held+0x75/0xa0 [ 1878.874486] ? vfs_write+0x354/0xb10 [ 1878.874508] __x64_sys_sendfile64+0x1d1/0x210 [ 1878.874527] ? __ia32_sys_sendfile+0x220/0x220 [ 1878.874547] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1878.874563] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1878.874580] do_syscall_64+0x33/0x40 [ 1878.874595] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1878.874606] RIP: 0033:0x7f8caec11b19 [ 1878.874621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1878.874630] RSP: 002b:00007f8cac187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1878.874648] RAX: ffffffffffffffda RBX: 00007f8caed24f60 RCX: 00007f8caec11b19 [ 1878.874656] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1878.874665] RBP: 00007f8cac1871d0 R08: 0000000000000000 R09: 0000000000000000 [ 1878.874674] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1878.874683] R13: 00007fff84cedf2f R14: 00007f8cac187300 R15: 0000000000022000 [ 1879.031329] FAULT_INJECTION: forcing a failure. [ 1879.031329] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1879.031355] CPU: 0 PID: 11218 Comm: syz-executor.0 Not tainted 5.10.220 #1 [ 1879.031368] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1879.031380] Call Trace: [ 1879.031405] dump_stack+0x107/0x167 [ 1879.031430] should_fail.cold+0x5/0xa [ 1879.031461] __alloc_pages_nodemask+0x182/0x600 [ 1879.031491] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1879.031523] ? find_get_entry+0x2c8/0x740 [ 1879.031559] alloc_pages_current+0x187/0x280 [ 1879.031580] __page_cache_alloc+0x2d2/0x360 [ 1879.031600] pagecache_get_page+0x2c7/0xc80 [ 1879.031616] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1879.031636] ? __blkdev_direct_IO_simple+0x930/0x930 [ 1879.031649] grab_cache_page_write_begin+0x64/0xa0 [ 1879.031666] block_write_begin+0x33/0x1d0 [ 1879.031683] generic_perform_write+0x20a/0x4f0 [ 1879.031707] ? __mnt_drop_write_file+0x9/0x70 [ 1879.031720] ? page_cache_prev_miss+0x310/0x310 [ 1879.031735] ? evict_inodes+0x420/0x420 [ 1879.031759] __generic_file_write_iter+0x39d/0x5d0 [ 1879.031779] blkdev_write_iter+0x298/0x550 [ 1879.031798] ? bd_unlink_disk_holder+0x3f0/0x3f0 [ 1879.031817] ? direct_splice_actor+0x10f/0x170 [ 1879.031830] ? splice_direct_to_actor+0x387/0x980 [ 1879.031842] ? do_splice_direct+0x1c4/0x290 [ 1879.031857] ? do_sendfile+0x553/0x11e0 [ 1879.031871] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1879.031884] ? do_syscall_64+0x33/0x40 [ 1879.031898] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1879.031918] do_iter_readv_writev+0x476/0x750 [ 1879.031936] ? new_sync_write+0x660/0x660 [ 1879.031950] ? avc_policy_seqno+0x9/0x70 [ 1879.031965] ? selinux_file_permission+0x92/0x520 [ 1879.031986] ? security_file_permission+0xb1/0xe0 [ 1879.032008] do_iter_write+0x191/0x700 [ 1879.032026] ? trace_hardirqs_on+0x5b/0x180 [ 1879.032048] vfs_iter_write+0x70/0xa0 [ 1879.032065] iter_file_splice_write+0x762/0xc30 [ 1879.032092] ? generic_splice_sendpage+0x140/0x140 [ 1879.032124] ? security_file_permission+0xb1/0xe0 [ 1879.032142] ? generic_splice_sendpage+0x140/0x140 [ 1879.032158] direct_splice_actor+0x10f/0x170 [ 1879.032176] splice_direct_to_actor+0x387/0x980 [ 1879.032195] ? pipe_to_sendpage+0x380/0x380 [ 1879.032213] ? do_splice_to+0x160/0x160 [ 1879.032230] ? security_file_permission+0xb1/0xe0 [ 1879.032251] do_splice_direct+0x1c4/0x290 [ 1879.032266] ? splice_direct_to_actor+0x980/0x980 [ 1879.032279] ? avc_policy_seqno+0x9/0x70 [ 1879.032301] ? security_file_permission+0xb1/0xe0 [ 1879.032324] do_sendfile+0x553/0x11e0 [ 1879.032348] ? do_pwritev+0x270/0x270 [ 1879.032370] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1879.032384] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1879.032396] ? trace_hardirqs_on+0x5b/0x180 [ 1879.032416] __x64_sys_sendfile64+0x1d1/0x210 [ 1879.032433] ? __ia32_sys_sendfile+0x220/0x220 [ 1879.032450] ? __ia32_sys_sendfile+0x220/0x220 [ 1879.032470] do_syscall_64+0x33/0x40 [ 1879.032484] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1879.032495] RIP: 0033:0x7fcab4ef4b19 [ 1879.032509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1879.032517] RSP: 002b:00007fcab246a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1879.032534] RAX: ffffffffffffffda RBX: 00007fcab5007f60 RCX: 00007fcab4ef4b19 [ 1879.032543] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1879.032551] RBP: 00007fcab246a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1879.032559] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1879.032568] R13: 00007ffe07a1757f R14: 00007fcab246a300 R15: 0000000000022000 [ 1879.084226] FAULT_INJECTION: forcing a failure. [ 1879.084226] name failslab, interval 1, probability 0, space 0, times 0 [ 1879.084252] CPU: 0 PID: 11222 Comm: syz-executor.7 Not tainted 5.10.220 #1 [ 1879.084264] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1879.084271] Call Trace: [ 1879.084295] dump_stack+0x107/0x167 [ 1879.084320] should_fail.cold+0x5/0xa [ 1879.084347] ? alloc_pipe_info+0x1e5/0x590 [ 1879.084373] should_failslab+0x5/0x20 [ 1879.084394] __kmalloc+0x72/0x390 [ 1879.084420] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1879.084450] alloc_pipe_info+0x1e5/0x590 [ 1879.084479] splice_direct_to_actor+0x774/0x980 [ 1879.084506] ? _cond_resched+0x12/0x80 [ 1879.084522] ? inode_security+0x107/0x140 [ 1879.084534] ? pipe_to_sendpage+0x380/0x380 [ 1879.084548] ? avc_policy_seqno+0x9/0x70 [ 1879.084561] ? selinux_file_permission+0x92/0x520 [ 1879.084576] ? do_splice_to+0x160/0x160 [ 1879.084593] ? security_file_permission+0xb1/0xe0 [ 1879.084614] do_splice_direct+0x1c4/0x290 [ 1879.084629] ? splice_direct_to_actor+0x980/0x980 [ 1879.084641] ? avc_policy_seqno+0x9/0x70 [ 1879.084663] ? security_file_permission+0xb1/0xe0 [ 1879.084685] do_sendfile+0x553/0x11e0 [ 1879.084708] ? do_pwritev+0x270/0x270 [ 1879.084725] ? wait_for_completion_io+0x270/0x270 [ 1879.084743] ? rcu_read_lock_any_held+0x75/0xa0 [ 1879.084756] ? vfs_write+0x354/0xb10 [ 1879.084782] __x64_sys_sendfile64+0x1d1/0x210 [ 1879.084801] ? __ia32_sys_sendfile+0x220/0x220 [ 1879.084819] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1879.084834] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1879.084850] do_syscall_64+0x33/0x40 [ 1879.084864] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1879.084874] RIP: 0033:0x7fa7422adb19 [ 1879.084888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1879.084896] RSP: 002b:00007fa73f823188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1879.084912] RAX: ffffffffffffffda RBX: 00007fa7423c0f60 RCX: 00007fa7422adb19 [ 1879.084920] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000007 [ 1879.084928] RBP: 00007fa73f8231d0 R08: 0000000000000000 R09: 0000000000000000 [ 1879.084937] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1879.084945] R13: 00007ffe3fb62d9f R14: 00007fa73f823300 R15: 0000000000022000 [ 1879.193380] FAULT_INJECTION: forcing a failure. [ 1879.193380] name failslab, interval 1, probability 0, space 0, times 0 [ 1879.193399] CPU: 0 PID: 11231 Comm: syz-executor.6 Not tainted 5.10.220 #1 [ 1879.193408] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1879.193412] Call Trace: [ 1879.193438] dump_stack+0x107/0x167 [ 1879.193453] should_fail.cold+0x5/0xa [ 1879.193470] ? create_object.isra.0+0x3a/0xa20 [ 1879.193486] should_failslab+0x5/0x20 [ 1879.193501] kmem_cache_alloc+0x5b/0x310 [ 1879.193518] create_object.isra.0+0x3a/0xa20 [ 1879.193533] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1879.193550] kmem_cache_alloc+0x159/0x310 [ 1879.193568] alloc_buffer_head+0x20/0x110 [ 1879.193580] alloc_page_buffers+0x14d/0x700 [ 1879.193598] create_empty_buffers+0x2c/0x640 [ 1879.193617] create_page_buffers+0x1bb/0x230 [ 1879.193634] __block_write_begin_int+0x1d1/0x19c0 [ 1879.193651] ? __blkdev_direct_IO_simple+0x930/0x930 [ 1879.193666] ? add_to_page_cache_locked+0x40/0x40 [ 1879.193680] ? __page_cache_alloc+0x10d/0x360 [ 1879.193695] ? remove_inode_buffers+0x300/0x300 [ 1879.193709] ? pagecache_get_page+0x243/0xc80 [ 1879.193723] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1879.193739] ? wait_for_stable_page+0x92/0xe0 [ 1879.193756] ? __blkdev_direct_IO_simple+0x930/0x930 [ 1879.193768] block_write_begin+0x58/0x1d0 [ 1879.193783] generic_perform_write+0x20a/0x4f0 [ 1879.193805] ? __mnt_drop_write_file+0x9/0x70 [ 1879.193818] ? page_cache_prev_miss+0x310/0x310 [ 1879.193830] ? evict_inodes+0x420/0x420 [ 1879.193852] __generic_file_write_iter+0x39d/0x5d0 [ 1879.193871] blkdev_write_iter+0x298/0x550 [ 1879.193888] ? bd_unlink_disk_holder+0x3f0/0x3f0 [ 1879.193906] ? direct_splice_actor+0x10f/0x170 [ 1879.193917] ? splice_direct_to_actor+0x387/0x980 [ 1879.193928] ? do_splice_direct+0x1c4/0x290 [ 1879.193940] ? do_sendfile+0x553/0x11e0 [ 1879.193954] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1879.193965] ? do_syscall_64+0x33/0x40 [ 1879.193978] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1879.193996] do_iter_readv_writev+0x476/0x750 [ 1879.194013] ? new_sync_write+0x660/0x660 [ 1879.194025] ? avc_policy_seqno+0x9/0x70 [ 1879.194038] ? selinux_file_permission+0x92/0x520 [ 1879.194058] ? security_file_permission+0xb1/0xe0 [ 1879.194078] do_iter_write+0x191/0x700 [ 1879.194095] ? trace_hardirqs_on+0x5b/0x180 [ 1879.194114] vfs_iter_write+0x70/0xa0 [ 1879.194130] iter_file_splice_write+0x762/0xc30 [ 1879.194155] ? generic_splice_sendpage+0x140/0x140 [ 1879.194184] ? security_file_permission+0xb1/0xe0 [ 1879.194200] ? generic_splice_sendpage+0x140/0x140 [ 1879.194215] direct_splice_actor+0x10f/0x170 [ 1879.194231] splice_direct_to_actor+0x387/0x980 [ 1879.194248] ? pipe_to_sendpage+0x380/0x380 [ 1879.194265] ? do_splice_to+0x160/0x160 [ 1879.194280] ? security_file_permission+0xb1/0xe0 [ 1879.194299] do_splice_direct+0x1c4/0x290 [ 1879.194313] ? splice_direct_to_actor+0x980/0x980 [ 1879.194325] ? avc_policy_seqno+0x9/0x70 [ 1879.194345] ? security_file_permission+0xb1/0xe0 [ 1879.194366] do_sendfile+0x553/0x11e0 [ 1879.194388] ? do_pwritev+0x270/0x270 [ 1879.194404] ? wait_for_completion_io+0x270/0x270 [ 1879.194420] ? rcu_read_lock_any_held+0x75/0xa0 [ 1879.194432] ? vfs_write+0x354/0xb10 [ 1879.194452] __x64_sys_sendfile64+0x1d1/0x210 [ 1879.194467] ? __ia32_sys_sendfile+0x220/0x220 [ 1879.194485] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1879.194499] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1879.194513] do_syscall_64+0x33/0x40 [ 1879.194526] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1879.194536] RIP: 0033:0x7f8caec11b19 [ 1879.194549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1879.194556] RSP: 002b:00007f8cac187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1879.194572] RAX: ffffffffffffffda RBX: 00007f8caed24f60 RCX: 00007f8caec11b19 [ 1879.194579] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1879.194587] RBP: 00007f8cac1871d0 R08: 0000000000000000 R09: 0000000000000000 [ 1879.194595] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1879.194602] R13: 00007fff84cedf2f R14: 00007f8cac187300 R15: 0000000000022000 [ 1879.246083] FAULT_INJECTION: forcing a failure. [ 1879.246083] name failslab, interval 1, probability 0, space 0, times 0 [ 1879.246113] CPU: 0 PID: 11235 Comm: syz-executor.0 Not tainted 5.10.220 #1 [ 1879.246121] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1879.246125] Call Trace: [ 1879.246143] dump_stack+0x107/0x167 [ 1879.246158] should_fail.cold+0x5/0xa [ 1879.246173] ? create_object.isra.0+0x3a/0xa20 [ 1879.246188] should_failslab+0x5/0x20 [ 1879.246201] kmem_cache_alloc+0x5b/0x310 [ 1879.246219] create_object.isra.0+0x3a/0xa20 [ 1879.246233] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1879.246250] kmem_cache_alloc+0x159/0x310 [ 1879.246266] alloc_buffer_head+0x20/0x110 [ 1879.246279] alloc_page_buffers+0x14d/0x700 [ 1879.246296] create_empty_buffers+0x2c/0x640 [ 1879.246314] create_page_buffers+0x1bb/0x230 [ 1879.246331] __block_write_begin_int+0x1d1/0x19c0 [ 1879.246347] ? __blkdev_direct_IO_simple+0x930/0x930 [ 1879.246362] ? add_to_page_cache_locked+0x40/0x40 [ 1879.246376] ? __page_cache_alloc+0x10d/0x360 [ 1879.246390] ? remove_inode_buffers+0x300/0x300 [ 1879.246403] ? pagecache_get_page+0x243/0xc80 [ 1879.246417] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1879.246433] ? wait_for_stable_page+0x92/0xe0 [ 1879.246449] ? __blkdev_direct_IO_simple+0x930/0x930 [ 1879.246460] block_write_begin+0x58/0x1d0 [ 1879.246475] generic_perform_write+0x20a/0x4f0 [ 1879.246496] ? __mnt_drop_write_file+0x9/0x70 [ 1879.246507] ? page_cache_prev_miss+0x310/0x310 [ 1879.246520] ? evict_inodes+0x420/0x420 [ 1879.246541] __generic_file_write_iter+0x39d/0x5d0 [ 1879.246559] blkdev_write_iter+0x298/0x550 [ 1879.246575] ? bd_unlink_disk_holder+0x3f0/0x3f0 [ 1879.246592] ? direct_splice_actor+0x10f/0x170 [ 1879.246603] ? splice_direct_to_actor+0x387/0x980 [ 1879.246613] ? do_splice_direct+0x1c4/0x290 [ 1879.246625] ? do_sendfile+0x553/0x11e0 [ 1879.246638] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1879.246648] ? do_syscall_64+0x33/0x40 [ 1879.246660] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1879.246678] do_iter_readv_writev+0x476/0x750 [ 1879.246694] ? new_sync_write+0x660/0x660 [ 1879.246705] ? avc_policy_seqno+0x9/0x70 [ 1879.246718] ? selinux_file_permission+0x92/0x520 [ 1879.246736] ? security_file_permission+0xb1/0xe0 [ 1879.246756] do_iter_write+0x191/0x700 [ 1879.246772] ? trace_hardirqs_on+0x5b/0x180 [ 1879.246790] vfs_iter_write+0x70/0xa0 [ 1879.246805] iter_file_splice_write+0x762/0xc30 [ 1879.246830] ? generic_splice_sendpage+0x140/0x140 [ 1879.246858] ? security_file_permission+0xb1/0xe0 [ 1879.246873] ? generic_splice_sendpage+0x140/0x140 [ 1879.246887] direct_splice_actor+0x10f/0x170 [ 1879.246903] splice_direct_to_actor+0x387/0x980 [ 1879.246919] ? pipe_to_sendpage+0x380/0x380 [ 1879.246943] ? do_splice_to+0x160/0x160 [ 1879.246958] ? security_file_permission+0xb1/0xe0 [ 1879.246977] do_splice_direct+0x1c4/0x290 [ 1879.246990] ? splice_direct_to_actor+0x980/0x980 [ 1879.247001] ? avc_policy_seqno+0x9/0x70 [ 1879.247021] ? security_file_permission+0xb1/0xe0 [ 1879.247041] do_sendfile+0x553/0x11e0 [ 1879.247062] ? do_pwritev+0x270/0x270 [ 1879.247081] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1879.247094] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1879.247104] ? trace_hardirqs_on+0x5b/0x180 [ 1879.247122] __x64_sys_sendfile64+0x1d1/0x210 [ 1879.247137] ? __ia32_sys_sendfile+0x220/0x220 [ 1879.247153] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1879.247168] do_syscall_64+0x33/0x40 [ 1879.247180] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1879.247189] RIP: 0033:0x7fcab4ef4b19 [ 1879.247202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1879.247209] RSP: 002b:00007fcab246a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1879.247224] RAX: ffffffffffffffda RBX: 00007fcab5007f60 RCX: 00007fcab4ef4b19 [ 1879.247231] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1879.247239] RBP: 00007fcab246a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1879.247246] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1879.247253] R13: 00007ffe07a1757f R14: 00007fcab246a300 R15: 0000000000022000 13:31:18 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 8) 13:31:18 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x540c, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:31:18 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:31:18 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 9) 13:31:18 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 6) [ 1893.475291] FAULT_INJECTION: forcing a failure. [ 1893.475291] name failslab, interval 1, probability 0, space 0, times 0 [ 1893.476840] CPU: 1 PID: 11247 Comm: syz-executor.2 Not tainted 5.10.220 #1 [ 1893.477629] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1893.478592] Call Trace: [ 1893.478900] dump_stack+0x107/0x167 [ 1893.479340] should_fail.cold+0x5/0xa [ 1893.479780] ? create_object.isra.0+0x3a/0xa20 [ 1893.480314] should_failslab+0x5/0x20 [ 1893.480752] kmem_cache_alloc+0x5b/0x310 [ 1893.481218] ? igrab+0xc0/0xc0 [ 1893.481589] create_object.isra.0+0x3a/0xa20 [ 1893.482099] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1893.482681] __kmalloc+0x16e/0x390 [ 1893.483106] iter_file_splice_write+0x16d/0xc30 [ 1893.483644] ? atime_needs_update+0x600/0x600 [ 1893.484179] ? generic_splice_sendpage+0x140/0x140 [ 1893.484758] ? pipe_to_user+0x170/0x170 [ 1893.485253] ? security_file_permission+0xb1/0xe0 [ 1893.485821] ? generic_splice_sendpage+0x140/0x140 [ 1893.486410] direct_splice_actor+0x10f/0x170 [ 1893.486928] splice_direct_to_actor+0x387/0x980 [ 1893.487498] ? pipe_to_sendpage+0x380/0x380 [ 1893.488020] ? do_splice_to+0x160/0x160 [ 1893.488499] ? security_file_permission+0xb1/0xe0 [ 1893.489077] do_splice_direct+0x1c4/0x290 [ 1893.489568] ? splice_direct_to_actor+0x980/0x980 [ 1893.490149] ? avc_policy_seqno+0x9/0x70 [ 1893.490619] ? security_file_permission+0xb1/0xe0 [ 1893.491205] do_sendfile+0x553/0x11e0 [ 1893.491674] ? do_pwritev+0x270/0x270 [ 1893.492129] ? wait_for_completion_io+0x270/0x270 [ 1893.492704] ? rcu_read_lock_any_held+0x75/0xa0 [ 1893.493260] ? vfs_write+0x354/0xb10 [ 1893.493709] __x64_sys_sendfile64+0x1d1/0x210 [ 1893.494237] ? __ia32_sys_sendfile+0x220/0x220 [ 1893.494786] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1893.495421] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1893.496020] do_syscall_64+0x33/0x40 [ 1893.496466] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1893.497072] RIP: 0033:0x7f153dedab19 [ 1893.497516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1893.499619] RSP: 002b:00007f153b450188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1893.500528] RAX: ffffffffffffffda RBX: 00007f153dfedf60 RCX: 00007f153dedab19 [ 1893.501331] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1893.502178] RBP: 00007f153b4501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1893.503018] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1893.503834] R13: 00007ffd2819606f R14: 00007f153b450300 R15: 0000000000022000 13:31:18 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1f8}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:31:18 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) 13:31:18 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 9) [ 1893.606569] FAULT_INJECTION: forcing a failure. [ 1893.606569] name failslab, interval 1, probability 0, space 0, times 0 [ 1893.608095] CPU: 1 PID: 11258 Comm: syz-executor.7 Not tainted 5.10.220 #1 [ 1893.608861] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1893.609780] Call Trace: [ 1893.610085] dump_stack+0x107/0x167 [ 1893.610488] should_fail.cold+0x5/0xa [ 1893.610903] ? create_object.isra.0+0x3a/0xa20 [ 1893.611416] should_failslab+0x5/0x20 [ 1893.611835] kmem_cache_alloc+0x5b/0x310 [ 1893.612295] ? igrab+0xc0/0xc0 [ 1893.612654] create_object.isra.0+0x3a/0xa20 [ 1893.613143] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1893.613880] __kmalloc+0x16e/0x390 [ 1893.614275] iter_file_splice_write+0x16d/0xc30 [ 1893.614761] ? atime_needs_update+0x600/0x600 [ 1893.615259] ? generic_splice_sendpage+0x140/0x140 [ 1893.615786] ? pipe_to_user+0x170/0x170 [ 1893.616219] ? security_file_permission+0xb1/0xe0 [ 1893.616730] ? generic_splice_sendpage+0x140/0x140 [ 1893.617250] direct_splice_actor+0x10f/0x170 [ 1893.617717] splice_direct_to_actor+0x387/0x980 [ 1893.618214] ? pipe_to_sendpage+0x380/0x380 [ 1893.618671] ? do_splice_to+0x160/0x160 [ 1893.619103] ? security_file_permission+0xb1/0xe0 [ 1893.619610] do_splice_direct+0x1c4/0x290 [ 1893.620042] ? splice_direct_to_actor+0x980/0x980 [ 1893.620546] ? avc_policy_seqno+0x9/0x70 [ 1893.620979] ? security_file_permission+0xb1/0xe0 [ 1893.621495] do_sendfile+0x553/0x11e0 [ 1893.621907] ? do_pwritev+0x270/0x270 [ 1893.622316] ? wait_for_completion_io+0x270/0x270 [ 1893.622826] ? rcu_read_lock_any_held+0x75/0xa0 [ 1893.623329] ? vfs_write+0x354/0xb10 [ 1893.623726] __x64_sys_sendfile64+0x1d1/0x210 [ 1893.624200] ? __ia32_sys_sendfile+0x220/0x220 [ 1893.624694] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1893.625249] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1893.625782] do_syscall_64+0x33/0x40 [ 1893.626183] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1893.626717] RIP: 0033:0x7fa7422adb19 [ 1893.627124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1893.629018] RSP: 002b:00007fa73f823188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1893.629814] RAX: ffffffffffffffda RBX: 00007fa7423c0f60 RCX: 00007fa7422adb19 [ 1893.630566] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000007 [ 1893.631313] RBP: 00007fa73f8231d0 R08: 0000000000000000 R09: 0000000000000000 [ 1893.632054] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1893.632803] R13: 00007ffe3fb62d9f R14: 00007fa73f823300 R15: 0000000000022000 13:31:18 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x540d, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:31:18 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1f8}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) [ 1893.684152] FAULT_INJECTION: forcing a failure. [ 1893.684152] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1893.685417] CPU: 1 PID: 11259 Comm: syz-executor.0 Not tainted 5.10.220 #1 [ 1893.686146] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1893.686996] Call Trace: [ 1893.687295] dump_stack+0x107/0x167 [ 1893.687693] should_fail.cold+0x5/0xa [ 1893.688205] __alloc_pages_nodemask+0x182/0x600 [ 1893.688677] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1893.689282] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1893.689803] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1893.690347] ? trace_hardirqs_on+0x5b/0x180 [ 1893.690782] alloc_pages_current+0x187/0x280 [ 1893.691252] __page_cache_alloc+0x2d2/0x360 [ 1893.691684] ? pagecache_get_page+0x3fd/0xc80 [ 1893.692138] pagecache_get_page+0x2c7/0xc80 [ 1893.692570] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1893.693078] ? __blkdev_direct_IO_simple+0x930/0x930 [ 1893.693578] grab_cache_page_write_begin+0x64/0xa0 [ 1893.694068] block_write_begin+0x33/0x1d0 [ 1893.694492] generic_perform_write+0x20a/0x4f0 [ 1893.694953] ? __mnt_drop_write_file+0x9/0x70 [ 1893.695409] ? page_cache_prev_miss+0x310/0x310 [ 1893.695873] ? evict_inodes+0x420/0x420 [ 1893.696275] __generic_file_write_iter+0x39d/0x5d0 [ 1893.696766] blkdev_write_iter+0x298/0x550 [ 1893.697193] ? bd_unlink_disk_holder+0x3f0/0x3f0 [ 1893.697670] ? direct_splice_actor+0x10f/0x170 [ 1893.698122] ? splice_direct_to_actor+0x387/0x980 [ 1893.698596] ? do_splice_direct+0x1c4/0x290 [ 1893.699029] ? do_sendfile+0x553/0x11e0 [ 1893.699434] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1893.699903] do_iter_readv_writev+0x476/0x750 [ 1893.700351] ? new_sync_write+0x660/0x660 [ 1893.700763] ? avc_policy_seqno+0x9/0x70 [ 1893.701357] ? selinux_file_permission+0x92/0x520 [ 1893.701920] ? security_file_permission+0xb1/0xe0 [ 1893.702416] do_iter_write+0x191/0x700 [ 1893.702805] ? trace_hardirqs_on+0x5b/0x180 [ 1893.703260] vfs_iter_write+0x70/0xa0 [ 1893.703639] iter_file_splice_write+0x762/0xc30 [ 1893.704124] ? generic_splice_sendpage+0x140/0x140 [ 1893.704625] ? security_file_permission+0xb1/0xe0 [ 1893.705116] ? generic_splice_sendpage+0x140/0x140 [ 1893.705603] direct_splice_actor+0x10f/0x170 [ 1893.706038] splice_direct_to_actor+0x387/0x980 [ 1893.706503] ? pipe_to_sendpage+0x380/0x380 [ 1893.706930] ? do_splice_to+0x160/0x160 [ 1893.707347] ? security_file_permission+0xb1/0xe0 [ 1893.707826] do_splice_direct+0x1c4/0x290 [ 1893.708238] ? splice_direct_to_actor+0x980/0x980 [ 1893.708710] ? avc_policy_seqno+0x9/0x70 [ 1893.709122] ? security_file_permission+0xb1/0xe0 [ 1893.709731] do_sendfile+0x553/0x11e0 [ 1893.710132] ? do_pwritev+0x270/0x270 [ 1893.710518] ? wait_for_completion_io+0x270/0x270 [ 1893.710998] ? rcu_read_lock_any_held+0x75/0xa0 [ 1893.711465] ? vfs_write+0x354/0xb10 [ 1893.711843] __x64_sys_sendfile64+0x1d1/0x210 [ 1893.712295] ? __ia32_sys_sendfile+0x220/0x220 [ 1893.712749] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1893.713268] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1893.713776] do_syscall_64+0x33/0x40 [ 1893.714140] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1893.714656] RIP: 0033:0x7fcab4ef4b19 [ 1893.715034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1893.716842] RSP: 002b:00007fcab246a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1893.717604] RAX: ffffffffffffffda RBX: 00007fcab5007f60 RCX: 00007fcab4ef4b19 [ 1893.718313] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000008 [ 1893.719014] RBP: 00007fcab246a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1893.719714] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1893.720410] R13: 00007ffe07a1757f R14: 00007fcab246a300 R15: 0000000000022000 [ 1893.761701] FAULT_INJECTION: forcing a failure. [ 1893.761701] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1893.763106] CPU: 1 PID: 11270 Comm: syz-executor.6 Not tainted 5.10.220 #1 [ 1893.763791] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1893.764606] Call Trace: [ 1893.764880] dump_stack+0x107/0x167 [ 1893.765234] should_fail.cold+0x5/0xa [ 1893.765600] __alloc_pages_nodemask+0x182/0x600 [ 1893.766049] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1893.766625] ? find_get_entry+0x2c8/0x740 [ 1893.767036] alloc_pages_current+0x187/0x280 [ 1893.767468] __page_cache_alloc+0x2d2/0x360 [ 1893.767888] pagecache_get_page+0x2c7/0xc80 [ 1893.768309] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1893.768798] ? __blkdev_direct_IO_simple+0x930/0x930 [ 1893.769287] grab_cache_page_write_begin+0x64/0xa0 [ 1893.769756] block_write_begin+0x33/0x1d0 [ 1893.770164] generic_perform_write+0x20a/0x4f0 [ 1893.770746] ? __mnt_drop_write_file+0x9/0x70 [ 1893.771217] ? page_cache_prev_miss+0x310/0x310 [ 1893.771654] ? evict_inodes+0x420/0x420 [ 1893.772066] __generic_file_write_iter+0x39d/0x5d0 [ 1893.772629] blkdev_write_iter+0x298/0x550 [ 1893.773111] ? bd_unlink_disk_holder+0x3f0/0x3f0 [ 1893.773585] ? direct_splice_actor+0x10f/0x170 [ 1893.774046] ? splice_direct_to_actor+0x387/0x980 [ 1893.774538] ? do_splice_direct+0x1c4/0x290 [ 1893.774980] ? do_sendfile+0x553/0x11e0 [ 1893.775407] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1893.775882] ? do_syscall_64+0x33/0x40 [ 1893.776279] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1893.776814] do_iter_readv_writev+0x476/0x750 [ 1893.777263] ? new_sync_write+0x660/0x660 [ 1893.777675] ? avc_policy_seqno+0x9/0x70 [ 1893.778081] ? selinux_file_permission+0x92/0x520 [ 1893.778578] ? security_file_permission+0xb1/0xe0 [ 1893.779080] do_iter_write+0x191/0x700 [ 1893.779475] ? trace_hardirqs_on+0x5b/0x180 [ 1893.779909] vfs_iter_write+0x70/0xa0 [ 1893.780302] iter_file_splice_write+0x762/0xc30 [ 1893.780780] ? generic_splice_sendpage+0x140/0x140 [ 1893.781282] ? security_file_permission+0xb1/0xe0 [ 1893.781755] ? generic_splice_sendpage+0x140/0x140 [ 1893.782248] direct_splice_actor+0x10f/0x170 [ 1893.782692] splice_direct_to_actor+0x387/0x980 [ 1893.783173] ? pipe_to_sendpage+0x380/0x380 [ 1893.783605] ? do_splice_to+0x160/0x160 [ 1893.784002] ? security_file_permission+0xb1/0xe0 [ 1893.784493] do_splice_direct+0x1c4/0x290 [ 1893.784914] ? splice_direct_to_actor+0x980/0x980 [ 1893.785392] ? avc_policy_seqno+0x9/0x70 [ 1893.785801] ? security_file_permission+0xb1/0xe0 [ 1893.786292] do_sendfile+0x553/0x11e0 [ 1893.786675] ? do_pwritev+0x270/0x270 [ 1893.787053] ? wait_for_completion_io+0x270/0x270 [ 1893.787539] ? rcu_read_lock_any_held+0x75/0xa0 [ 1893.788001] ? vfs_write+0x354/0xb10 [ 1893.788376] __x64_sys_sendfile64+0x1d1/0x210 [ 1893.788828] ? __ia32_sys_sendfile+0x220/0x220 [ 1893.789289] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1893.789810] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1893.790328] do_syscall_64+0x33/0x40 [ 1893.790704] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1893.791216] RIP: 0033:0x7f8caec11b19 [ 1893.791590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1893.793421] RSP: 002b:00007f8cac187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1893.794181] RAX: ffffffffffffffda RBX: 00007f8caed24f60 RCX: 00007f8caec11b19 [ 1893.794885] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1893.795588] RBP: 00007f8cac1871d0 R08: 0000000000000000 R09: 0000000000000000 [ 1893.796288] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1893.796981] R13: 00007fff84cedf2f R14: 00007f8cac187300 R15: 0000000000022000 13:31:18 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 9) [ 1893.858212] FAULT_INJECTION: forcing a failure. [ 1893.858212] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1893.859390] CPU: 1 PID: 11280 Comm: syz-executor.2 Not tainted 5.10.220 #1 [ 1893.860055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1893.860854] Call Trace: [ 1893.861112] dump_stack+0x107/0x167 [ 1893.861461] should_fail.cold+0x5/0xa [ 1893.861818] __alloc_pages_nodemask+0x182/0x600 [ 1893.862254] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1893.862832] ? find_get_entry+0x2c8/0x740 [ 1893.863354] alloc_pages_current+0x187/0x280 [ 1893.863760] __page_cache_alloc+0x2d2/0x360 [ 1893.864166] pagecache_get_page+0x2c7/0xc80 [ 1893.864566] ? lock_acquire+0x197/0x470 [ 1893.864930] grab_cache_page_write_begin+0x64/0xa0 [ 1893.865368] ext4_da_write_begin+0x2f3/0xd40 [ 1893.865764] ? do_raw_spin_lock+0x121/0x260 [ 1893.866154] ? ext4_write_begin+0x10f0/0x10f0 [ 1893.866552] ? copyout_mc+0x140/0x140 [ 1893.866895] ? __mark_inode_dirty+0x999/0xd40 [ 1893.867302] generic_perform_write+0x20a/0x4f0 [ 1893.867721] ? page_cache_prev_miss+0x310/0x310 [ 1893.868140] ? down_write_killable+0x180/0x180 [ 1893.868557] ext4_buffered_write_iter+0x232/0x4a0 [ 1893.868988] ext4_file_write_iter+0x4fb/0x18d0 [ 1893.869402] ? stack_trace_save+0x8c/0xc0 [ 1893.869771] ? stack_trace_consume_entry+0x160/0x160 [ 1893.870234] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1893.870639] ? kasan_save_stack+0x32/0x40 [ 1893.871009] ? kasan_save_stack+0x1b/0x40 [ 1893.871384] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1893.871832] ? iter_file_splice_write+0x16d/0xc30 [ 1893.872264] ? direct_splice_actor+0x10f/0x170 [ 1893.872671] ? splice_direct_to_actor+0x387/0x980 [ 1893.873103] ? do_splice_direct+0x1c4/0x290 [ 1893.873491] ? do_sendfile+0x553/0x11e0 [ 1893.873846] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1893.874260] ? do_syscall_64+0x33/0x40 [ 1893.874609] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1893.875095] do_iter_readv_writev+0x476/0x750 [ 1893.875495] ? new_sync_write+0x660/0x660 [ 1893.875861] ? avc_policy_seqno+0x9/0x70 [ 1893.876226] ? selinux_file_permission+0x92/0x520 [ 1893.876659] ? security_file_permission+0xb1/0xe0 [ 1893.877090] do_iter_write+0x191/0x700 [ 1893.877437] ? trace_hardirqs_on+0x5b/0x180 [ 1893.877828] vfs_iter_write+0x70/0xa0 [ 1893.878167] iter_file_splice_write+0x762/0xc30 [ 1893.878586] ? generic_splice_sendpage+0x140/0x140 [ 1893.879033] ? security_file_permission+0xb1/0xe0 [ 1893.879469] ? generic_splice_sendpage+0x140/0x140 [ 1893.879904] direct_splice_actor+0x10f/0x170 [ 1893.880299] splice_direct_to_actor+0x387/0x980 [ 1893.880716] ? pipe_to_sendpage+0x380/0x380 [ 1893.881102] ? do_splice_to+0x160/0x160 [ 1893.881465] ? security_file_permission+0xb1/0xe0 [ 1893.881910] do_splice_direct+0x1c4/0x290 [ 1893.882287] ? splice_direct_to_actor+0x980/0x980 [ 1893.882712] ? avc_policy_seqno+0x9/0x70 [ 1893.883097] ? security_file_permission+0xb1/0xe0 [ 1893.883549] do_sendfile+0x553/0x11e0 [ 1893.883910] ? do_pwritev+0x270/0x270 [ 1893.884260] ? wait_for_completion_io+0x270/0x270 [ 1893.884705] ? rcu_read_lock_any_held+0x75/0xa0 [ 1893.885127] ? vfs_write+0x354/0xb10 [ 1893.885473] __x64_sys_sendfile64+0x1d1/0x210 [ 1893.885883] ? __ia32_sys_sendfile+0x220/0x220 [ 1893.886307] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1893.886785] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1893.887248] do_syscall_64+0x33/0x40 [ 1893.887591] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1893.888040] RIP: 0033:0x7f153dedab19 [ 1893.888381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1893.890016] RSP: 002b:00007f153b450188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1893.890692] RAX: ffffffffffffffda RBX: 00007f153dfedf60 RCX: 00007f153dedab19 [ 1893.891344] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1893.891978] RBP: 00007f153b4501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1893.892602] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1893.893242] R13: 00007ffd2819606f R14: 00007f153b450300 R15: 0000000000022000 13:31:32 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 10) 13:31:32 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 13:31:32 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000003) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:31:32 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 7) 13:31:32 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5412, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:31:32 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1f8}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:31:32 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 10) 13:31:32 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 10) [ 1907.839732] FAULT_INJECTION: forcing a failure. [ 1907.839732] name failslab, interval 1, probability 0, space 0, times 0 [ 1907.840938] CPU: 1 PID: 11306 Comm: syz-executor.2 Not tainted 5.10.220 #1 [ 1907.841514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1907.842232] Call Trace: [ 1907.842472] dump_stack+0x107/0x167 [ 1907.842781] should_fail.cold+0x5/0xa [ 1907.843115] ? xas_alloc+0x336/0x440 [ 1907.843439] should_failslab+0x5/0x20 [ 1907.843762] kmem_cache_alloc+0x5b/0x310 [ 1907.844115] ? try_charge+0x62f/0x11b0 [ 1907.844442] xas_alloc+0x336/0x440 [ 1907.844743] xas_create+0x60f/0x10d0 [ 1907.845073] xas_store+0x8c/0x1c40 [ 1907.845383] ? xas_find_conflict+0x4b5/0xa70 [ 1907.845756] __add_to_page_cache_locked+0x708/0xc80 [ 1907.846262] ? file_write_and_wait_range+0x130/0x130 [ 1907.846798] ? memcg_drain_all_list_lrus+0x720/0x720 [ 1907.847233] ? find_get_entry+0x2c8/0x740 [ 1907.847583] ? balance_dirty_pages_ratelimited+0x43e/0x1ff0 [ 1907.848058] add_to_page_cache_lru+0xe6/0x2e0 [ 1907.848435] ? add_to_page_cache_locked+0x40/0x40 [ 1907.848838] ? __page_cache_alloc+0x10d/0x360 [ 1907.849306] ? mark_buffer_dirty+0x346/0x3d0 [ 1907.849820] pagecache_get_page+0x38b/0xc80 [ 1907.850274] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1907.850696] ? __blkdev_direct_IO_simple+0x930/0x930 [ 1907.851117] grab_cache_page_write_begin+0x64/0xa0 [ 1907.851539] block_write_begin+0x33/0x1d0 [ 1907.851891] generic_perform_write+0x20a/0x4f0 [ 1907.852274] ? __mnt_drop_write_file+0x9/0x70 [ 1907.852643] ? page_cache_prev_miss+0x310/0x310 [ 1907.853028] ? evict_inodes+0x420/0x420 [ 1907.853365] __generic_file_write_iter+0x39d/0x5d0 [ 1907.853774] blkdev_write_iter+0x298/0x550 [ 1907.854139] ? bd_unlink_disk_holder+0x3f0/0x3f0 [ 1907.854537] ? direct_splice_actor+0x10f/0x170 [ 1907.854921] ? splice_direct_to_actor+0x387/0x980 [ 1907.855325] ? do_splice_direct+0x1c4/0x290 [ 1907.855685] ? do_sendfile+0x553/0x11e0 [ 1907.856019] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1907.856416] ? do_syscall_64+0x33/0x40 [ 1907.856740] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1907.857195] do_iter_readv_writev+0x476/0x750 [ 1907.857579] ? new_sync_write+0x660/0x660 [ 1907.857930] ? avc_policy_seqno+0x9/0x70 [ 1907.858273] ? selinux_file_permission+0x92/0x520 [ 1907.858681] ? security_file_permission+0xb1/0xe0 [ 1907.859087] do_iter_write+0x191/0x700 [ 1907.859414] ? trace_hardirqs_on+0x5b/0x180 [ 1907.859777] vfs_iter_write+0x70/0xa0 [ 1907.860102] iter_file_splice_write+0x762/0xc30 [ 1907.860495] ? generic_splice_sendpage+0x140/0x140 [ 1907.860917] ? security_file_permission+0xb1/0xe0 [ 1907.861316] ? generic_splice_sendpage+0x140/0x140 [ 1907.861724] direct_splice_actor+0x10f/0x170 [ 1907.862090] splice_direct_to_actor+0x387/0x980 [ 1907.862476] ? pipe_to_sendpage+0x380/0x380 [ 1907.862838] ? do_splice_to+0x160/0x160 [ 1907.863170] ? security_file_permission+0xb1/0xe0 [ 1907.863579] do_splice_direct+0x1c4/0x290 [ 1907.863924] ? splice_direct_to_actor+0x980/0x980 [ 1907.864327] ? avc_policy_seqno+0x9/0x70 [ 1907.864668] ? security_file_permission+0xb1/0xe0 [ 1907.865085] do_sendfile+0x553/0x11e0 [ 1907.865409] ? do_pwritev+0x270/0x270 [ 1907.865813] ? wait_for_completion_io+0x270/0x270 [ 1907.866299] ? rcu_read_lock_any_held+0x75/0xa0 [ 1907.866685] ? vfs_write+0x354/0xb10 [ 1907.866997] __x64_sys_sendfile64+0x1d1/0x210 [ 1907.867379] ? __ia32_sys_sendfile+0x220/0x220 [ 1907.867765] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1907.868198] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1907.868632] do_syscall_64+0x33/0x40 [ 1907.868940] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1907.869363] RIP: 0033:0x7f153dedab19 [ 1907.869673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1907.871189] RSP: 002b:00007f153b450188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1907.871824] RAX: ffffffffffffffda RBX: 00007f153dfedf60 RCX: 00007f153dedab19 [ 1907.872406] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1907.872993] RBP: 00007f153b4501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1907.873573] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000002 [ 1907.874165] R13: 00007ffd2819606f R14: 00007f153b450300 R15: 0000000000022000 13:31:32 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5413, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) [ 1907.895851] FAULT_INJECTION: forcing a failure. [ 1907.895851] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1907.896939] CPU: 1 PID: 11307 Comm: syz-executor.7 Not tainted 5.10.220 #1 [ 1907.897542] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1907.898251] Call Trace: [ 1907.898496] dump_stack+0x107/0x167 [ 1907.898808] should_fail.cold+0x5/0xa [ 1907.899139] __alloc_pages_nodemask+0x182/0x600 [ 1907.899530] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1907.899959] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1907.900412] ? trace_hardirqs_on+0x5b/0x180 [ 1907.900772] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1907.901278] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1907.901831] ? alloc_pages_current+0x9a/0x280 [ 1907.902297] alloc_pages_current+0x187/0x280 [ 1907.902664] __page_cache_alloc+0x2d2/0x360 [ 1907.903032] pagecache_get_page+0x2c7/0xc80 [ 1907.903404] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1907.903832] ? __blkdev_direct_IO_simple+0x930/0x930 [ 1907.904254] grab_cache_page_write_begin+0x64/0xa0 [ 1907.904657] block_write_begin+0x33/0x1d0 [ 1907.904999] generic_perform_write+0x20a/0x4f0 [ 1907.905380] ? __mnt_drop_write_file+0x9/0x70 [ 1907.905747] ? page_cache_prev_miss+0x310/0x310 [ 1907.906136] ? evict_inodes+0x420/0x420 [ 1907.906468] __generic_file_write_iter+0x39d/0x5d0 [ 1907.906874] blkdev_write_iter+0x298/0x550 [ 1907.907231] ? bd_unlink_disk_holder+0x3f0/0x3f0 [ 1907.907620] ? direct_splice_actor+0x10f/0x170 [ 1907.907995] ? splice_direct_to_actor+0x387/0x980 [ 1907.908390] ? do_splice_direct+0x1c4/0x290 [ 1907.908742] ? do_sendfile+0x553/0x11e0 [ 1907.909069] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1907.909447] ? do_syscall_64+0x33/0x40 [ 1907.909765] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1907.910201] do_iter_readv_writev+0x476/0x750 [ 1907.910575] ? new_sync_write+0x660/0x660 [ 1907.910917] ? avc_policy_seqno+0x9/0x70 [ 1907.911256] ? selinux_file_permission+0x92/0x520 [ 1907.911653] ? security_file_permission+0xb1/0xe0 [ 1907.912052] do_iter_write+0x191/0x700 [ 1907.912382] vfs_iter_write+0x70/0xa0 [ 1907.912696] iter_file_splice_write+0x762/0xc30 [ 1907.913085] ? generic_splice_sendpage+0x140/0x140 [ 1907.913499] ? security_file_permission+0xb1/0xe0 [ 1907.913899] ? generic_splice_sendpage+0x140/0x140 [ 1907.914297] direct_splice_actor+0x10f/0x170 [ 1907.914660] splice_direct_to_actor+0x387/0x980 [ 1907.915051] ? pipe_to_sendpage+0x380/0x380 [ 1907.915414] ? do_splice_to+0x160/0x160 [ 1907.915740] ? security_file_permission+0xb1/0xe0 [ 1907.916136] do_splice_direct+0x1c4/0x290 [ 1907.916475] ? splice_direct_to_actor+0x980/0x980 [ 1907.916871] ? avc_policy_seqno+0x9/0x70 [ 1907.917198] ? security_file_permission+0xb1/0xe0 [ 1907.917583] do_sendfile+0x553/0x11e0 [ 1907.917907] ? do_pwritev+0x270/0x270 [ 1907.918227] ? wait_for_completion_io+0x270/0x270 [ 1907.918623] ? rcu_read_lock_any_held+0x75/0xa0 [ 1907.919005] ? vfs_write+0x354/0xb10 [ 1907.919324] __x64_sys_sendfile64+0x1d1/0x210 [ 1907.919699] ? __ia32_sys_sendfile+0x220/0x220 [ 1907.920071] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1907.920493] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1907.920922] do_syscall_64+0x33/0x40 [ 1907.921223] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1907.921640] RIP: 0033:0x7fa7422adb19 [ 1907.921946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1907.923449] RSP: 002b:00007fa73f823188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1907.924070] RAX: ffffffffffffffda RBX: 00007fa7423c0f60 RCX: 00007fa7422adb19 [ 1907.924650] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000007 [ 1907.925248] RBP: 00007fa73f8231d0 R08: 0000000000000000 R09: 0000000000000000 [ 1907.925834] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1907.926426] R13: 00007ffe3fb62d9f R14: 00007fa73f823300 R15: 0000000000022000 [ 1907.928770] FAULT_INJECTION: forcing a failure. [ 1907.928770] name failslab, interval 1, probability 0, space 0, times 0 [ 1907.930481] CPU: 0 PID: 11300 Comm: syz-executor.6 Not tainted 5.10.220 #1 [ 1907.931538] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1907.932789] Call Trace: [ 1907.933220] dump_stack+0x107/0x167 [ 1907.933767] should_fail.cold+0x5/0xa [ 1907.934359] ? xas_alloc+0x336/0x440 [ 1907.934924] should_failslab+0x5/0x20 [ 1907.935501] kmem_cache_alloc+0x5b/0x310 [ 1907.936111] ? try_charge+0x62f/0x11b0 [ 1907.936692] xas_alloc+0x336/0x440 [ 1907.937225] xas_create+0x60f/0x10d0 [ 1907.937793] xas_store+0x8c/0x1c40 [ 1907.938325] ? xas_find_conflict+0x4b5/0xa70 [ 1907.938989] __add_to_page_cache_locked+0x708/0xc80 [ 1907.939742] ? file_write_and_wait_range+0x130/0x130 [ 1907.940500] ? memcg_drain_all_list_lrus+0x720/0x720 [ 1907.941252] ? find_get_entry+0x2c8/0x740 [ 1907.941866] ? balance_dirty_pages_ratelimited+0x43e/0x1ff0 [ 1907.942685] add_to_page_cache_lru+0xe6/0x2e0 [ 1907.943370] ? add_to_page_cache_locked+0x40/0x40 [ 1907.944088] ? __page_cache_alloc+0x10d/0x360 [ 1907.944755] ? mark_buffer_dirty+0x346/0x3d0 [ 1907.945410] pagecache_get_page+0x38b/0xc80 [ 1907.946065] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1907.946826] ? __blkdev_direct_IO_simple+0x930/0x930 [ 1907.947566] grab_cache_page_write_begin+0x64/0xa0 [ 1907.948311] block_write_begin+0x33/0x1d0 [ 1907.948927] generic_perform_write+0x20a/0x4f0 [ 1907.949612] ? __mnt_drop_write_file+0x9/0x70 [ 1907.950283] ? page_cache_prev_miss+0x310/0x310 [ 1907.950987] ? evict_inodes+0x420/0x420 [ 1907.951598] __generic_file_write_iter+0x39d/0x5d0 [ 1907.952315] blkdev_write_iter+0x298/0x550 13:31:33 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1f8}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) [ 1907.952953] ? bd_unlink_disk_holder+0x3f0/0x3f0 [ 1907.953812] ? direct_splice_actor+0x10f/0x170 [ 1907.954497] ? splice_direct_to_actor+0x387/0x980 [ 1907.955235] ? do_splice_direct+0x1c4/0x290 [ 1907.955870] ? do_sendfile+0x553/0x11e0 [ 1907.956461] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1907.957159] ? do_syscall_64+0x33/0x40 [ 1907.957735] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1907.958528] do_iter_readv_writev+0x476/0x750 [ 1907.959214] ? new_sync_write+0x660/0x660 [ 1907.959830] ? avc_policy_seqno+0x9/0x70 [ 1907.960430] ? selinux_file_permission+0x92/0x520 [ 1907.961155] ? security_file_permission+0xb1/0xe0 [ 1907.961884] do_iter_write+0x191/0x700 [ 1907.962470] ? trace_hardirqs_on+0x5b/0x180 [ 1907.963115] vfs_iter_write+0x70/0xa0 [ 1907.963692] iter_file_splice_write+0x762/0xc30 [ 1907.964404] ? generic_splice_sendpage+0x140/0x140 [ 1907.965157] ? security_file_permission+0xb1/0xe0 [ 1907.965873] ? generic_splice_sendpage+0x140/0x140 [ 1907.966605] direct_splice_actor+0x10f/0x170 [ 1907.967265] splice_direct_to_actor+0x387/0x980 [ 1907.967963] ? pipe_to_sendpage+0x380/0x380 [ 1907.968608] ? do_splice_to+0x160/0x160 [ 1907.969198] ? security_file_permission+0xb1/0xe0 [ 1907.969902] do_splice_direct+0x1c4/0x290 [ 1907.970521] ? splice_direct_to_actor+0x980/0x980 [ 1907.971223] ? avc_policy_seqno+0x9/0x70 [ 1907.971841] ? security_file_permission+0xb1/0xe0 [ 1907.972560] do_sendfile+0x553/0x11e0 [ 1907.973137] ? do_pwritev+0x270/0x270 [ 1907.973694] ? wait_for_completion_io+0x270/0x270 [ 1907.974413] ? rcu_read_lock_any_held+0x75/0xa0 [ 1907.975096] ? vfs_write+0x354/0xb10 [ 1907.975666] __x64_sys_sendfile64+0x1d1/0x210 [ 1907.976339] ? __ia32_sys_sendfile+0x220/0x220 [ 1907.977021] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1907.977804] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1907.978578] do_syscall_64+0x33/0x40 [ 1907.979121] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1907.979891] RIP: 0033:0x7f8caec11b19 [ 1907.980436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1907.983169] RSP: 002b:00007f8cac187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1907.984288] RAX: ffffffffffffffda RBX: 00007f8caed24f60 RCX: 00007f8caec11b19 [ 1907.985346] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1907.986406] RBP: 00007f8cac1871d0 R08: 0000000000000000 R09: 0000000000000000 [ 1907.987474] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000002 [ 1907.988522] R13: 00007fff84cedf2f R14: 00007f8cac187300 R15: 0000000000022000 [ 1907.994860] FAULT_INJECTION: forcing a failure. [ 1907.994860] name failslab, interval 1, probability 0, space 0, times 0 [ 1907.996610] CPU: 0 PID: 11292 Comm: syz-executor.0 Not tainted 5.10.220 #1 [ 1907.997650] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1907.998889] Call Trace: [ 1907.999297] dump_stack+0x107/0x167 [ 1907.999843] should_fail.cold+0x5/0xa [ 1908.000416] ? create_object.isra.0+0x3a/0xa20 [ 1908.001103] should_failslab+0x5/0x20 [ 1908.001678] kmem_cache_alloc+0x5b/0x310 [ 1908.002294] create_object.isra.0+0x3a/0xa20 [ 1908.002956] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1908.003727] kmem_cache_alloc+0x159/0x310 [ 1908.004343] alloc_buffer_head+0x20/0x110 [ 1908.004964] alloc_page_buffers+0x14d/0x700 [ 1908.005615] create_empty_buffers+0x2c/0x640 [ 1908.006280] create_page_buffers+0x1bb/0x230 [ 1908.006937] __block_write_begin_int+0x1d1/0x19c0 [ 1908.007670] ? __lock_page_or_retry+0x4e0/0x4e0 [ 1908.008358] ? __blkdev_direct_IO_simple+0x930/0x930 [ 1908.009135] ? remove_inode_buffers+0x300/0x300 [ 1908.009824] ? pagecache_get_page+0x243/0xc80 [ 1908.010503] ? wait_for_stable_page+0x92/0xe0 [ 1908.011185] ? __blkdev_direct_IO_simple+0x930/0x930 [ 1908.011955] block_write_begin+0x58/0x1d0 [ 1908.012583] generic_perform_write+0x20a/0x4f0 [ 1908.013280] ? __mnt_drop_write_file+0x9/0x70 [ 1908.013953] ? page_cache_prev_miss+0x310/0x310 [ 1908.014649] ? evict_inodes+0x420/0x420 [ 1908.015263] __generic_file_write_iter+0x39d/0x5d0 [ 1908.015990] blkdev_write_iter+0x298/0x550 [ 1908.016626] ? bd_unlink_disk_holder+0x3f0/0x3f0 [ 1908.017330] ? direct_splice_actor+0x10f/0x170 [ 1908.018012] ? splice_direct_to_actor+0x387/0x980 [ 1908.018712] ? do_splice_direct+0x1c4/0x290 [ 1908.019366] ? do_sendfile+0x553/0x11e0 [ 1908.019956] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1908.020651] ? do_syscall_64+0x33/0x40 [ 1908.021230] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1908.022043] do_iter_readv_writev+0x476/0x750 [ 1908.022707] ? new_sync_write+0x660/0x660 [ 1908.023341] ? avc_policy_seqno+0x9/0x70 [ 1908.023952] ? selinux_file_permission+0x92/0x520 [ 1908.024676] ? security_file_permission+0xb1/0xe0 [ 1908.025419] do_iter_write+0x191/0x700 [ 1908.025994] ? trace_hardirqs_on+0x5b/0x180 [ 1908.026647] vfs_iter_write+0x70/0xa0 [ 1908.027223] iter_file_splice_write+0x762/0xc30 [ 1908.027934] ? generic_splice_sendpage+0x140/0x140 [ 1908.028683] ? security_file_permission+0xb1/0xe0 [ 1908.029410] ? generic_splice_sendpage+0x140/0x140 [ 1908.030143] direct_splice_actor+0x10f/0x170 [ 1908.030811] splice_direct_to_actor+0x387/0x980 [ 1908.031512] ? pipe_to_sendpage+0x380/0x380 [ 1908.032161] ? do_splice_to+0x160/0x160 [ 1908.032753] ? security_file_permission+0xb1/0xe0 [ 1908.033479] do_splice_direct+0x1c4/0x290 [ 1908.034135] ? splice_direct_to_actor+0x980/0x980 [ 1908.034897] ? avc_policy_seqno+0x9/0x70 [ 1908.035516] ? security_file_permission+0xb1/0xe0 [ 1908.036253] do_sendfile+0x553/0x11e0 [ 1908.036824] ? do_pwritev+0x270/0x270 [ 1908.037397] ? wait_for_completion_io+0x270/0x270 [ 1908.038103] ? rcu_read_lock_any_held+0x75/0xa0 [ 1908.038786] ? vfs_write+0x354/0xb10 [ 1908.039341] __x64_sys_sendfile64+0x1d1/0x210 [ 1908.040007] ? __ia32_sys_sendfile+0x220/0x220 [ 1908.040669] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1908.041446] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1908.042195] do_syscall_64+0x33/0x40 [ 1908.042748] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1908.043498] RIP: 0033:0x7fcab4ef4b19 [ 1908.044054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1908.046752] RSP: 002b:00007fcab246a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1908.047857] RAX: ffffffffffffffda RBX: 00007fcab5007f60 RCX: 00007fcab4ef4b19 [ 1908.048906] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1908.049959] RBP: 00007fcab246a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1908.051010] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000002 [ 1908.052066] R13: 00007ffe07a1757f R14: 00007fcab246a300 R15: 0000000000022000 13:31:45 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5414, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:31:45 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000004) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:31:45 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 11) 13:31:45 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1f8}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:31:45 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 8) 13:31:45 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 13:31:45 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 11) 13:31:45 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 11) [ 1920.935251] FAULT_INJECTION: forcing a failure. [ 1920.935251] name failslab, interval 1, probability 0, space 0, times 0 [ 1920.936289] CPU: 1 PID: 11343 Comm: syz-executor.6 Not tainted 5.10.220 #1 [ 1920.936879] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1920.937577] Call Trace: [ 1920.937806] dump_stack+0x107/0x167 [ 1920.938118] should_fail.cold+0x5/0xa [ 1920.938442] ? create_object.isra.0+0x3a/0xa20 [ 1920.938830] should_failslab+0x5/0x20 [ 1920.939156] kmem_cache_alloc+0x5b/0x310 [ 1920.939509] create_object.isra.0+0x3a/0xa20 [ 1920.939884] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1920.940315] kmem_cache_alloc+0x159/0x310 [ 1920.940678] xas_alloc+0x336/0x440 [ 1920.940980] xas_create+0x60f/0x10d0 [ 1920.941308] xas_store+0x8c/0x1c40 [ 1920.941610] ? xas_find_conflict+0x4b5/0xa70 [ 1920.941995] __add_to_page_cache_locked+0x708/0xc80 [ 1920.942418] ? file_write_and_wait_range+0x130/0x130 [ 1920.942854] ? memcg_drain_all_list_lrus+0x720/0x720 [ 1920.943284] ? find_get_entry+0x2c8/0x740 [ 1920.943646] ? balance_dirty_pages_ratelimited+0x43e/0x1ff0 [ 1920.944128] add_to_page_cache_lru+0xe6/0x2e0 [ 1920.944515] ? add_to_page_cache_locked+0x40/0x40 [ 1920.944927] ? __page_cache_alloc+0x10d/0x360 [ 1920.945306] ? mark_buffer_dirty+0x346/0x3d0 [ 1920.945682] pagecache_get_page+0x38b/0xc80 [ 1920.946054] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1920.946487] ? __blkdev_direct_IO_simple+0x930/0x930 [ 1920.946915] grab_cache_page_write_begin+0x64/0xa0 [ 1920.947338] block_write_begin+0x33/0x1d0 [ 1920.947687] generic_perform_write+0x20a/0x4f0 [ 1920.948083] ? __mnt_drop_write_file+0x9/0x70 [ 1920.948464] ? page_cache_prev_miss+0x310/0x310 [ 1920.948860] ? evict_inodes+0x420/0x420 [ 1920.949207] __generic_file_write_iter+0x39d/0x5d0 [ 1920.949629] blkdev_write_iter+0x298/0x550 [ 1920.949984] ? bd_unlink_disk_holder+0x3f0/0x3f0 [ 1920.950391] ? direct_splice_actor+0x10f/0x170 [ 1920.950775] ? splice_direct_to_actor+0x387/0x980 [ 1920.951183] ? do_splice_direct+0x1c4/0x290 [ 1920.951560] ? do_sendfile+0x553/0x11e0 [ 1920.951896] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1920.952284] ? do_syscall_64+0x33/0x40 [ 1920.952616] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1920.953065] do_iter_readv_writev+0x476/0x750 [ 1920.953448] ? new_sync_write+0x660/0x660 [ 1920.953801] ? avc_policy_seqno+0x9/0x70 [ 1920.954145] ? selinux_file_permission+0x92/0x520 [ 1920.954556] ? security_file_permission+0xb1/0xe0 [ 1920.954974] do_iter_write+0x191/0x700 [ 1920.955305] ? trace_hardirqs_on+0x5b/0x180 [ 1920.955683] vfs_iter_write+0x70/0xa0 [ 1920.956005] iter_file_splice_write+0x762/0xc30 [ 1920.956406] ? generic_splice_sendpage+0x140/0x140 [ 1920.956834] ? security_file_permission+0xb1/0xe0 [ 1920.957240] ? generic_splice_sendpage+0x140/0x140 [ 1920.957661] direct_splice_actor+0x10f/0x170 [ 1920.958033] splice_direct_to_actor+0x387/0x980 [ 1920.958433] ? pipe_to_sendpage+0x380/0x380 [ 1920.958799] ? do_splice_to+0x160/0x160 [ 1920.959134] ? security_file_permission+0xb1/0xe0 [ 1920.959549] do_splice_direct+0x1c4/0x290 [ 1920.959898] ? splice_direct_to_actor+0x980/0x980 [ 1920.960302] ? avc_policy_seqno+0x9/0x70 [ 1920.960651] ? security_file_permission+0xb1/0xe0 [ 1920.961065] do_sendfile+0x553/0x11e0 [ 1920.961398] ? do_pwritev+0x270/0x270 [ 1920.961722] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 1920.962089] ? tick_program_event+0xa8/0x140 [ 1920.962469] __x64_sys_sendfile64+0x1d1/0x210 [ 1920.962850] ? __ia32_sys_sendfile+0x220/0x220 [ 1920.963239] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1920.963685] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1920.964121] do_syscall_64+0x33/0x40 [ 1920.964433] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1920.964865] RIP: 0033:0x7f8caec11b19 [ 1920.965178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1920.966716] RSP: 002b:00007f8cac187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1920.967364] RAX: ffffffffffffffda RBX: 00007f8caed24f60 RCX: 00007f8caec11b19 [ 1920.967948] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1920.968543] RBP: 00007f8cac1871d0 R08: 0000000000000000 R09: 0000000000000000 [ 1920.969132] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000002 [ 1920.969722] R13: 00007fff84cedf2f R14: 00007f8cac187300 R15: 0000000000022000 [ 1920.989148] FAULT_INJECTION: forcing a failure. [ 1920.989148] name failslab, interval 1, probability 0, space 0, times 0 [ 1920.990125] CPU: 1 PID: 11349 Comm: syz-executor.7 Not tainted 5.10.220 #1 [ 1920.990704] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1920.991407] Call Trace: [ 1920.991629] dump_stack+0x107/0x167 [ 1920.991934] should_fail.cold+0x5/0xa [ 1920.992253] ? create_object.isra.0+0x3a/0xa20 [ 1920.992630] should_failslab+0x5/0x20 [ 1920.992949] kmem_cache_alloc+0x5b/0x310 [ 1920.993288] create_object.isra.0+0x3a/0xa20 [ 1920.993666] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1920.994106] kmem_cache_alloc+0x159/0x310 [ 1920.994447] ? release_pages+0x806/0xc20 [ 1920.994797] alloc_buffer_head+0x20/0x110 [ 1920.995153] alloc_page_buffers+0x14d/0x700 [ 1920.995538] create_empty_buffers+0x2c/0x640 [ 1920.995908] create_page_buffers+0x1bb/0x230 [ 1920.996273] __block_write_begin_int+0x1d1/0x19c0 [ 1920.996680] ? __blkdev_direct_IO_simple+0x930/0x930 [ 1920.997100] ? add_to_page_cache_locked+0x40/0x40 [ 1920.997498] ? __page_cache_alloc+0x10d/0x360 [ 1920.997874] ? remove_inode_buffers+0x300/0x300 [ 1920.998272] ? pagecache_get_page+0x243/0xc80 [ 1920.998642] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1920.999071] ? wait_for_stable_page+0x92/0xe0 [ 1920.999464] ? __blkdev_direct_IO_simple+0x930/0x930 [ 1920.999893] block_write_begin+0x58/0x1d0 [ 1921.000248] generic_perform_write+0x20a/0x4f0 [ 1921.000635] ? __mnt_drop_write_file+0x9/0x70 [ 1921.001009] ? page_cache_prev_miss+0x310/0x310 [ 1921.001404] ? evict_inodes+0x420/0x420 [ 1921.001746] __generic_file_write_iter+0x39d/0x5d0 [ 1921.002164] blkdev_write_iter+0x298/0x550 [ 1921.002525] ? bd_unlink_disk_holder+0x3f0/0x3f0 [ 1921.002919] ? direct_splice_actor+0x10f/0x170 [ 1921.003298] ? splice_direct_to_actor+0x387/0x980 [ 1921.003708] ? do_splice_direct+0x1c4/0x290 [ 1921.004080] ? do_sendfile+0x553/0x11e0 [ 1921.004411] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1921.004805] ? do_syscall_64+0x33/0x40 [ 1921.005129] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1921.005576] do_iter_readv_writev+0x476/0x750 [ 1921.005958] ? new_sync_write+0x660/0x660 [ 1921.006307] ? avc_policy_seqno+0x9/0x70 [ 1921.006643] ? selinux_file_permission+0x92/0x520 [ 1921.007041] ? security_file_permission+0xb1/0xe0 [ 1921.007453] do_iter_write+0x191/0x700 [ 1921.007775] ? trace_hardirqs_on+0x5b/0x180 [ 1921.008149] vfs_iter_write+0x70/0xa0 [ 1921.008464] iter_file_splice_write+0x762/0xc30 [ 1921.009097] ? generic_splice_sendpage+0x140/0x140 [ 1921.009622] ? security_file_permission+0xb1/0xe0 [ 1921.010027] ? generic_splice_sendpage+0x140/0x140 [ 1921.010440] direct_splice_actor+0x10f/0x170 [ 1921.010813] splice_direct_to_actor+0x387/0x980 [ 1921.011211] ? pipe_to_sendpage+0x380/0x380 [ 1921.011582] ? do_splice_to+0x160/0x160 [ 1921.011909] ? security_file_permission+0xb1/0xe0 [ 1921.012310] do_splice_direct+0x1c4/0x290 [ 1921.012651] ? splice_direct_to_actor+0x980/0x980 [ 1921.013050] ? avc_policy_seqno+0x9/0x70 [ 1921.013396] ? security_file_permission+0xb1/0xe0 [ 1921.013800] do_sendfile+0x553/0x11e0 [ 1921.014131] ? do_pwritev+0x270/0x270 [ 1921.014449] ? ksys_write+0x19b/0x260 [ 1921.014768] ? ksys_write+0x203/0x260 [ 1921.015086] __x64_sys_sendfile64+0x1d1/0x210 [ 1921.015468] ? __ia32_sys_sendfile+0x220/0x220 [ 1921.015847] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1921.016282] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1921.016718] do_syscall_64+0x33/0x40 [ 1921.017037] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1921.017459] RIP: 0033:0x7fa7422adb19 [ 1921.017773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1921.019276] RSP: 002b:00007fa73f823188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1921.019905] RAX: ffffffffffffffda RBX: 00007fa7423c0f60 RCX: 00007fa7422adb19 [ 1921.020492] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000007 [ 1921.021082] RBP: 00007fa73f8231d0 R08: 0000000000000000 R09: 0000000000000000 [ 1921.021668] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000001 [ 1921.022253] R13: 00007ffe3fb62d9f R14: 00007fa73f823300 R15: 0000000000022000 [ 1921.070636] FAULT_INJECTION: forcing a failure. [ 1921.070636] name failslab, interval 1, probability 0, space 0, times 0 [ 1921.071599] CPU: 1 PID: 11352 Comm: syz-executor.0 Not tainted 5.10.220 #1 [ 1921.072177] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1921.072865] Call Trace: [ 1921.073094] dump_stack+0x107/0x167 [ 1921.073389] should_fail.cold+0x5/0xa [ 1921.073698] ? create_object.isra.0+0x3a/0xa20 [ 1921.074065] should_failslab+0x5/0x20 [ 1921.074374] kmem_cache_alloc+0x5b/0x310 [ 1921.074704] create_object.isra.0+0x3a/0xa20 [ 1921.075066] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1921.075479] kmem_cache_alloc+0x159/0x310 [ 1921.075816] xas_alloc+0x336/0x440 [ 1921.076114] xas_create+0x60f/0x10d0 [ 1921.076421] xas_store+0x8c/0x1c40 [ 1921.076715] ? xas_find_conflict+0x4b5/0xa70 [ 1921.077079] __add_to_page_cache_locked+0x708/0xc80 [ 1921.077486] ? file_write_and_wait_range+0x130/0x130 [ 1921.077894] ? memcg_drain_all_list_lrus+0x720/0x720 [ 1921.078305] ? find_get_entry+0x2c8/0x740 [ 1921.078635] ? balance_dirty_pages_ratelimited+0x43e/0x1ff0 [ 1921.079103] add_to_page_cache_lru+0xe6/0x2e0 [ 1921.079473] ? add_to_page_cache_locked+0x40/0x40 [ 1921.079871] ? __page_cache_alloc+0x10d/0x360 [ 1921.080233] ? mark_buffer_dirty+0x346/0x3d0 [ 1921.080591] pagecache_get_page+0x38b/0xc80 [ 1921.080942] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1921.081355] ? __blkdev_direct_IO_simple+0x930/0x930 [ 1921.081759] grab_cache_page_write_begin+0x64/0xa0 [ 1921.082169] block_write_begin+0x33/0x1d0 [ 1921.082512] generic_perform_write+0x20a/0x4f0 [ 1921.082890] ? __mnt_drop_write_file+0x9/0x70 [ 1921.083257] ? page_cache_prev_miss+0x310/0x310 [ 1921.083655] ? evict_inodes+0x420/0x420 [ 1921.083984] __generic_file_write_iter+0x39d/0x5d0 [ 1921.084390] blkdev_write_iter+0x298/0x550 [ 1921.084737] ? bd_unlink_disk_holder+0x3f0/0x3f0 [ 1921.085132] ? direct_splice_actor+0x10f/0x170 [ 1921.085501] ? splice_direct_to_actor+0x387/0x980 [ 1921.085898] ? do_splice_direct+0x1c4/0x290 [ 1921.086249] ? do_sendfile+0x553/0x11e0 [ 1921.086573] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1921.086954] ? do_syscall_64+0x33/0x40 [ 1921.087273] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1921.087706] do_iter_readv_writev+0x476/0x750 [ 1921.088072] ? new_sync_write+0x660/0x660 [ 1921.088404] ? avc_policy_seqno+0x9/0x70 [ 1921.088731] ? selinux_file_permission+0x92/0x520 [ 1921.089121] ? security_file_permission+0xb1/0xe0 [ 1921.089517] do_iter_write+0x191/0x700 [ 1921.089831] ? trace_hardirqs_on+0x5b/0x180 [ 1921.090182] vfs_iter_write+0x70/0xa0 [ 1921.090488] iter_file_splice_write+0x762/0xc30 [ 1921.090874] ? generic_splice_sendpage+0x140/0x140 [ 1921.091280] ? security_file_permission+0xb1/0xe0 [ 1921.091675] ? generic_splice_sendpage+0x140/0x140 [ 1921.092071] direct_splice_actor+0x10f/0x170 [ 1921.092434] splice_direct_to_actor+0x387/0x980 [ 1921.092811] ? pipe_to_sendpage+0x380/0x380 [ 1921.093176] ? do_splice_to+0x160/0x160 [ 1921.093505] ? security_file_permission+0xb1/0xe0 [ 1921.093903] do_splice_direct+0x1c4/0x290 [ 1921.094241] ? splice_direct_to_actor+0x980/0x980 [ 1921.094627] ? avc_policy_seqno+0x9/0x70 [ 1921.094956] ? security_file_permission+0xb1/0xe0 [ 1921.095358] do_sendfile+0x553/0x11e0 [ 1921.095673] ? do_pwritev+0x270/0x270 [ 1921.095989] ? wait_for_completion_io+0x270/0x270 [ 1921.096379] ? rcu_read_lock_any_held+0x75/0xa0 [ 1921.096764] ? vfs_write+0x354/0xb10 [ 1921.097076] __x64_sys_sendfile64+0x1d1/0x210 [ 1921.097441] ? __ia32_sys_sendfile+0x220/0x220 [ 1921.097823] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1921.098251] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1921.098667] do_syscall_64+0x33/0x40 [ 1921.098970] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1921.099393] RIP: 0033:0x7fcab4ef4b19 [ 1921.099689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1921.101150] RSP: 002b:00007fcab246a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1921.101736] RAX: ffffffffffffffda RBX: 00007fcab5007f60 RCX: 00007fcab4ef4b19 [ 1921.102311] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1921.102891] RBP: 00007fcab246a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1921.103473] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000002 [ 1921.104039] R13: 00007ffe07a1757f R14: 00007fcab246a300 R15: 0000000000022000 13:31:46 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5415, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:31:46 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:31:46 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1f8}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:31:46 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5416, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:31:46 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) r4 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, &(0x7f0000000180), 0x40, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:31:46 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5418, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:31:46 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1d0}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:31:46 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 12) 13:31:46 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x541b, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) [ 1921.641485] blk_update_request: I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 1921.642649] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 1921.643352] blk_update_request: I/O error, dev loop2, sector 1 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 1921.644223] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 1921.644871] blk_update_request: I/O error, dev loop2, sector 2 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 1921.645677] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 1921.646328] blk_update_request: I/O error, dev loop2, sector 3 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 1921.647179] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 1921.647824] blk_update_request: I/O error, dev loop2, sector 4 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 1921.648660] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 1921.649431] blk_update_request: I/O error, dev loop2, sector 5 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 1921.650333] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 1921.651229] blk_update_request: I/O error, dev loop2, sector 6 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 1921.652081] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 1921.652710] blk_update_request: I/O error, dev loop2, sector 7 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 1921.653555] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 1921.654227] blk_update_request: I/O error, dev loop2, sector 8 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 1921.655061] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 1921.655691] blk_update_request: I/O error, dev loop2, sector 9 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 1921.656527] Buffer I/O error on dev loop2, logical block 9, lost async page write 13:31:59 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 12) 13:31:59 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1d0}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:31:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 9) 13:31:59 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 13:31:59 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x541d, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:31:59 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000005) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:31:59 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:31:59 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x6000, @fd=r2, 0xba, &(0x7f0000000b00)=[{&(0x7f0000000700)=""/80, 0x50}, {&(0x7f0000000b80)=""/138, 0x8a}, {&(0x7f0000000880)=""/47, 0x2f}, {&(0x7f00000008c0)=""/23, 0x17}, {&(0x7f0000000900)=""/145, 0x91}, {&(0x7f00000009c0)=""/63, 0x3f}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/234, 0xea}], 0x8, 0x31, 0x1}, 0x80000001) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r2, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/124, 0x7c}, {&(0x7f0000000500)=""/124, 0x7c}, {&(0x7f0000000580)=""/165, 0xa5}, {&(0x7f0000000640)=""/145, 0x91}], 0x4, &(0x7f0000000780)=""/99, 0x63}, 0x0, 0x2000, 0x0, {0x1}}, 0x5) r5 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, &(0x7f0000000180), 0x40, 0x0) io_uring_enter(r6, 0x4490, 0x8e89, 0x1, &(0x7f0000000140)={[0x7]}, 0x8) creat(&(0x7f00000000c0)='./file1\x00', 0x40) [ 1934.049247] FAULT_INJECTION: forcing a failure. [ 1934.049247] name failslab, interval 1, probability 0, space 0, times 0 [ 1934.050493] CPU: 0 PID: 11413 Comm: syz-executor.6 Not tainted 5.10.220 #1 [ 1934.051108] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1934.051848] Call Trace: [ 1934.052087] dump_stack+0x107/0x167 [ 1934.052415] should_fail.cold+0x5/0xa [ 1934.052753] ? create_object.isra.0+0x3a/0xa20 [ 1934.053158] should_failslab+0x5/0x20 [ 1934.053491] kmem_cache_alloc+0x5b/0x310 [ 1934.053860] create_object.isra.0+0x3a/0xa20 [ 1934.054255] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1934.054706] kmem_cache_alloc+0x159/0x310 [ 1934.055084] alloc_buffer_head+0x20/0x110 [ 1934.055461] alloc_page_buffers+0x14d/0x700 [ 1934.055861] create_empty_buffers+0x2c/0x640 [ 1934.056263] create_page_buffers+0x1bb/0x230 [ 1934.056652] __block_write_begin_int+0x1d1/0x19c0 [ 1934.057081] ? __blkdev_direct_IO_simple+0x930/0x930 [ 1934.057534] ? add_to_page_cache_locked+0x40/0x40 [ 1934.057969] ? __page_cache_alloc+0x10d/0x360 [ 1934.058368] ? mark_buffer_dirty+0x346/0x3d0 [ 1934.058754] ? remove_inode_buffers+0x300/0x300 [ 1934.059173] ? pagecache_get_page+0x243/0xc80 [ 1934.059578] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1934.060037] ? wait_for_stable_page+0x92/0xe0 [ 1934.060438] ? __blkdev_direct_IO_simple+0x930/0x930 [ 1934.060888] block_write_begin+0x58/0x1d0 [ 1934.061267] generic_perform_write+0x20a/0x4f0 [ 1934.061677] ? __mnt_drop_write_file+0x9/0x70 [ 1934.062089] ? page_cache_prev_miss+0x310/0x310 [ 1934.062505] ? evict_inodes+0x420/0x420 [ 1934.062867] __generic_file_write_iter+0x39d/0x5d0 [ 1934.063305] blkdev_write_iter+0x298/0x550 [ 1934.063681] ? bd_unlink_disk_holder+0x3f0/0x3f0 [ 1934.064101] ? direct_splice_actor+0x10f/0x170 [ 1934.064497] ? splice_direct_to_actor+0x387/0x980 [ 1934.064929] ? do_splice_direct+0x1c4/0x290 [ 1934.065308] ? do_sendfile+0x553/0x11e0 [ 1934.065657] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1934.066068] ? do_syscall_64+0x33/0x40 [ 1934.066409] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1934.066869] do_iter_readv_writev+0x476/0x750 [ 1934.067253] ? new_sync_write+0x660/0x660 [ 1934.067621] ? avc_policy_seqno+0x9/0x70 [ 1934.067981] ? selinux_file_permission+0x92/0x520 [ 1934.068409] ? security_file_permission+0xb1/0xe0 [ 1934.068842] do_iter_write+0x191/0x700 [ 1934.069193] ? trace_hardirqs_on+0x5b/0x180 [ 1934.069585] vfs_iter_write+0x70/0xa0 [ 1934.069916] iter_file_splice_write+0x762/0xc30 [ 1934.070340] ? generic_splice_sendpage+0x140/0x140 [ 1934.070787] ? security_file_permission+0xb1/0xe0 [ 1934.071218] ? generic_splice_sendpage+0x140/0x140 [ 1934.071659] direct_splice_actor+0x10f/0x170 [ 1934.072053] splice_direct_to_actor+0x387/0x980 [ 1934.072457] ? pipe_to_sendpage+0x380/0x380 [ 1934.072839] ? do_splice_to+0x160/0x160 [ 1934.073192] ? security_file_permission+0xb1/0xe0 [ 1934.073621] do_splice_direct+0x1c4/0x290 [ 1934.073989] ? splice_direct_to_actor+0x980/0x980 [ 1934.074411] ? avc_policy_seqno+0x9/0x70 [ 1934.074753] ? security_file_permission+0xb1/0xe0 [ 1934.075187] do_sendfile+0x553/0x11e0 [ 1934.075538] ? do_pwritev+0x270/0x270 [ 1934.075870] ? wait_for_completion_io+0x270/0x270 [ 1934.076306] ? rcu_read_lock_any_held+0x75/0xa0 [ 1934.076721] ? vfs_write+0x354/0xb10 [ 1934.077056] __x64_sys_sendfile64+0x1d1/0x210 [ 1934.077447] ? __ia32_sys_sendfile+0x220/0x220 [ 1934.077865] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1934.078322] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1934.078781] do_syscall_64+0x33/0x40 [ 1934.079115] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1934.079563] RIP: 0033:0x7f8caec11b19 [ 1934.079890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1934.081475] RSP: 002b:00007f8cac187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1934.082140] RAX: ffffffffffffffda RBX: 00007f8caed24f60 RCX: 00007f8caec11b19 [ 1934.082762] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1934.083386] RBP: 00007f8cac1871d0 R08: 0000000000000000 R09: 0000000000000000 [ 1934.084016] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000002 [ 1934.084630] R13: 00007fff84cedf2f R14: 00007f8cac187300 R15: 0000000000022000 13:31:59 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x541e, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:31:59 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f00000000c0)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r2, 0x0, 0x7ffffff9) write$binfmt_elf64(r3, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x1, 0x20, 0x80, 0x2, 0x2, 0x3e, 0x6, 0x223, 0x40, 0x258, 0x200, 0x3, 0x38, 0x1, 0x1, 0x4, 0x8}, [{0x7, 0x401, 0x6, 0xfe, 0x10001, 0x10000, 0x6}], "d686dc2cb23adc01b63c737e49da7bae1a169e1ea59691013ee773ebfd0ab75cb01423c3c2923b827c800caee1e61f6a73f5fb0219f38d01a34b9e2552f2c24141b053f880cc801a40b862a352952dca8d36bf4dddc309ee27759094db51cf88e9757e09261ae9e8f9c69fc1dca1e2c853b40e66278abb91ff78751c17a3", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6f6) 13:31:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:31:59 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = dup3(r0, r0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)={0x10, 0x17, 0x1, {0x7, './file1'}}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = dup2(r3, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) r6 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) read(r6, &(0x7f0000000500)=""/4096, 0x1000) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r5, r4, 0x0, 0x7ffffff9) 13:31:59 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 13) 13:31:59 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1d0}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:31:59 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x541e, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) [ 1934.399501] FAULT_INJECTION: forcing a failure. [ 1934.399501] name failslab, interval 1, probability 0, space 0, times 0 [ 1934.402163] CPU: 1 PID: 11457 Comm: syz-executor.6 Not tainted 5.10.220 #1 [ 1934.403204] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1934.404449] Call Trace: [ 1934.404849] dump_stack+0x107/0x167 [ 1934.405389] should_fail.cold+0x5/0xa [ 1934.405949] ? ext4_find_extent+0xa3d/0xd30 [ 1934.406596] should_failslab+0x5/0x20 [ 1934.407168] __kmalloc+0x72/0x390 [ 1934.407688] ext4_find_extent+0xa3d/0xd30 [ 1934.408309] ext4_ext_map_blocks+0x1c8/0x5830 [ 1934.408987] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1934.409761] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1934.410536] ? __lock_acquire+0xbb1/0x5b00 [ 1934.411160] ? ext4_ext_release+0x10/0x10 [ 1934.411791] ? lock_release+0x680/0x680 [ 1934.412383] ? ext4_es_lookup_extent+0x48d/0xaa0 [ 1934.413086] ? lock_downgrade+0x6d0/0x6d0 [ 1934.413727] ? down_read+0x10f/0x430 [ 1934.414285] ? down_write+0x160/0x160 [ 1934.414854] ? ext4_es_lookup_extent+0xc4/0xaa0 [ 1934.415561] ext4_da_get_block_prep+0xe60/0x11a0 [ 1934.416277] ? ext4_da_release_space+0x480/0x480 [ 1934.416979] ? lock_downgrade+0x6d0/0x6d0 [ 1934.417597] ? create_empty_buffers+0x4a3/0x640 [ 1934.418288] ? do_raw_spin_unlock+0x4f/0x220 [ 1934.418952] ? create_page_buffers+0x139/0x230 [ 1934.419655] __block_write_begin_int+0x3d1/0x19c0 [ 1934.420380] ? ext4_da_release_space+0x480/0x480 [ 1934.421100] ? remove_inode_buffers+0x300/0x300 [ 1934.421777] ? jbd2__journal_start+0xf3/0x7e0 [ 1934.422461] ext4_da_write_begin+0x37d/0xd40 [ 1934.423141] ? ext4_write_begin+0x10f0/0x10f0 [ 1934.423812] ? copyout_mc+0x140/0x140 13:31:59 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5421, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) [ 1934.424378] ? __mark_inode_dirty+0x999/0xd40 [ 1934.425202] generic_perform_write+0x20a/0x4f0 [ 1934.425907] ? page_cache_prev_miss+0x310/0x310 [ 1934.426598] ? down_write_killable+0x180/0x180 [ 1934.427296] ext4_buffered_write_iter+0x232/0x4a0 [ 1934.428023] ext4_file_write_iter+0x4fb/0x18d0 [ 1934.428699] ? stack_trace_save+0x8c/0xc0 [ 1934.429323] ? stack_trace_consume_entry+0x160/0x160 [ 1934.430080] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1934.430757] ? kasan_save_stack+0x32/0x40 [ 1934.431367] ? kasan_save_stack+0x1b/0x40 [ 1934.431993] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1934.432734] ? iter_file_splice_write+0x16d/0xc30 [ 1934.433449] ? direct_splice_actor+0x10f/0x170 [ 1934.434132] ? splice_direct_to_actor+0x387/0x980 [ 1934.434842] ? do_splice_direct+0x1c4/0x290 [ 1934.435475] ? do_sendfile+0x553/0x11e0 [ 1934.436067] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1934.436734] ? do_syscall_64+0x33/0x40 [ 1934.437312] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1934.438107] do_iter_readv_writev+0x476/0x750 [ 1934.438766] ? new_sync_write+0x660/0x660 [ 1934.439390] ? avc_policy_seqno+0x9/0x70 [ 1934.439998] ? selinux_file_permission+0x92/0x520 [ 1934.440718] ? security_file_permission+0xb1/0xe0 [ 1934.441441] do_iter_write+0x191/0x700 [ 1934.442020] ? trace_hardirqs_on+0x5b/0x180 [ 1934.442674] vfs_iter_write+0x70/0xa0 [ 1934.443238] iter_file_splice_write+0x762/0xc30 [ 1934.443959] ? generic_splice_sendpage+0x140/0x140 [ 1934.444713] ? security_file_permission+0xb1/0xe0 [ 1934.445430] ? generic_splice_sendpage+0x140/0x140 [ 1934.446165] direct_splice_actor+0x10f/0x170 [ 1934.446819] splice_direct_to_actor+0x387/0x980 [ 1934.447536] ? pipe_to_sendpage+0x380/0x380 [ 1934.448183] ? do_splice_to+0x160/0x160 [ 1934.448771] ? security_file_permission+0xb1/0xe0 [ 1934.449482] do_splice_direct+0x1c4/0x290 [ 1934.450107] ? splice_direct_to_actor+0x980/0x980 [ 1934.450816] ? avc_policy_seqno+0x9/0x70 [ 1934.451427] ? security_file_permission+0xb1/0xe0 [ 1934.452164] do_sendfile+0x553/0x11e0 [ 1934.452737] ? do_pwritev+0x270/0x270 [ 1934.453304] ? wait_for_completion_io+0x270/0x270 [ 1934.454022] ? rcu_read_lock_any_held+0x75/0xa0 [ 1934.454708] ? vfs_write+0x354/0xb10 [ 1934.455278] __x64_sys_sendfile64+0x1d1/0x210 [ 1934.455946] ? __ia32_sys_sendfile+0x220/0x220 [ 1934.456624] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1934.457403] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1934.458169] do_syscall_64+0x33/0x40 [ 1934.458715] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1934.459486] RIP: 0033:0x7f8caec11b19 [ 1934.460029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1934.462724] RSP: 002b:00007f8cac187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1934.463859] RAX: ffffffffffffffda RBX: 00007f8caed24f60 RCX: 00007f8caec11b19 [ 1934.464903] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1934.465953] RBP: 00007f8cac1871d0 R08: 0000000000000000 R09: 0000000000000000 [ 1934.467003] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000002 [ 1934.468060] R13: 00007fff84cedf2f R14: 00007f8cac187300 R15: 0000000000022000 13:31:59 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 14) [ 1934.629158] FAULT_INJECTION: forcing a failure. [ 1934.629158] name failslab, interval 1, probability 0, space 0, times 0 [ 1934.630082] CPU: 0 PID: 11465 Comm: syz-executor.6 Not tainted 5.10.220 #1 [ 1934.630643] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1934.631273] Call Trace: [ 1934.631488] dump_stack+0x107/0x167 [ 1934.631789] should_fail.cold+0x5/0xa [ 1934.632090] ? create_object.isra.0+0x3a/0xa20 [ 1934.632471] should_failslab+0x5/0x20 [ 1934.632790] kmem_cache_alloc+0x5b/0x310 [ 1934.633099] create_object.isra.0+0x3a/0xa20 [ 1934.633463] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1934.633888] __kmalloc+0x16e/0x390 [ 1934.634172] ext4_find_extent+0xa3d/0xd30 [ 1934.634521] ext4_ext_map_blocks+0x1c8/0x5830 [ 1934.634897] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1934.635322] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1934.635755] ? __lock_acquire+0xbb1/0x5b00 [ 1934.636080] ? ext4_ext_release+0x10/0x10 [ 1934.636427] ? lock_release+0x680/0x680 [ 1934.636730] ? ext4_es_lookup_extent+0x48d/0xaa0 [ 1934.637115] ? lock_downgrade+0x6d0/0x6d0 [ 1934.637472] ? down_read+0x10f/0x430 [ 1934.637787] ? down_write+0x160/0x160 [ 1934.638081] ? ext4_es_lookup_extent+0xc4/0xaa0 [ 1934.638468] ext4_da_get_block_prep+0xe60/0x11a0 [ 1934.638854] ? ext4_da_release_space+0x480/0x480 [ 1934.639215] ? lock_downgrade+0x6d0/0x6d0 [ 1934.639565] ? create_empty_buffers+0x4a3/0x640 [ 1934.639918] ? do_raw_spin_unlock+0x4f/0x220 [ 1934.640280] ? create_page_buffers+0x139/0x230 [ 1934.640652] __block_write_begin_int+0x3d1/0x19c0 [ 1934.641017] ? ext4_da_release_space+0x480/0x480 [ 1934.641404] ? remove_inode_buffers+0x300/0x300 [ 1934.641777] ? jbd2__journal_start+0xf3/0x7e0 [ 1934.642159] ext4_da_write_begin+0x37d/0xd40 [ 1934.642532] ? ext4_write_begin+0x10f0/0x10f0 [ 1934.642897] ? copyout_mc+0x140/0x140 [ 1934.643195] ? __mark_inode_dirty+0x999/0xd40 [ 1934.643575] generic_perform_write+0x20a/0x4f0 [ 1934.643939] ? page_cache_prev_miss+0x310/0x310 [ 1934.644330] ? down_write_killable+0x180/0x180 [ 1934.644678] ext4_buffered_write_iter+0x232/0x4a0 [ 1934.645065] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1934.645465] ext4_file_write_iter+0x4fb/0x18d0 [ 1934.645842] ? finish_task_switch+0x126/0x5d0 [ 1934.646193] ? __switch_to+0x572/0xf70 [ 1934.646509] ? __switch_to_asm+0x3a/0x60 [ 1934.646811] ? __switch_to_asm+0x34/0x60 [ 1934.647122] ? __schedule+0x82c/0x1ea0 [ 1934.647440] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1934.647791] ? io_schedule_timeout+0x140/0x140 [ 1934.648154] ? do_splice_direct+0x1c4/0x290 [ 1934.648495] ? do_sendfile+0x553/0x11e0 [ 1934.648817] ? do_syscall_64+0x33/0x40 [ 1934.649106] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1934.649547] do_iter_readv_writev+0x476/0x750 [ 1934.649896] ? new_sync_write+0x660/0x660 [ 1934.650237] ? avc_policy_seqno+0x9/0x70 [ 1934.650543] ? selinux_file_permission+0x92/0x520 [ 1934.650939] ? security_file_permission+0xb1/0xe0 [ 1934.651318] do_iter_write+0x191/0x700 [ 1934.651641] ? trace_hardirqs_on+0x5b/0x180 [ 1934.651966] vfs_iter_write+0x70/0xa0 [ 1934.652288] iter_file_splice_write+0x762/0xc30 [ 1934.652647] ? generic_splice_sendpage+0x140/0x140 [ 1934.653055] ? security_file_permission+0xb1/0xe0 [ 1934.653427] ? generic_splice_sendpage+0x140/0x140 [ 1934.653828] direct_splice_actor+0x10f/0x170 [ 1934.654172] splice_direct_to_actor+0x387/0x980 [ 1934.654550] ? pipe_to_sendpage+0x380/0x380 [ 1934.654879] ? do_splice_to+0x160/0x160 [ 1934.655202] ? security_file_permission+0xb1/0xe0 [ 1934.655570] do_splice_direct+0x1c4/0x290 [ 1934.655907] ? splice_direct_to_actor+0x980/0x980 [ 1934.656265] ? avc_policy_seqno+0x9/0x70 [ 1934.656607] ? security_file_permission+0xb1/0xe0 [ 1934.656985] do_sendfile+0x553/0x11e0 [ 1934.657303] ? do_pwritev+0x270/0x270 [ 1934.657592] ? wait_for_completion_io+0x270/0x270 [ 1934.657988] ? rcu_read_lock_any_held+0x75/0xa0 [ 1934.658333] ? vfs_write+0x354/0xb10 [ 1934.658643] __x64_sys_sendfile64+0x1d1/0x210 [ 1934.658994] ? __ia32_sys_sendfile+0x220/0x220 [ 1934.659371] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1934.659765] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1934.660189] do_syscall_64+0x33/0x40 [ 1934.660475] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1934.660888] RIP: 0033:0x7f8caec11b19 [ 1934.661241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1934.662797] RSP: 002b:00007f8cac187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1934.663371] RAX: ffffffffffffffda RBX: 00007f8caed24f60 RCX: 00007f8caec11b19 [ 1934.663946] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1934.664484] RBP: 00007f8cac1871d0 R08: 0000000000000000 R09: 0000000000000000 [ 1934.665060] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000002 [ 1934.665638] R13: 00007fff84cedf2f R14: 00007f8cac187300 R15: 0000000000022000 13:32:17 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 15) 13:32:17 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000006) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:32:17 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0xaa, 0x9, 0x0, 0x20, 0x6, 0x0, 0x4307, 0x8403, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0xdd, 0x0, 0x81, 0x0, 0x1f}, 0xffffffffffffffff, 0xfffffffffff7ffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1ff, 0x1, &(0x7f0000000140)=[{&(0x7f00000002c0)="4aedb20d54e7bb1f5cce24d5d32ea5d1d268f753b5391cfdf6d105b66e44e8002c2d3e9df7aad027a26fc5f88b69696058b147c9e5fe2c968481c1707716c45c70758fb214eed386eef7fd81d5e5bca956f30b6915ee5e46598daaeabd66c70a3ba96515bebcbb17cefcff450849ee5e4645e075078ed2ab9bdcd20490e6ba660f794117146e80a164819dc8e01e56f3685cf38d91653d2d62742c6ed8d78f", 0x9f, 0x1f}], 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x3, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) r4 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, 0xffffffffffffffff, &(0x7f0000000180), 0x3d, 0x0) fallocate(r5, 0x3, 0x2d, 0x4) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:32:17 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5423, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:32:17 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, &(0x7f0000000180), 0x40, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f00000000c0)) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r5, r2, 0x0, 0x7ffffff9) 13:32:17 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x61bd, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:32:17 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 13:32:17 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:32:18 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5424, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) [ 1952.982457] FAULT_INJECTION: forcing a failure. [ 1952.982457] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1952.984304] CPU: 0 PID: 11490 Comm: syz-executor.6 Not tainted 5.10.220 #1 [ 1952.985303] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1952.986474] Call Trace: [ 1952.986860] dump_stack+0x107/0x167 [ 1952.987381] should_fail.cold+0x5/0xa [ 1952.987958] __alloc_pages_nodemask+0x182/0x600 [ 1952.988646] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1952.989509] ? find_get_entry+0x2c8/0x740 [ 1952.990187] ? balance_dirty_pages_ratelimited+0x43e/0x1ff0 [ 1952.991004] alloc_pages_current+0x187/0x280 [ 1952.991676] __page_cache_alloc+0x2d2/0x360 [ 1952.992312] ? mark_buffer_dirty+0x346/0x3d0 [ 1952.992980] pagecache_get_page+0x2c7/0xc80 [ 1952.993603] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1952.994367] ? __blkdev_direct_IO_simple+0x930/0x930 [ 1952.995098] grab_cache_page_write_begin+0x64/0xa0 [ 1952.995832] block_write_begin+0x33/0x1d0 [ 1952.996436] generic_perform_write+0x20a/0x4f0 [ 1952.997136] ? __mnt_drop_write_file+0x9/0x70 [ 1952.997784] ? page_cache_prev_miss+0x310/0x310 [ 1952.998482] ? evict_inodes+0x420/0x420 [ 1952.999085] __generic_file_write_iter+0x39d/0x5d0 [ 1952.999835] blkdev_write_iter+0x298/0x550 [ 1953.000472] ? bd_unlink_disk_holder+0x3f0/0x3f0 [ 1953.001161] ? direct_splice_actor+0x10f/0x170 [ 1953.001820] ? splice_direct_to_actor+0x387/0x980 [ 1953.002515] ? do_splice_direct+0x1c4/0x290 [ 1953.003161] ? do_sendfile+0x553/0x11e0 [ 1953.003741] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1953.004423] ? do_syscall_64+0x33/0x40 [ 1953.004991] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1953.005791] do_iter_readv_writev+0x476/0x750 [ 1953.006439] ? new_sync_write+0x660/0x660 [ 1953.007054] ? avc_policy_seqno+0x9/0x70 [ 1953.007649] ? selinux_file_permission+0x92/0x520 [ 1953.008351] ? security_file_permission+0xb1/0xe0 [ 1953.009058] do_iter_write+0x191/0x700 [ 1953.009623] ? trace_hardirqs_on+0x5b/0x180 [ 1953.010253] vfs_iter_write+0x70/0xa0 [ 1953.010816] iter_file_splice_write+0x762/0xc30 [ 1953.011507] ? generic_splice_sendpage+0x140/0x140 [ 1953.012238] ? security_file_permission+0xb1/0xe0 [ 1953.012959] ? generic_splice_sendpage+0x140/0x140 [ 1953.013687] direct_splice_actor+0x10f/0x170 [ 1953.014353] splice_direct_to_actor+0x387/0x980 [ 1953.015045] ? pipe_to_sendpage+0x380/0x380 [ 1953.015700] ? do_splice_to+0x160/0x160 [ 1953.016290] ? security_file_permission+0xb1/0xe0 [ 1953.017006] do_splice_direct+0x1c4/0x290 [ 1953.017623] ? splice_direct_to_actor+0x980/0x980 [ 1953.018323] ? avc_policy_seqno+0x9/0x70 [ 1953.018935] ? security_file_permission+0xb1/0xe0 [ 1953.019659] do_sendfile+0x553/0x11e0 [ 1953.020235] ? do_pwritev+0x270/0x270 [ 1953.020803] ? wait_for_completion_io+0x270/0x270 [ 1953.021514] ? rcu_read_lock_any_held+0x75/0xa0 [ 1953.022201] ? vfs_write+0x354/0xb10 [ 1953.022751] __x64_sys_sendfile64+0x1d1/0x210 [ 1953.023419] ? __ia32_sys_sendfile+0x220/0x220 [ 1953.024087] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1953.024855] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1953.025599] do_syscall_64+0x33/0x40 [ 1953.026156] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1953.026915] RIP: 0033:0x7f8caec11b19 [ 1953.027467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1953.030184] RSP: 002b:00007f8cac187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1953.031307] RAX: ffffffffffffffda RBX: 00007f8caed24f60 RCX: 00007f8caec11b19 [ 1953.032346] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1953.033373] RBP: 00007f8cac1871d0 R08: 0000000000000000 R09: 0000000000000000 [ 1953.034415] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000002 [ 1953.035462] R13: 00007fff84cedf2f R14: 00007f8cac187300 R15: 0000000000022000 13:32:18 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:32:18 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5425, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:32:18 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 13:32:18 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000140)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:32:18 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5427, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:32:18 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:32:18 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, &(0x7f0000000180), 0x40, 0x0) io_uring_enter(r1, 0x5b7b, 0x71f2, 0x2, &(0x7f0000000140)={[0xffff]}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x104a5, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20840, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r7}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r8, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r8, 0x0, &(0x7f00000000c0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10001) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r3, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x801, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r9, r3, 0x0, 0x7ffffff9) 13:32:18 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 16) 13:32:18 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x1081886, &(0x7f0000000200)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x3, 0x5, &(0x7f00000003c0)=[{&(0x7f0000000240)="05dd631fcb4b19847b1ca47fe67859d5d85fc1edfdff4430a353a97487757414dc47e1ad66609a1cebc090fb8b0aa8230e4c9df0281a280dba13c707e43e430269e05a30a4da5d730fc801421849c6abad9ddd2d0635167269c5726aa9ae8a4c80dc2b946fe3f5a7f0ffc8c35c99c06b478ac79b870d902854b9f3fc48d91c2394fd678fc94fe37c277ed0b01d", 0x8d, 0x100000000}, {&(0x7f0000000180)="8cb6e41208f07a6b", 0x8, 0xffffffff}, {&(0x7f0000000300)="52f6467fbb791c7ade096215bcabda8f3fe6e28eab2af152b58c6f16c98e8fa430571ba20e8aee8d68b338cc53f72776e8da3feed18c03c100fb0a5f0db417194abcae9d7647d6d1fa88d5faeac0349d6baa9262471a09c2ff6e07ece3023373f66065e0d787f5b1c62d99e2af05e214667100fe6f81ac6498b38443ffbb48a119ca31833458281c27ef67748ea6128bf2d3569e12fa792f0787e45a1bbf19f4a2ef43130082428e947f84fb6349bcbdf9777c2113", 0xb5, 0x10001}, {&(0x7f00000001c0)="fe114472c00a03758aa3b821bc367bf1", 0x10, 0x7f}, {&(0x7f0000000500)="45f4b3f99fe44c486e75804e89b2bb1ab8f008374e08be637a9cb34c32647bf90587c2d937d0b15e23e4f438c03a97512de4bb4d915394bc671c73e8e67ff4f9337ebcf019a992fe60fca80f9af4896ccf70d2d8c9a6fc41e83bada635306b6d9a387255140b230b6dc340e6b3cf84a03770fc3b7495ddc47baa4f5a39005821e720a7236e4d14bd70b0113106fb6ab96c78019f725b0af233b85e7a7ed812dee404978d0b6d4d92b9564370b7aa865d132e720b44cf397425e05fc4608d544b3523f249e8c0bb2e066263a7c8bdd35399ea5a1412bf653bf8a0901f35b62192d09472e2a3c7ae624038161cfb078bd6dd189b", 0xf3, 0x98ee}], 0x1000840, &(0x7f0000000600)={[{@nonumtail}, {@shortname_lower}, {@nonumtail}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:32:18 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000007) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:32:18 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5428, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:32:18 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) [ 1953.643553] FAULT_INJECTION: forcing a failure. [ 1953.643553] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1953.644638] CPU: 1 PID: 11545 Comm: syz-executor.6 Not tainted 5.10.220 #1 [ 1953.645205] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1953.645876] Call Trace: [ 1953.646113] dump_stack+0x107/0x167 [ 1953.646404] should_fail.cold+0x5/0xa [ 1953.646722] __alloc_pages_nodemask+0x182/0x600 [ 1953.647113] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1953.647594] ? find_get_entry+0x2c8/0x740 [ 1953.647943] ? balance_dirty_pages_ratelimited+0x43e/0x1ff0 [ 1953.648421] alloc_pages_current+0x187/0x280 [ 1953.648783] __page_cache_alloc+0x2d2/0x360 [ 1953.649149] ? mark_buffer_dirty+0x346/0x3d0 [ 1953.649511] pagecache_get_page+0x2c7/0xc80 [ 1953.649856] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1953.650276] ? __blkdev_direct_IO_simple+0x930/0x930 [ 1953.650688] grab_cache_page_write_begin+0x64/0xa0 [ 1953.651096] block_write_begin+0x33/0x1d0 [ 1953.651434] generic_perform_write+0x20a/0x4f0 [ 1953.651821] ? __mnt_drop_write_file+0x9/0x70 [ 1953.652195] ? page_cache_prev_miss+0x310/0x310 [ 1953.652572] ? evict_inodes+0x420/0x420 [ 1953.652908] __generic_file_write_iter+0x39d/0x5d0 [ 1953.653311] ? blk_start_plug+0x2/0x1c0 [ 1953.653639] blkdev_write_iter+0x298/0x550 [ 1953.653993] ? bd_unlink_disk_holder+0x3f0/0x3f0 [ 1953.654381] ? direct_splice_actor+0x10f/0x170 [ 1953.654750] ? splice_direct_to_actor+0x387/0x980 [ 1953.655156] ? do_splice_direct+0x1c4/0x290 [ 1953.655503] ? do_sendfile+0x553/0x11e0 [ 1953.655832] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1953.656217] ? do_syscall_64+0x33/0x40 [ 1953.656532] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1953.656969] do_iter_readv_writev+0x476/0x750 [ 1953.657343] ? new_sync_write+0x660/0x660 [ 1953.657677] ? avc_policy_seqno+0x9/0x70 [ 1953.658012] ? selinux_file_permission+0x92/0x520 [ 1953.658410] ? security_file_permission+0xb1/0xe0 [ 1953.658800] do_iter_write+0x191/0x700 [ 1953.659126] ? trace_hardirqs_on+0x5b/0x180 [ 1953.659486] vfs_iter_write+0x70/0xa0 [ 1953.659803] iter_file_splice_write+0x762/0xc30 [ 1953.660200] ? generic_splice_sendpage+0x140/0x140 [ 1953.660611] ? security_file_permission+0xb1/0xe0 [ 1953.661008] ? generic_splice_sendpage+0x140/0x140 [ 1953.661411] direct_splice_actor+0x10f/0x170 [ 1953.661774] splice_direct_to_actor+0x387/0x980 [ 1953.662159] ? pipe_to_sendpage+0x380/0x380 [ 1953.662506] ? do_splice_to+0x160/0x160 [ 1953.662839] ? security_file_permission+0xb1/0xe0 [ 1953.663242] do_splice_direct+0x1c4/0x290 [ 1953.663579] ? splice_direct_to_actor+0x980/0x980 [ 1953.663986] ? avc_policy_seqno+0x9/0x70 [ 1953.664323] ? security_file_permission+0xb1/0xe0 [ 1953.664715] do_sendfile+0x553/0x11e0 [ 1953.665039] ? do_pwritev+0x270/0x270 [ 1953.665350] ? wait_for_completion_io+0x270/0x270 [ 1953.665739] ? rcu_read_lock_any_held+0x75/0xa0 [ 1953.666122] ? vfs_write+0x354/0xb10 [ 1953.666426] __x64_sys_sendfile64+0x1d1/0x210 [ 1953.666785] ? __ia32_sys_sendfile+0x220/0x220 [ 1953.667168] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1953.667587] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1953.668019] do_syscall_64+0x33/0x40 [ 1953.668326] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1953.668743] RIP: 0033:0x7f8caec11b19 [ 1953.669043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1953.670517] RSP: 002b:00007f8cac187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1953.671137] RAX: ffffffffffffffda RBX: 00007f8caed24f60 RCX: 00007f8caec11b19 [ 1953.671708] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1953.672282] RBP: 00007f8cac1871d0 R08: 0000000000000000 R09: 0000000000000000 [ 1953.672847] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000002 [ 1953.673420] R13: 00007fff84cedf2f R14: 00007f8cac187300 R15: 0000000000022000 13:32:18 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5441, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:32:18 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:32:33 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r3 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, &(0x7f0000000180), 0x40, 0x0) preadv(r4, &(0x7f0000001600)=[{&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f00000002c0)=""/195, 0xc3}, {&(0x7f0000000140)=""/10, 0xa}, {&(0x7f0000000500)=""/215, 0xd7}, {&(0x7f0000000180)=""/20, 0x14}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x6, 0x5, 0x4) lseek(0xffffffffffffffff, 0x7, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r5, r2, 0x0, 0x7ffffff9) 13:32:33 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:32:33 executing program 2: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x30da27429968b93f, r1, 0x8000000) r3 = dup2(r2, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) 13:32:33 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 13:32:33 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r0, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffffff9) 13:32:33 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000008) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:32:33 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5450, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:32:33 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 17) [ 1968.157517] FAULT_INJECTION: forcing a failure. [ 1968.157517] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1968.159883] CPU: 0 PID: 11594 Comm: syz-executor.6 Not tainted 5.10.220 #1 [ 1968.161186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1968.162533] Call Trace: [ 1968.163044] dump_stack+0x107/0x167 [ 1968.163590] should_fail.cold+0x5/0xa [ 1968.164182] __alloc_pages_nodemask+0x182/0x600 [ 1968.164876] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1968.165771] ? find_get_entry+0x2c8/0x740 [ 1968.166387] ? balance_dirty_pages_ratelimited+0x43e/0x1ff0 [ 1968.167246] alloc_pages_current+0x187/0x280 [ 1968.167934] __page_cache_alloc+0x2d2/0x360 [ 1968.168575] ? mark_buffer_dirty+0x346/0x3d0 [ 1968.169240] pagecache_get_page+0x2c7/0xc80 [ 1968.169878] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1968.170822] ? __blkdev_direct_IO_simple+0x930/0x930 [ 1968.171654] grab_cache_page_write_begin+0x64/0xa0 [ 1968.172578] block_write_begin+0x33/0x1d0 [ 1968.173258] generic_perform_write+0x20a/0x4f0 [ 1968.174115] ? __mnt_drop_write_file+0x9/0x70 [ 1968.174855] ? page_cache_prev_miss+0x310/0x310 [ 1968.175733] ? evict_inodes+0x420/0x420 [ 1968.176413] __generic_file_write_iter+0x39d/0x5d0 [ 1968.177342] blkdev_write_iter+0x298/0x550 [ 1968.177989] ? bd_unlink_disk_holder+0x3f0/0x3f0 [ 1968.178868] ? direct_splice_actor+0x10f/0x170 [ 1968.179614] ? splice_direct_to_actor+0x387/0x980 [ 1968.180511] ? do_splice_direct+0x1c4/0x290 [ 1968.181224] ? do_sendfile+0x553/0x11e0 [ 1968.181957] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1968.182709] ? do_syscall_64+0x33/0x40 [ 1968.183424] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1968.184232] do_iter_readv_writev+0x476/0x750 [ 1968.185077] ? new_sync_write+0x660/0x660 [ 1968.185753] ? avc_policy_seqno+0x9/0x70 [ 1968.186509] ? selinux_file_permission+0x92/0x520 [ 1968.187242] ? security_file_permission+0xb1/0xe0 [ 1968.187994] do_iter_write+0x191/0x700 [ 1968.188722] ? trace_hardirqs_on+0x5b/0x180 [ 1968.189431] vfs_iter_write+0x70/0xa0 [ 1968.190148] iter_file_splice_write+0x762/0xc30 [ 1968.190864] ? generic_splice_sendpage+0x140/0x140 [ 1968.191616] ? security_file_permission+0xb1/0xe0 [ 1968.192353] ? generic_splice_sendpage+0x140/0x140 [ 1968.193089] direct_splice_actor+0x10f/0x170 [ 1968.193750] splice_direct_to_actor+0x387/0x980 [ 1968.194458] ? pipe_to_sendpage+0x380/0x380 [ 1968.195109] ? do_splice_to+0x160/0x160 [ 1968.195697] ? security_file_permission+0xb1/0xe0 [ 1968.196431] do_splice_direct+0x1c4/0x290 [ 1968.197183] ? splice_direct_to_actor+0x980/0x980 [ 1968.197900] ? avc_policy_seqno+0x9/0x70 [ 1968.198558] ? security_file_permission+0xb1/0xe0 [ 1968.199277] do_sendfile+0x553/0x11e0 [ 1968.199862] ? do_pwritev+0x270/0x270 [ 1968.200434] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 1968.201076] ? tick_program_event+0xa8/0x140 [ 1968.201746] __x64_sys_sendfile64+0x1d1/0x210 [ 1968.202596] ? __ia32_sys_sendfile+0x220/0x220 [ 1968.203286] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1968.204102] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1968.204876] do_syscall_64+0x33/0x40 [ 1968.205437] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1968.206201] RIP: 0033:0x7f8caec11b19 [ 1968.206759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1968.209447] RSP: 002b:00007f8cac187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1968.210577] RAX: ffffffffffffffda RBX: 00007f8caed24f60 RCX: 00007f8caec11b19 [ 1968.211637] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1968.212699] RBP: 00007f8cac1871d0 R08: 0000000000000000 R09: 0000000000000000 [ 1968.213739] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000002 [ 1968.214785] R13: 00007fff84cedf2f R14: 00007f8cac187300 R15: 0000000000022000 13:32:33 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5451, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:32:47 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000009) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:32:47 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 13:32:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x8) r2 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000180), 0x40, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000001dc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) r4 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, &(0x7f0000000180), 0x40, 0x0) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) recvmmsg$unix(r3, &(0x7f0000001c00)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000001680)=[{&(0x7f0000000240)=""/105, 0x69}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/238, 0xee}, {&(0x7f0000001500)=""/135, 0x87}, {&(0x7f00000015c0)=""/142, 0x8e}, {&(0x7f00000003c0)=""/66, 0x42}], 0x6, &(0x7f0000001700)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001740), 0x6e, &(0x7f0000001b00)=[{&(0x7f00000017c0)=""/114, 0x72}, {&(0x7f0000001840)=""/80, 0x50}, {&(0x7f00000018c0)=""/74, 0x4a}, {&(0x7f0000001940)=""/148, 0x94}, {&(0x7f0000001a00)=""/252, 0xfc}], 0x5, &(0x7f0000001b80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}], 0x2, 0xe1b6a5142f3c9528, &(0x7f0000001c80)={0x0, 0x3938700}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), 0x1000, &(0x7f0000001cc0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap}, {@dfltuid={'dfltuid', 0x3d, r6}}, {@privport}, {@access_user}, {@posixacl}], [{@euid_eq={'euid', 0x3d, r7}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'iso9660\x00'}}, {@pcr={'pcr', 0x3d, 0x1e}}, {@seclabel}, {@subj_role={'subj_role', 0x3d, '{.\xf3+\\/'}}]}}) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:32:47 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5452, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:32:47 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002800)=@IORING_OP_WRITE={0x17, 0x4, 0x2004, @fd_index, 0x0, &(0x7f0000000440)="17018d", 0x3, 0x8}, 0x6) r3 = accept$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x1c) writev(r3, &(0x7f0000002740)=[{&(0x7f00000002c0)="57d1cdee424e6c104dfcf55cf61d4a8a3a80a9d7e4852a36694ed8db0565b74d049efeb9b4413545328514b8ae3149d381d88b04bb7ff07f47b1cfc6946c29523b997917701dbedf17905a8dd2d9ce1f1022eb1c31066cc40cb5f45f04b1d9e85222e405e6ecf92f94335adac99ec43e86a92bbd71d977b19978ecb2b1aeb8fa0669a0f6ab3b43c822b8deb451d23c8b5db8cbd8332893b130317ee50b2c383df1d3ad878b0255dfeb4ba64f1b934af94f376b319be6", 0xb6}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000380)="6c70a0b180df632ac26bb8400054d13df25953f96729b2b3b668bcee5cc9a8b6e3cab0b79bcf7258d110b43c9e0066386797aa5b15f0d8075037f3a58e54c15be3", 0x41}, {&(0x7f0000000180)="3f3c87033fcd9ed270a0b9a3a2ab6d39f557d340fbf19ebe6a411551e428e0b53feb3bdac52df8a5ec", 0x29}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000000240)="0006d6804a367f02c92a98", 0xb}, {&(0x7f0000002500)="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", 0xfa}, {&(0x7f0000002600)="7d346c07967df78d41b9f59da29ef3605104dddf9df857621845d1db6f30363dbee83217aaaae5eab3d9c9b9dc4fd812a180b2a4946aa3bfe2859495a1db84b1a5221b4b681d858ab8653fbf3c196b1c9de2c2242942c0354bb53c864691455b7da5e046fd47a28fa26b", 0x6a}, {&(0x7f0000002680)="a4474247ab28993adbaf958d20a958820c06a82819eb8d3b7796e2e35268659a169bd099f6fee559ae407666af2e015a24fe6af3dfce10137d874086826c90f2a3790ab8210b6c7cb392e03642acf434d2e233360688149354ae83023ce639ad922f08e9d3392fe79ebd8592148245e6e6a2cccaafe5c7d63e74f905f40419605d35fbf292de7eff7a78f9fb28f7a101d8964ea16ed48c7d57c0cc70c3ab7bd2e45349", 0xa3}], 0x9) lseek(0xffffffffffffffff, 0x7, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r1, 0x0, 0x7ffffff9) 13:32:47 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 18) 13:32:47 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:32:47 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) pidfd_getfd(r0, r1, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:32:47 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x545d, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:32:47 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5460, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:32:47 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) [ 1982.703413] FAULT_INJECTION: forcing a failure. [ 1982.703413] name failslab, interval 1, probability 0, space 0, times 0 [ 1982.705568] CPU: 0 PID: 11650 Comm: syz-executor.6 Not tainted 5.10.220 #1 [ 1982.706545] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1982.708183] Call Trace: [ 1982.708617] dump_stack+0x107/0x167 [ 1982.709284] should_fail.cold+0x5/0xa [ 1982.709837] ? create_object.isra.0+0x3a/0xa20 [ 1982.710492] should_failslab+0x5/0x20 [ 1982.711050] kmem_cache_alloc+0x5b/0x310 [ 1982.711632] create_object.isra.0+0x3a/0xa20 [ 1982.712275] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1982.713003] kmem_cache_alloc+0x159/0x310 [ 1982.713764] alloc_buffer_head+0x20/0x110 [ 1982.714359] alloc_page_buffers+0x14d/0x700 [ 1982.715170] create_empty_buffers+0x2c/0x640 [ 1982.715867] create_page_buffers+0x1bb/0x230 [ 1982.716701] __block_write_begin_int+0x1d1/0x19c0 [ 1982.717397] ? __blkdev_direct_IO_simple+0x930/0x930 [ 1982.718124] ? add_to_page_cache_locked+0x40/0x40 [ 1982.719023] ? __page_cache_alloc+0x10d/0x360 [ 1982.719657] ? mark_buffer_dirty+0x346/0x3d0 [ 1982.720479] ? remove_inode_buffers+0x300/0x300 [ 1982.721151] ? pagecache_get_page+0x243/0xc80 [ 1982.721972] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1982.722696] ? wait_for_stable_page+0x92/0xe0 [ 1982.723525] ? __blkdev_direct_IO_simple+0x930/0x930 [ 1982.724352] block_write_begin+0x58/0x1d0 [ 1982.724943] generic_perform_write+0x20a/0x4f0 [ 1982.725600] ? __mnt_drop_write_file+0x9/0x70 [ 1982.726231] ? page_cache_prev_miss+0x310/0x310 [ 1982.726891] ? evict_inodes+0x420/0x420 [ 1982.727459] ? I_BDEV+0x9/0x20 [ 1982.728064] __generic_file_write_iter+0x39d/0x5d0 [ 1982.728774] blkdev_write_iter+0x298/0x550 [ 1982.729556] ? bd_unlink_disk_holder+0x3f0/0x3f0 [ 1982.730242] ? direct_splice_actor+0x10f/0x170 [ 1982.731065] ? splice_direct_to_actor+0x387/0x980 [ 1982.731834] ? do_splice_direct+0x1c4/0x290 [ 1982.732630] ? do_sendfile+0x553/0x11e0 [ 1982.733199] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1982.733869] do_iter_readv_writev+0x476/0x750 [ 1982.734700] ? new_sync_write+0x660/0x660 [ 1982.735355] ? avc_policy_seqno+0x9/0x70 [ 1982.736112] ? selinux_file_permission+0x92/0x520 [ 1982.736806] ? security_file_permission+0xb1/0xe0 [ 1982.737501] do_iter_write+0x191/0x700 [ 1982.738074] vfs_iter_write+0x70/0xa0 [ 1982.738621] iter_file_splice_write+0x762/0xc30 [ 1982.739297] ? generic_splice_sendpage+0x140/0x140 [ 1982.740017] ? security_file_permission+0xb1/0xe0 [ 1982.740704] ? generic_splice_sendpage+0x140/0x140 [ 1982.741399] direct_splice_actor+0x10f/0x170 [ 1982.742026] splice_direct_to_actor+0x387/0x980 [ 1982.742879] ? pipe_to_sendpage+0x380/0x380 [ 1982.743502] ? do_splice_to+0x160/0x160 [ 1982.744087] ? security_file_permission+0xb1/0xe0 [ 1982.744778] do_splice_direct+0x1c4/0x290 [ 1982.745375] ? splice_direct_to_actor+0x980/0x980 [ 1982.746259] ? avc_policy_seqno+0x9/0x70 [ 1982.746937] ? security_file_permission+0xb1/0xe0 [ 1982.747833] do_sendfile+0x553/0x11e0 [ 1982.748465] ? do_pwritev+0x270/0x270 [ 1982.749179] ? wait_for_completion_io+0x270/0x270 [ 1982.749890] ? rcu_read_lock_any_held+0x75/0xa0 [ 1982.750758] ? vfs_write+0x354/0xb10 [ 1982.751368] __x64_sys_sendfile64+0x1d1/0x210 [ 1982.752199] ? __ia32_sys_sendfile+0x220/0x220 [ 1982.752924] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1982.753880] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1982.754619] do_syscall_64+0x33/0x40 [ 1982.755307] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1982.756052] RIP: 0033:0x7f8caec11b19 [ 1982.756755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 13:32:47 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x40049409, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) [ 1982.759324] RSP: 002b:00007f8cac187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1982.760898] RAX: ffffffffffffffda RBX: 00007f8caed24f60 RCX: 00007f8caec11b19 [ 1982.762212] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1982.763511] RBP: 00007f8cac1871d0 R08: 0000000000000000 R09: 0000000000000000 [ 1982.764839] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000002 [ 1982.766140] R13: 00007fff84cedf2f R14: 00007f8cac187300 R15: 0000000000022000 13:32:47 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:32:47 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="f44ff80274c3ca18073d5f808ce85c07ab402e151ff853834e3a728acd09c81301eb853c4cbc9ed4ce62fb077c934a822b1ee7bb6c2a0edd2055b704fafd91eb91f7678bbc43719ef7cc554f50dd58004ae1a588f12332bc4a0e174c75db007ac483bfcf4397d70159bcdd7c2c92a955cb051ddb5fc06bce0480c20764a8232c9ed8f4195282cae75bad3ea3eba355d61b940b7d15ca33f7a4c19742580b4387d7714835d354eb723eeea7708a4ebbdeb853bb31fa74d84bd019d5", 0xbb, 0x10001}], 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:32:48 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x40086602, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:32:48 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(r1, &(0x7f00000000c0)='./file1\x00', 0x101) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) r4 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, &(0x7f0000000180), 0x40, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000007, 0x110, r5, 0xe63ce000) sendfile(r3, r2, 0x0, 0x7ffffff9) [ 1983.110722] audit: type=1400 audit(1719840768.214:51): avc: denied { execute } for pid=11693 comm="syz-executor.7" path="pipe:[43922]" dev="pipefs" ino=43922 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 13:33:00 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x40087602, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:33:00 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x8000000) syncfs(r4) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:33:00 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 13:33:00 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 19) 13:33:00 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xe041, 0xa0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) syz_mount_image$nfs(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x6, 0x8, &(0x7f0000000780)=[{&(0x7f0000000180)="2e8b4b89d2dcef017b60382d3aa5ff4ff33404e22d49c9a104b0aea742d428f16e3a5e9afe2fbb77e5994207de16c4", 0x2f}, {&(0x7f0000000240)="cb0cc5d9f5a2db51eb7719b53700703d50b326febba12183be7f9ceb5eb440d50a51eb0f514da57f248bb475b57d09abef077c7cc23122b7902f041fae2de4c8abe37ae00b3ff54c635fef2316a5446b079c448d2ff7dfa16cb77387a942402d8f4b490078572ac1b966128cb7c4a491cc0b037698055949279cde6a0781a8caeccd21c5d6a4b7925cfca494d274dcf3b1945bcad798d010e53cfee73133cc5cfbdd08c6e0ecee4f5950a14fb3adca2f05771038d76d6b618b3219afab69d1ce395ab7747da4ab70848f5bd45e5f314f2c17342c24c9fd2e38191dc598e8c872c42e121b", 0xe4, 0x5}, {&(0x7f0000000500)="8e8ad689ef3cbddabd8c0a63a25679633dc46361eb72fb6fb4f6fb385dac5e1b66f98cdc514fcb98f36548bfa251abee61d224f3bb6b83bd14df75036029192758e0aead434acd1b04178fad250c0ce8bc21f5ac1fcae75affcbfda3ad859af7182099b3201467814fae6e3bfdc8f6a9724e358dffd731ab22ad84aee39b6a485f18a1a9cce9d3bce7f745ad", 0x8c, 0xffffffff}, {&(0x7f00000001c0)="83ef3ebfc0a61da5bf029d582e8a40770d83a4221f928134beeea6fa5fd792b75271ff2ace575ad7758e5f2a86", 0x2d, 0x20}, {&(0x7f00000003c0), 0x0, 0x17}, {&(0x7f00000005c0)="4845d0aa08dc9804aeba9775a0861cb107a28d4629b26b4b1cfad34b3a8cb21b634aa1ef7ffc3e9ea63f24ad702cb13359bd69d0ab12bc8258c9e0a0985c74818938ef8682233757bda4d8039ee28c96f157b0b9977b3c75d9b0aeeeaedbea36dc7d4ac258e1a2fdb8d280363aeaa400e2bce6e4f641191a03af1c4e2b3b0ef776e44e7dcaac5964d5177a46465620256897af819c06aa14682b8e075d8ec67e7e2cd94076f18abf2775e1ace172be73deb3fd3066c3ce076d", 0xb9, 0x401}, {&(0x7f0000000440)="d5e20e359dc5d105c60c7491e1435934ff6c01f0e35dadd4c4224b8613", 0x1d, 0xffffffff}, {&(0x7f0000000680)="e493ae12bda0a343995497fe2e21adf8c78ee815096dc637b632f87f21474d4fe4f84e885c3d0fd986544846420e35e22c4a98017d222fe69dd4c3531ccd6afda8199f681daf68a5ccf7a66bc618cd4e84e33d0bdea3f90e2f37c530b098010cdba96b2f544627a4870148275ef08f99e3efbd88ae08b35bcf4c0f25363b26acfa680c824d0e0d3a63f3b177e621dfd136d2ef45cf23b217c511ce026074d26ebf603baad801c4fe3434bf0c0ad40ffcba4e7ab80ba9b80b9763076477983f07c1c646f500e96a17cd49c4cda6beb12d11d264427e066579de61711110dcc7", 0xdf, 0x6}], 0x40, &(0x7f0000000900)={[{'\xe2'}, {'iso9660\x00'}], [{@euid_eq}, {@context={'context', 0x3d, 'system_u'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@uid_gt}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@smackfsroot={'smackfsroot', 0x3d, 'iso9660\x00'}}]}) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:33:00 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:33:00 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000000a) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:33:00 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[r3, r0, 0xffffffffffffffff, r0, r4, 0xffffffffffffffff], 0x6, 0x0, 0x1}, 0xed) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r5, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44410}, 0x20000000) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:33:01 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0xa2000, 0x1b0) r2 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) r4 = timerfd_create(0x5, 0x800) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, &(0x7f0000000180), 0x40, 0x0) mkdirat(r5, &(0x7f00000000c0)='./file1\x00', 0x1) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ef}], 0x800400, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:33:01 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) [ 1996.063195] FAULT_INJECTION: forcing a failure. [ 1996.063195] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1996.065597] CPU: 0 PID: 11718 Comm: syz-executor.6 Not tainted 5.10.220 #1 [ 1996.066585] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1996.067756] Call Trace: [ 1996.068156] dump_stack+0x107/0x167 [ 1996.068680] should_fail.cold+0x5/0xa [ 1996.069242] __alloc_pages_nodemask+0x182/0x600 [ 1996.069978] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1996.070928] ? find_get_entry+0x2c8/0x740 [ 1996.071535] ? balance_dirty_pages_ratelimited+0x43e/0x1ff0 [ 1996.072386] alloc_pages_current+0x187/0x280 [ 1996.073078] __page_cache_alloc+0x2d2/0x360 [ 1996.073754] ? mark_buffer_dirty+0x346/0x3d0 [ 1996.074416] pagecache_get_page+0x2c7/0xc80 [ 1996.075032] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1996.075866] ? __blkdev_direct_IO_simple+0x930/0x930 [ 1996.076670] grab_cache_page_write_begin+0x64/0xa0 [ 1996.077441] block_write_begin+0x33/0x1d0 [ 1996.078095] generic_perform_write+0x20a/0x4f0 [ 1996.078824] ? __mnt_drop_write_file+0x9/0x70 [ 1996.079526] ? page_cache_prev_miss+0x310/0x310 [ 1996.080261] ? evict_inodes+0x420/0x420 [ 1996.080894] __generic_file_write_iter+0x39d/0x5d0 [ 1996.081667] blkdev_write_iter+0x298/0x550 [ 1996.082335] ? bd_unlink_disk_holder+0x3f0/0x3f0 [ 1996.083083] ? direct_splice_actor+0x10f/0x170 [ 1996.083794] ? splice_direct_to_actor+0x387/0x980 [ 1996.084551] ? do_splice_direct+0x1c4/0x290 [ 1996.085225] ? do_sendfile+0x553/0x11e0 [ 1996.085849] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1996.086573] ? do_syscall_64+0x33/0x40 [ 1996.087182] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1996.088020] do_iter_readv_writev+0x476/0x750 [ 1996.088731] ? new_sync_write+0x660/0x660 [ 1996.089378] ? avc_policy_seqno+0x9/0x70 [ 1996.090013] ? selinux_file_permission+0x92/0x520 [ 1996.090775] ? security_file_permission+0xb1/0xe0 [ 1996.091537] do_iter_write+0x191/0x700 [ 1996.092158] ? trace_hardirqs_on+0x5b/0x180 [ 1996.092840] vfs_iter_write+0x70/0xa0 [ 1996.093441] iter_file_splice_write+0x762/0xc30 [ 1996.094185] ? generic_splice_sendpage+0x140/0x140 [ 1996.094971] ? security_file_permission+0xb1/0xe0 [ 1996.095728] ? generic_splice_sendpage+0x140/0x140 [ 1996.096503] direct_splice_actor+0x10f/0x170 [ 1996.097194] splice_direct_to_actor+0x387/0x980 [ 1996.097928] ? pipe_to_sendpage+0x380/0x380 [ 1996.098608] ? do_splice_to+0x160/0x160 [ 1996.099234] ? security_file_permission+0xb1/0xe0 [ 1996.099996] do_splice_direct+0x1c4/0x290 [ 1996.100652] ? splice_direct_to_actor+0x980/0x980 [ 1996.101403] ? avc_policy_seqno+0x9/0x70 [ 1996.102051] ? security_file_permission+0xb1/0xe0 [ 1996.102816] do_sendfile+0x553/0x11e0 [ 1996.103425] ? do_pwritev+0x270/0x270 [ 1996.104028] ? wait_for_completion_io+0x270/0x270 [ 1996.104800] ? rcu_read_lock_any_held+0x75/0xa0 [ 1996.105530] ? vfs_write+0x354/0xb10 [ 1996.106123] __x64_sys_sendfile64+0x1d1/0x210 [ 1996.106834] ? __ia32_sys_sendfile+0x220/0x220 [ 1996.107554] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1996.108384] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1996.109192] do_syscall_64+0x33/0x40 [ 1996.109780] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1996.110577] RIP: 0033:0x7f8caec11b19 [ 1996.111160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1996.114015] RSP: 002b:00007f8cac187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1996.115202] RAX: ffffffffffffffda RBX: 00007f8caed24f60 RCX: 00007f8caec11b19 [ 1996.116318] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1996.117423] RBP: 00007f8cac1871d0 R08: 0000000000000000 R09: 0000000000000000 [ 1996.118537] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000002 [ 1996.119652] R13: 00007fff84cedf2f R14: 00007f8cac187300 R15: 0000000000022000 13:33:01 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x4, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:33:01 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x4020940d, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:33:01 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f00000000c0)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:33:01 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:33:01 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 20) 13:33:01 executing program 2: unshare(0x80000000) syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) openat(r2, &(0x7f00000000c0)='./file1\x00', 0x420401, 0x160) r4 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) sendfile(r3, r4, 0x0, 0x7) 13:33:01 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x80045432, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:33:01 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x80045440, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) [ 1996.614365] FAULT_INJECTION: forcing a failure. [ 1996.614365] name failslab, interval 1, probability 0, space 0, times 0 [ 1996.616087] CPU: 0 PID: 11773 Comm: syz-executor.6 Not tainted 5.10.220 #1 [ 1996.617088] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1996.618291] Call Trace: [ 1996.618680] dump_stack+0x107/0x167 [ 1996.619212] should_fail.cold+0x5/0xa [ 1996.619766] ? create_object.isra.0+0x3a/0xa20 [ 1996.620434] should_failslab+0x5/0x20 [ 1996.620982] kmem_cache_alloc+0x5b/0x310 [ 1996.621574] create_object.isra.0+0x3a/0xa20 [ 1996.622210] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1996.622948] kmem_cache_alloc+0x159/0x310 [ 1996.623544] alloc_buffer_head+0x20/0x110 [ 1996.624154] alloc_page_buffers+0x14d/0x700 [ 1996.624779] create_empty_buffers+0x2c/0x640 [ 1996.625412] create_page_buffers+0x1bb/0x230 [ 1996.626057] __block_write_begin_int+0x1d1/0x19c0 [ 1996.626740] ? __blkdev_direct_IO_simple+0x930/0x930 [ 1996.627485] ? add_to_page_cache_locked+0x40/0x40 [ 1996.628185] ? __page_cache_alloc+0x10d/0x360 [ 1996.628839] ? mark_buffer_dirty+0x346/0x3d0 [ 1996.629466] ? remove_inode_buffers+0x300/0x300 [ 1996.630150] ? pagecache_get_page+0x243/0xc80 [ 1996.630790] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1996.631526] ? wait_for_stable_page+0x92/0xe0 [ 1996.632175] ? __blkdev_direct_IO_simple+0x930/0x930 [ 1996.632911] block_write_begin+0x58/0x1d0 [ 1996.633501] generic_perform_write+0x20a/0x4f0 [ 1996.634192] ? __mnt_drop_write_file+0x9/0x70 [ 1996.634828] ? page_cache_prev_miss+0x310/0x310 [ 1996.635512] ? evict_inodes+0x420/0x420 [ 1996.636389] __generic_file_write_iter+0x39d/0x5d0 [ 1996.637274] blkdev_write_iter+0x298/0x550 [ 1996.638048] ? bd_unlink_disk_holder+0x3f0/0x3f0 [ 1996.638881] ? direct_splice_actor+0x10f/0x170 [ 1996.639701] ? splice_direct_to_actor+0x387/0x980 [ 1996.640551] ? do_splice_direct+0x1c4/0x290 [ 1996.641290] ? do_sendfile+0x553/0x11e0 [ 1996.641866] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1996.642554] ? do_syscall_64+0x33/0x40 [ 1996.643116] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1996.643909] do_iter_readv_writev+0x476/0x750 [ 1996.644566] ? new_sync_write+0x660/0x660 [ 1996.645183] ? avc_policy_seqno+0x9/0x70 [ 1996.645782] ? selinux_file_permission+0x92/0x520 [ 1996.646502] ? security_file_permission+0xb1/0xe0 [ 1996.647221] do_iter_write+0x191/0x700 [ 1996.647800] ? trace_hardirqs_on+0x5b/0x180 [ 1996.648451] vfs_iter_write+0x70/0xa0 [ 1996.649018] iter_file_splice_write+0x762/0xc30 [ 1996.649719] ? generic_splice_sendpage+0x140/0x140 [ 1996.650464] ? security_file_permission+0xb1/0xe0 [ 1996.651163] ? generic_splice_sendpage+0x140/0x140 [ 1996.651889] direct_splice_actor+0x10f/0x170 [ 1996.652554] splice_direct_to_actor+0x387/0x980 [ 1996.653246] ? pipe_to_sendpage+0x380/0x380 [ 1996.653887] ? do_splice_to+0x160/0x160 [ 1996.654479] ? security_file_permission+0xb1/0xe0 [ 1996.655199] do_splice_direct+0x1c4/0x290 [ 1996.655812] ? splice_direct_to_actor+0x980/0x980 [ 1996.656529] ? avc_policy_seqno+0x9/0x70 [ 1996.657127] ? security_file_permission+0xb1/0xe0 [ 1996.657848] do_sendfile+0x553/0x11e0 [ 1996.658422] ? do_pwritev+0x270/0x270 [ 1996.658989] ? wait_for_completion_io+0x270/0x270 [ 1996.659704] ? rcu_read_lock_any_held+0x75/0xa0 [ 1996.660399] ? vfs_write+0x354/0xb10 [ 1996.660958] __x64_sys_sendfile64+0x1d1/0x210 [ 1996.661622] ? __ia32_sys_sendfile+0x220/0x220 [ 1996.662305] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1996.663076] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1996.663825] do_syscall_64+0x33/0x40 [ 1996.664384] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1996.665146] RIP: 0033:0x7f8caec11b19 [ 1996.665706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1996.668418] RSP: 002b:00007f8cac187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1996.669543] RAX: ffffffffffffffda RBX: 00007f8caed24f60 RCX: 00007f8caec11b19 [ 1996.670593] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1996.671640] RBP: 00007f8cac1871d0 R08: 0000000000000000 R09: 0000000000000000 [ 1996.672702] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000002 [ 1996.673754] R13: 00007fff84cedf2f R14: 00007f8cac187300 R15: 0000000000022000 13:33:01 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x80086601, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:33:01 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:33:01 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000000c) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:33:01 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 13:33:01 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x80087601, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:33:02 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)=0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r2, 0x0, 0x7ffffff9) r6 = syz_io_uring_setup(0x105a7, &(0x7f0000000240)={0x0, 0xbeb1, 0x8, 0x0, 0xfd, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20840, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r9}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r10, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r12, &(0x7f0000000180), 0x40, 0x0) syz_io_uring_submit(r10, r5, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0x6, 0x8000, {0x0, r3}, 0x3, 0x0, 0x0, {0x0, 0x0, r11}}, 0x401) 13:33:16 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:33:16 executing program 0: r0 = syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x1000002, 0x13, r1, 0x0) syz_io_uring_setup(0x5abf, &(0x7f0000000140)={0x0, 0xbbf3, 0x20, 0x1, 0x2f1, 0x0, r1}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0}, 0x5) close(0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = dup2(r5, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, r7, 0xf8f7f000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x3, 0x0, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x4000000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x2e5022, 0x0) sendfile(r8, r6, 0x0, 0x7ffffff9) 13:33:16 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000000d) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:33:16 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 13:33:16 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0xc0045878, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:33:16 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 21) 13:33:16 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x7, &(0x7f00000017c0)=[{&(0x7f0000000140)="e694443d9d83f729da5d846e2ff1ccd0900984", 0x13, 0x84}, {&(0x7f0000000240)="a1aa11caa53834a2a6a7c2086c9f7affad9d3641c934226122d72a89c61e08785979efb60aa91e3245a7b6f0a62a025f26a7203c3a6ee668405a37aa5987c96a0dca9d84ac4bca565f57cd03dd67f176ffcf20e759e4920f06bacb4d37ad24ae211d031bcb8f2af76e850587722252ae5c4e1bfb95ff80040adcf04a4e5b8ccf4370c722ef1ed7893ecd6d70f997fa2ec38a1e6ed181259b65daec0fdd935da8d75114192dd5a0792f5943465e34e620b9885e436870fafd4a5959fc94a59eac367c68882521ae17f06742417f398ba55ea6b6bfb64301324445563b9104", 0xde, 0x3}, {&(0x7f0000000140)}, {&(0x7f0000000500)="d5e2a116ed4f1219c9ced22b751d4846238e20c982b7e32e9a07da97b09b5f26a2113c9dcdf45a19e9899b13d9d9bd9d233017bbc8689caecefffadff239fb7b79c96ecf74569143296a1fde72269180ec7c10b5f8e7add772d02f576b62e238ae26184e8062283620a5979eeecf4a7dbe614a27b7339eebe12f6ed4bb5f34f7335417b35f4cab8f1167620dfc38f016bbaf6421e1bf9a3a760779b6ee17018cf942ffe4afd14cb3ecfcaa8d41884f16737fdd7f113ffd7d2fd863581b62063ec4af1503b5336485", 0xc8, 0x7}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="b31311e1fff27b5a607f16a70eca28fff1e4cd667dc22af3724f9508584678908b4a628f59b9237e0b4b6756fbac7100c0f4df116f79b3025cde0b6b1222366634eda1dc56e0489f9bb27f557de2e58767dd44d1575b4fc76140947708024f018de654b566497d6d163f1d19d1363e859ffe08aeac402ccc5b3364367afafa438e08b432896cc5eac0c045cd44453209e15def10ca69c5d3e6852698cf2914d3a0083f6590905b686be0d6aaa4a6c79649be815a2b3d57850dfb0dd9a08109727025fb9b907ccb4218db9543cc9201d17c", 0xd1, 0x4}, {&(0x7f0000001700)="84e926889612f679833b4aeba554172370a8b44ea00c01a76109999f107d75839383e941e9d790997f6e1f4f7985fb5a32e5326eed784902c7e394028ce114510f40368637bfe0b95b91e8de241e2bd6315cfabd3365e6e20459f1013e43cb08e69ba8cfa05a921e26efca2dcaee8cd6bdc66dc659fb19958e2290cbdfa56654cbca0fdce4895e4bc64623bd9c30c692", 0x90, 0x10001}], 0x3a12ca7, &(0x7f0000000200)=ANY=[]) openat(r2, &(0x7f00000000c0)='./file1\x00', 0x101040, 0xb) lseek(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:33:16 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4307, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ftruncate(r4, 0x0) r5 = timerfd_create(0xebf24cf8dd928328, 0x80000) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, &(0x7f0000000180), 0x40, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r6, 0x8008f513, &(0x7f00000000c0)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) [ 2011.152701] FAULT_INJECTION: forcing a failure. [ 2011.152701] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2011.155147] CPU: 1 PID: 11841 Comm: syz-executor.6 Not tainted 5.10.220 #1 [ 2011.156292] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2011.157479] Call Trace: [ 2011.157872] dump_stack+0x107/0x167 [ 2011.158405] should_fail.cold+0x5/0xa [ 2011.158959] __alloc_pages_nodemask+0x182/0x600 [ 2011.159634] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2011.160507] ? find_get_entry+0x2c8/0x740 [ 2011.161112] ? balance_dirty_pages_ratelimited+0x43e/0x1ff0 [ 2011.161929] alloc_pages_current+0x187/0x280 [ 2011.162564] __page_cache_alloc+0x2d2/0x360 [ 2011.163189] ? mark_buffer_dirty+0x346/0x3d0 [ 2011.163834] pagecache_get_page+0x2c7/0xc80 [ 2011.164469] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2011.165325] ? __blkdev_direct_IO_simple+0x930/0x930 [ 2011.166051] grab_cache_page_write_begin+0x64/0xa0 [ 2011.166774] block_write_begin+0x33/0x1d0 [ 2011.167387] generic_perform_write+0x20a/0x4f0 [ 2011.168079] ? __mnt_drop_write_file+0x9/0x70 [ 2011.168745] ? page_cache_prev_miss+0x310/0x310 [ 2011.169538] ? evict_inodes+0x420/0x420 [ 2011.170139] __generic_file_write_iter+0x39d/0x5d0 [ 2011.170861] blkdev_write_iter+0x298/0x550 [ 2011.171485] ? bd_unlink_disk_holder+0x3f0/0x3f0 [ 2011.172197] ? direct_splice_actor+0x10f/0x170 [ 2011.172857] ? splice_direct_to_actor+0x387/0x980 [ 2011.173561] ? do_splice_direct+0x1c4/0x290 [ 2011.174198] ? do_sendfile+0x553/0x11e0 [ 2011.174775] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2011.175458] ? do_syscall_64+0x33/0x40 [ 2011.176029] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2011.176827] do_iter_readv_writev+0x476/0x750 [ 2011.177490] ? new_sync_write+0x660/0x660 [ 2011.178098] ? avc_policy_seqno+0x9/0x70 [ 2011.178698] ? selinux_file_permission+0x92/0x520 [ 2011.179409] ? security_file_permission+0xb1/0xe0 [ 2011.180128] do_iter_write+0x191/0x700 [ 2011.180706] ? trace_hardirqs_on+0x5b/0x180 [ 2011.181347] vfs_iter_write+0x70/0xa0 [ 2011.181911] iter_file_splice_write+0x762/0xc30 [ 2011.182608] ? generic_splice_sendpage+0x140/0x140 [ 2011.183343] ? security_file_permission+0xb1/0xe0 [ 2011.184051] ? generic_splice_sendpage+0x140/0x140 [ 2011.184776] direct_splice_actor+0x10f/0x170 [ 2011.185423] splice_direct_to_actor+0x387/0x980 [ 2011.186108] ? pipe_to_sendpage+0x380/0x380 [ 2011.186737] ? do_splice_to+0x160/0x160 [ 2011.187316] ? security_file_permission+0xb1/0xe0 [ 2011.188021] do_splice_direct+0x1c4/0x290 [ 2011.188631] ? splice_direct_to_actor+0x980/0x980 [ 2011.189326] ? avc_policy_seqno+0x9/0x70 [ 2011.189925] ? security_file_permission+0xb1/0xe0 [ 2011.190631] do_sendfile+0x553/0x11e0 [ 2011.191198] ? do_pwritev+0x270/0x270 [ 2011.191754] ? ksys_write+0x19b/0x260 [ 2011.192322] __x64_sys_sendfile64+0x1d1/0x210 [ 2011.192983] ? __ia32_sys_sendfile+0x220/0x220 [ 2011.193648] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2011.194418] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2011.195164] do_syscall_64+0x33/0x40 [ 2011.195712] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2011.196462] RIP: 0033:0x7f8caec11b19 [ 2011.197004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2011.199640] RSP: 002b:00007f8cac187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2011.200745] RAX: ffffffffffffffda RBX: 00007f8caed24f60 RCX: 00007f8caec11b19 [ 2011.201773] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 2011.202799] RBP: 00007f8cac1871d0 R08: 0000000000000000 R09: 0000000000000000 [ 2011.203827] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000002 [ 2011.204863] R13: 00007fff84cedf2f R14: 00007f8cac187300 R15: 0000000000022000 13:33:29 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 13:33:29 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 22) 13:33:29 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) dup2(r2, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5402}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, &(0x7f0000000180), 0x40, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r4, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@nfc={0x27, 0x1, 0x1, 0x5}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)="44e1a82a5b98f80135fdd5d96d8d7c2a3bb7696a98fab045dbaead49ef1edb579ea1e6ec98b4dae5", 0x28}], 0x1}, 0x0, 0x8000}, 0x8) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x800, 0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x10009ff}], 0x1006062, 0x0) 13:33:29 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:33:29 executing program 7: ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000140)={0x40, 0xfa, 0x73b7}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file1\x00'}) splice(r1, 0x0, r3, &(0x7f0000000180), 0x40, 0x0) r4 = openat(r3, &(0x7f0000000000)='./file1\x00', 0x200, 0x0) r5 = dup2(r4, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x476, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r4, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) openat(r5, &(0x7f00000000c0)='./file1\x00', 0x201, 0x10) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r6, r5, 0x0, 0x7ffffff9) 13:33:29 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000000f) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:33:29 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x7fff, 0x0, &(0x7f0000000200), 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:33:29 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0xc0045878, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:33:29 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0xc0189436, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) [ 2024.299519] FAULT_INJECTION: forcing a failure. [ 2024.299519] name failslab, interval 1, probability 0, space 0, times 0 [ 2024.301666] CPU: 0 PID: 11877 Comm: syz-executor.6 Not tainted 5.10.220 #1 [ 2024.302704] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2024.303933] Call Trace: [ 2024.304414] dump_stack+0x107/0x167 [ 2024.305000] should_fail.cold+0x5/0xa [ 2024.305557] ? create_object.isra.0+0x3a/0xa20 [ 2024.306231] should_failslab+0x5/0x20 [ 2024.306790] kmem_cache_alloc+0x5b/0x310 [ 2024.307386] create_object.isra.0+0x3a/0xa20 [ 2024.308028] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2024.308782] kmem_cache_alloc+0x159/0x310 [ 2024.309389] alloc_buffer_head+0x20/0x110 [ 2024.309993] alloc_page_buffers+0x14d/0x700 [ 2024.310630] create_empty_buffers+0x2c/0x640 [ 2024.311276] create_page_buffers+0x1bb/0x230 [ 2024.311918] __block_write_begin_int+0x1d1/0x19c0 [ 2024.312631] ? __blkdev_direct_IO_simple+0x930/0x930 [ 2024.313376] ? add_to_page_cache_locked+0x40/0x40 [ 2024.314080] ? __page_cache_alloc+0x10d/0x360 [ 2024.314732] ? mark_buffer_dirty+0x346/0x3d0 [ 2024.315378] ? remove_inode_buffers+0x300/0x300 [ 2024.316062] ? pagecache_get_page+0x243/0xc80 [ 2024.316729] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2024.317470] ? wait_for_stable_page+0x92/0xe0 [ 2024.318128] ? __blkdev_direct_IO_simple+0x930/0x930 [ 2024.318865] block_write_begin+0x58/0x1d0 [ 2024.319471] generic_perform_write+0x20a/0x4f0 [ 2024.320150] ? __mnt_drop_write_file+0x9/0x70 [ 2024.320810] ? page_cache_prev_miss+0x310/0x310 [ 2024.321489] ? evict_inodes+0x420/0x420 [ 2024.322084] __generic_file_write_iter+0x39d/0x5d0 [ 2024.322808] blkdev_write_iter+0x298/0x550 [ 2024.323432] ? bd_unlink_disk_holder+0x3f0/0x3f0 [ 2024.324127] ? direct_splice_actor+0x10f/0x170 [ 2024.324800] ? splice_direct_to_actor+0x387/0x980 [ 2024.325499] ? do_splice_direct+0x1c4/0x290 [ 2024.326124] ? do_sendfile+0x553/0x11e0 [ 2024.326705] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2024.327385] ? do_syscall_64+0x33/0x40 [ 2024.327952] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2024.328742] do_iter_readv_writev+0x476/0x750 [ 2024.329402] ? new_sync_write+0x660/0x660 [ 2024.330008] ? avc_policy_seqno+0x9/0x70 [ 2024.330600] ? selinux_file_permission+0x92/0x520 [ 2024.331313] ? security_file_permission+0xb1/0xe0 [ 2024.332030] do_iter_write+0x191/0x700 [ 2024.332605] ? trace_hardirqs_on+0x5b/0x180 [ 2024.333244] vfs_iter_write+0x70/0xa0 [ 2024.333805] iter_file_splice_write+0x762/0xc30 [ 2024.334496] ? generic_splice_sendpage+0x140/0x140 [ 2024.335231] ? security_file_permission+0xb1/0xe0 [ 2024.335936] ? generic_splice_sendpage+0x140/0x140 13:33:29 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) [ 2024.336663] direct_splice_actor+0x10f/0x170 [ 2024.337493] splice_direct_to_actor+0x387/0x980 [ 2024.338148] ? pipe_to_sendpage+0x380/0x380 [ 2024.338761] ? do_splice_to+0x160/0x160 [ 2024.339318] ? security_file_permission+0xb1/0xe0 [ 2024.340000] do_splice_direct+0x1c4/0x290 [ 2024.340588] ? splice_direct_to_actor+0x980/0x980 [ 2024.341275] do_sendfile+0x553/0x11e0 [ 2024.341823] ? do_pwritev+0x270/0x270 [ 2024.342357] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2024.342959] ? tick_program_event+0xa8/0x140 [ 2024.343584] __x64_sys_sendfile64+0x1d1/0x210 [ 2024.344214] ? __ia32_sys_sendfile+0x220/0x220 [ 2024.344893] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2024.345621] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2024.346341] do_syscall_64+0x33/0x40 [ 2024.346864] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2024.347570] RIP: 0033:0x7f8caec11b19 [ 2024.348093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2024.350637] RSP: 002b:00007f8cac187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2024.351687] RAX: ffffffffffffffda RBX: 00007f8caed24f60 RCX: 00007f8caec11b19 [ 2024.352690] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 2024.353673] RBP: 00007f8cac1871d0 R08: 0000000000000000 R09: 0000000000000000 [ 2024.354656] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000002 [ 2024.355646] R13: 00007fff84cedf2f R14: 00007f8cac187300 R15: 0000000000022000 13:33:29 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) r4 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, &(0x7f0000000180), 0x40, 0x0) recvmmsg$unix(r5, &(0x7f0000000400)=[{{&(0x7f0000000240), 0x6e, &(0x7f00000016c0)=[{&(0x7f00000002c0)=""/84, 0x54}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000000340)=""/171, 0xab}, {&(0x7f0000000500)=""/228, 0xe4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/187, 0xbb}], 0x6, &(0x7f0000001740)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x160}}], 0x1, 0x101, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) stat(&(0x7f00000000c0)='./file1\x00', &(0x7f00000018c0)) 13:33:29 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0xc020660b, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:33:29 executing program 2: r0 = syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) syz_io_uring_setup(0x1a6f, &(0x7f0000000140)={0x0, 0xe3ef, 0x8, 0x3, 0x192, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000300)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd_index=0x7, 0x3, &(0x7f0000000240)="cdcda9a0038fbd5b00c7d3e2721ea60d89502f94aca17fc62439e2c4ef58e615e7d6da3ed40d6abfdd31edf3dea4a7d9e7ffd775abc7fe2105b31ad4ea074698eec1a65fd755a304eab9fd61b3e399d4557b0abdbcb4e939917d44dd97aeb0342ceb0cbecc13bce84899e856d433d0224fa023c059ed653fb63393eb72c28c88e8b06949883b1f210083c2e6fac4af51bcb1af576cc53df1ed060b942253d3b20b6d8f726b887aa4e9513aa475ba1286", 0xb0, 0x2, 0x1, {0x0, r6}}, 0x3) 13:33:29 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open(&(0x7f0000000180)='./file1\x00', 0x0, 0x146) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)={0x2c0800, 0x7, 0x14}, 0x18) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:33:29 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:33:29 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x1e) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:33:30 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:33:30 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 23) 13:33:30 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 13:33:30 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000010) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:33:30 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x1e00) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:33:30 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xe00, 0x5, &(0x7f0000000300)=[{&(0x7f0000000180)="790d36ef2dc21db8c53cbdc9cb14b598c5eee658207afd7e287f85295085cfcd9a76c76e641efff52ff8bef91176da2bba5f84ef71cb844ea5692845381f47d52964856d7de55e2d412bf29160d6535cc00d1892b96f1da98b7f795ca3169dbd74749b4098aeb2ad1a25481d77", 0x6d, 0x101}, {&(0x7f0000000240)="41470d5753c2237357129776e332c0a25c3844126bf932f3", 0x18, 0x1}, {&(0x7f0000000280)="24e9e2bb9cdb", 0x6, 0x81}, {&(0x7f00000002c0)="03819fe1ae9d8c60edcf01ce8150e197ee", 0x11, 0x9}, {&(0x7f0000000500)="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", 0x1000, 0x8000}], 0x1000000, &(0x7f0000000380)={[{@fat=@debug}, {@nodots}, {@fat=@errors_remount}, {@fat=@sys_immutable}, {@fat=@errors_remount}, {@nodots}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@obj_user={'obj_user', 0x3d, 'iso9660\x00'}}]}) statx(r2, &(0x7f0000001500)='./file1\x00', 0x2000, 0x2, &(0x7f0000001540)) r3 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) [ 2025.246312] SELinux: duplicate or incompatible mount options 13:33:30 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:33:30 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x4000) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:33:30 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = pidfd_getfd(r1, r2, 0x0) statx(r3, &(0x7f0000000700)='./file1\x00', 0x0, 0x40, &(0x7f0000000840)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x9, &(0x7f0000000740)=[{&(0x7f00000002c0)="f5abf5b75fb12179a3122a810eaf4665b81974d021aab16af7526174d969cade89a012a9e42ac231f4f042817a864220a43bc8e1fa3860e8e98e80886f9f58a72bbf7d42ccbbd8d4cab71e1940b3838ff58fcc6b5c903a3cca8f4ba13350d585356429a53012487d499f3f621b014d90cec8226f6529ac081cf413ab6f73d44c721ceca51056b83056dcbde9c0fe469b5f0725fc7ca83847c5a113ea3a96034e72f6de59a2adac4cf22c4ad32d9084855abc1bd2f044f7409625d811eb7d40218e762162a2212d9aeff3ea907f1630114e7f9ba9", 0xd4, 0x800}, {&(0x7f0000000140)="09ed2ad481edbe3e9c4c010f3d9536a0ec96795f3ac3a1cc8e0b754ab010d63f33f21046107f4762e69882754d68975b481ab8f3d1039358459ed1a07f2745a7598c5b11a2e699fe31319d22f925ce5dc5f45cbbed1e482a4457ede44a2a3dbf01ebc3b40445fa96601912379c610e023d3424", 0x73, 0x6}, {&(0x7f0000000500)="81830cdede89c8138f1a17042335275c86d57177894e685df75cfd41ccfb2b4d156f43666c05e2218e3b12986538d078959ad75e8f0eca91d3686e2d09e1bbb93ef75b60c37f6ee38edd533a842a7e6d5d39f0c88ae0b42b7fa694f40869ee6683ada46e9cab23c9d662906507f9f31f36146cf41a36044d789ef2700fd6226ccc25b5a7de1db8a243fe4d99931190f5c8ad2f8bae960ce739f763c2b49bbcf571eec908713f117abfa28a214b157ce666c51d5dc17c0fff76e2be364157ae111df7e0914ebf4401b1e498949f24ddb339ae434e29dfc85883b67df7e12495668896739582b943a60e0e73fb", 0xec, 0x8000}, {&(0x7f00000000c0)="e93c2fd53f502701a73031e2e72c4857c561ef569d5ae2eb15737632e73b2552aeaa73c5fa126966980e9126645e118a323393202951ee", 0x37, 0x100}, {&(0x7f0000000240)="4d001a817625a119eea76fd03dc597dbd2da8669a733254c22216e3dceeceb2d2edbff1dcaa8e385255ecf43e26e", 0x2e, 0xc0}, {&(0x7f00000003c0)="336b85efb4137b6c910b114d75df7e8479b26966f4828689e1bf465a06a9f5ce2ef99721b26884bccddb9961da8bc3eeac7e4c26", 0x34, 0x7}, {&(0x7f0000000440)="ba9385ea8f0c88c94c79f6488624433055720039b0f95c00f9268753937f231e312d10d2b121d2d7c5422f46602df7ba32e404d8f967759e", 0x38, 0x6}, {&(0x7f0000000600)="1d65a484c6bb8c18c482fd02f6ae592385d1b28459230c95cbbc500bec8a1e7e4b22c758b49e909802784b9bdbfd4bea1ea78d10cbd8daabe462d5c72bdd2d234f2a9a0ba26bf6c2a9b0b3208a2d6e4f278f4e0d489918c8a56396da60513e3039c4ce85bc1f377907baa66d9fd3991906fe3d3968c68a120ea3f24aacca74f6426b1934cfcc18ad81e4a5b45af7a35a8d0823713ebc2f5fb99a5ef77ae872732ca0888878e4bc492bfe01cbe01597ac5119c274d6feafeab3d5180ec8473c3bbf273f2ec548182beba95feadfab051e33b760287af3f9faee4cf91e65e431470d07b8026540aaed", 0xe8}, {&(0x7f0000000700), 0x0, 0x200}], 0x102d8f5, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r2, 0x0, 0x7ffffff9) [ 2025.573701] FAULT_INJECTION: forcing a failure. [ 2025.573701] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2025.576166] CPU: 0 PID: 11957 Comm: syz-executor.6 Not tainted 5.10.220 #1 [ 2025.577201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2025.578428] Call Trace: [ 2025.578823] dump_stack+0x107/0x167 [ 2025.579363] should_fail.cold+0x5/0xa [ 2025.579927] __alloc_pages_nodemask+0x182/0x600 [ 2025.580617] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2025.581498] ? find_get_entry+0x2c8/0x740 [ 2025.582107] ? balance_dirty_pages_ratelimited+0x43e/0x1ff0 [ 2025.582956] alloc_pages_current+0x187/0x280 [ 2025.583603] __page_cache_alloc+0x2d2/0x360 [ 2025.584237] ? mark_buffer_dirty+0x346/0x3d0 [ 2025.584899] pagecache_get_page+0x2c7/0xc80 [ 2025.585537] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2025.586287] ? __blkdev_direct_IO_simple+0x930/0x930 [ 2025.587029] grab_cache_page_write_begin+0x64/0xa0 [ 2025.587759] block_write_begin+0x33/0x1d0 [ 2025.588386] generic_perform_write+0x20a/0x4f0 [ 2025.589064] ? __mnt_drop_write_file+0x9/0x70 [ 2025.589717] ? page_cache_prev_miss+0x310/0x310 [ 2025.590417] ? evict_inodes+0x420/0x420 [ 2025.591022] __generic_file_write_iter+0x39d/0x5d0 [ 2025.591747] blkdev_write_iter+0x298/0x550 [ 2025.592502] ? bd_unlink_disk_holder+0x3f0/0x3f0 [ 2025.593202] ? direct_splice_actor+0x10f/0x170 [ 2025.593862] ? splice_direct_to_actor+0x387/0x980 [ 2025.594563] ? do_splice_direct+0x1c4/0x290 [ 2025.595189] ? do_sendfile+0x553/0x11e0 [ 2025.595768] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2025.596452] ? do_syscall_64+0x33/0x40 [ 2025.597026] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2025.597805] do_iter_readv_writev+0x476/0x750 [ 2025.598462] ? new_sync_write+0x660/0x660 [ 2025.599066] ? avc_policy_seqno+0x9/0x70 [ 2025.599662] ? selinux_file_permission+0x92/0x520 [ 2025.600371] ? security_file_permission+0xb1/0xe0 [ 2025.601082] do_iter_write+0x191/0x700 [ 2025.601666] vfs_iter_write+0x70/0xa0 [ 2025.602229] iter_file_splice_write+0x762/0xc30 [ 2025.602917] ? generic_splice_sendpage+0x140/0x140 [ 2025.603660] ? security_file_permission+0xb1/0xe0 [ 2025.604373] ? generic_splice_sendpage+0x140/0x140 [ 2025.605091] direct_splice_actor+0x10f/0x170 [ 2025.605732] splice_direct_to_actor+0x387/0x980 [ 2025.606419] ? pipe_to_sendpage+0x380/0x380 [ 2025.607057] ? do_splice_to+0x160/0x160 [ 2025.607641] ? security_file_permission+0xb1/0xe0 [ 2025.608360] do_splice_direct+0x1c4/0x290 [ 2025.608970] ? splice_direct_to_actor+0x980/0x980 [ 2025.609665] ? avc_policy_seqno+0x9/0x70 [ 2025.610265] ? security_file_permission+0xb1/0xe0 [ 2025.610973] do_sendfile+0x553/0x11e0 [ 2025.611544] ? do_pwritev+0x270/0x270 [ 2025.612101] ? wait_for_completion_io+0x270/0x270 [ 2025.612817] ? rcu_read_lock_any_held+0x75/0xa0 [ 2025.613489] ? vfs_write+0x354/0xb10 [ 2025.614043] __x64_sys_sendfile64+0x1d1/0x210 [ 2025.614694] ? __ia32_sys_sendfile+0x220/0x220 [ 2025.615361] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2025.616118] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2025.616875] do_syscall_64+0x33/0x40 [ 2025.617414] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2025.618160] RIP: 0033:0x7f8caec11b19 [ 2025.618706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2025.621362] RSP: 002b:00007f8cac187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2025.622461] RAX: ffffffffffffffda RBX: 00007f8caed24f60 RCX: 00007f8caec11b19 [ 2025.623491] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 2025.624527] RBP: 00007f8cac1871d0 R08: 0000000000000000 R09: 0000000000000000 [ 2025.625558] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000002 [ 2025.626590] R13: 00007fff84cedf2f R14: 00007f8cac187300 R15: 0000000000022000 13:33:44 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:33:44 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000011) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:33:44 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:33:44 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:33:44 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x1000000) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:33:44 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 24) 13:33:44 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1/file0\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x101200, 0x0) sendmsg$nl_generic(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001d00200029bd7000fedbdf25000000000000000004008600652c9e3564273e00"], 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x800) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:33:44 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)={0x44200, 0x2, 0x1}, 0x18) sendfile(r2, r3, 0x0, 0x7ffffff9) 13:33:44 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x1e000000) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) [ 2039.165177] FAULT_INJECTION: forcing a failure. [ 2039.165177] name failslab, interval 1, probability 0, space 0, times 0 [ 2039.166991] CPU: 1 PID: 12005 Comm: syz-executor.6 Not tainted 5.10.220 #1 [ 2039.167989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2039.169200] Call Trace: [ 2039.169587] dump_stack+0x107/0x167 [ 2039.170114] should_fail.cold+0x5/0xa [ 2039.170664] ? create_object.isra.0+0x3a/0xa20 [ 2039.171330] should_failslab+0x5/0x20 [ 2039.171899] kmem_cache_alloc+0x5b/0x310 [ 2039.172504] create_object.isra.0+0x3a/0xa20 [ 2039.173138] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2039.173886] kmem_cache_alloc+0x159/0x310 [ 2039.174494] alloc_buffer_head+0x20/0x110 [ 2039.175091] alloc_page_buffers+0x14d/0x700 [ 2039.175736] create_empty_buffers+0x2c/0x640 [ 2039.176376] create_page_buffers+0x1bb/0x230 [ 2039.177023] __block_write_begin_int+0x1d1/0x19c0 [ 2039.177723] ? __blkdev_direct_IO_simple+0x930/0x930 [ 2039.178497] ? add_to_page_cache_locked+0x40/0x40 [ 2039.179271] ? __page_cache_alloc+0x10d/0x360 [ 2039.179910] ? mark_buffer_dirty+0x346/0x3d0 [ 2039.180542] ? remove_inode_buffers+0x300/0x300 [ 2039.181205] ? pagecache_get_page+0x243/0xc80 [ 2039.181842] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2039.182564] ? wait_for_stable_page+0x92/0xe0 [ 2039.183205] ? __blkdev_direct_IO_simple+0x930/0x930 [ 2039.183924] block_write_begin+0x58/0x1d0 [ 2039.184524] generic_perform_write+0x20a/0x4f0 [ 2039.185195] ? __mnt_drop_write_file+0x9/0x70 [ 2039.185831] ? page_cache_prev_miss+0x310/0x310 [ 2039.186491] ? evict_inodes+0x420/0x420 [ 2039.187065] __generic_file_write_iter+0x39d/0x5d0 [ 2039.187773] blkdev_write_iter+0x298/0x550 [ 2039.187794] ? bd_unlink_disk_holder+0x3f0/0x3f0 [ 2039.187815] ? direct_splice_actor+0x10f/0x170 [ 2039.187829] ? splice_direct_to_actor+0x387/0x980 [ 2039.187843] ? do_splice_direct+0x1c4/0x290 [ 2039.187857] ? do_sendfile+0x553/0x11e0 [ 2039.187874] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2039.187887] ? do_syscall_64+0x33/0x40 [ 2039.187902] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2039.187924] do_iter_readv_writev+0x476/0x750 [ 2039.187944] ? new_sync_write+0x660/0x660 [ 2039.187959] ? avc_policy_seqno+0x9/0x70 [ 2039.187975] ? selinux_file_permission+0x92/0x520 13:33:44 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_io_uring_setup(0x104a5, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20840, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x200900, 0x0) r5 = dup2(r4, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0xa001, 0x80) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r6, r5, 0x0, 0x7ffffff9) [ 2039.187998] ? security_file_permission+0xb1/0xe0 [ 2039.188023] do_iter_write+0x191/0x700 [ 2039.188042] ? trace_hardirqs_on+0x5b/0x180 [ 2039.188065] vfs_iter_write+0x70/0xa0 [ 2039.188084] iter_file_splice_write+0x762/0xc30 [ 2039.188114] ? generic_splice_sendpage+0x140/0x140 [ 2039.188149] ? security_file_permission+0xb1/0xe0 [ 2039.188169] ? generic_splice_sendpage+0x140/0x140 [ 2039.188186] direct_splice_actor+0x10f/0x170 [ 2039.188206] splice_direct_to_actor+0x387/0x980 [ 2039.188227] ? pipe_to_sendpage+0x380/0x380 [ 2039.188246] ? do_splice_to+0x160/0x160 [ 2039.188265] ? security_file_permission+0xb1/0xe0 [ 2039.188288] do_splice_direct+0x1c4/0x290 [ 2039.188305] ? splice_direct_to_actor+0x980/0x980 [ 2039.188319] ? avc_policy_seqno+0x9/0x70 [ 2039.188345] ? security_file_permission+0xb1/0xe0 [ 2039.188372] do_sendfile+0x553/0x11e0 [ 2039.188399] ? do_pwritev+0x270/0x270 [ 2039.188418] ? wait_for_completion_io+0x270/0x270 [ 2039.188438] ? rcu_read_lock_any_held+0x75/0xa0 [ 2039.188453] ? vfs_write+0x354/0xb10 [ 2039.188484] __x64_sys_sendfile64+0x1d1/0x210 [ 2039.188504] ? __ia32_sys_sendfile+0x220/0x220 [ 2039.188525] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2039.188541] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2039.188559] do_syscall_64+0x33/0x40 [ 2039.188574] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2039.188585] RIP: 0033:0x7f8caec11b19 [ 2039.188601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2039.188610] RSP: 002b:00007f8cac187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2039.188628] RAX: ffffffffffffffda RBX: 00007f8caed24f60 RCX: 00007f8caec11b19 [ 2039.188637] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 2039.188646] RBP: 00007f8cac1871d0 R08: 0000000000000000 R09: 0000000000000000 [ 2039.188655] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000002 [ 2039.188665] R13: 00007fff84cedf2f R14: 00007f8cac187300 R15: 0000000000022000 13:33:58 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:33:58 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:33:58 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000023) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:33:58 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x40000000) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:33:58 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001600)={0x53, 0xfffffffffffffffd, 0xe4, 0x80, @scatter={0x2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/155, 0x9b}, {&(0x7f0000000240)=""/95, 0x5f}]}, &(0x7f0000000500)="372bb6fb0a58b6830d3d986cf81f1bc12d7a58e5b0ccc064447d3504fcc40830c06f6773e38ad52291523c1a0f05e53b7b45c7f0bc7b80b2880fd54a1942a7aa680d44863d6de2e1279ee991c27e359d0ce6568f58f53626b142077e31d775843ce4d662fd4d220d9c3e598413aa9c9f8ec5304f3f82dd2ff113ef0185a9547e8f755d6ec4b9c59ae3a0df8862e21e1d3a4a0ebd459a5fdf464bb2064da1b644142077b313f22cef5e4b1f25c77fe7abd9b9352241f414dfe49afc370f5ce328b7f74c02d2fdb8fbe8060df780d4321e597beaf142ab279b40778db39869b3266ef0f30a", &(0x7f0000000600)=""/4096, 0x81, 0x1, 0x2, &(0x7f0000000300)}) lseek(r2, 0x0, 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x100, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, &(0x7f0000000180), 0x40, 0x0) dup2(r1, r5) 13:33:58 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, &(0x7f0000000180), 0x40, 0x0) sendfile(r0, r3, &(0x7f00000000c0)=0x4, 0x2) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) r5 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, &(0x7f0000000180), 0x40, 0x0) r7 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)) sendfile(r7, r2, 0x0, 0x7f7ffff9) 13:33:58 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) r4 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) r5 = accept(r3, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x80) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) sendfile(r4, r3, 0x0, 0x20) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c301000000", @ANYRES16=r6, @ANYBLOB="00012bbd7000fcdbdf25040000000800050009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:33:58 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 25) 13:33:58 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:33:58 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0xfdfdffff) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) [ 2053.635537] FAULT_INJECTION: forcing a failure. [ 2053.635537] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2053.638133] CPU: 1 PID: 12061 Comm: syz-executor.6 Not tainted 5.10.220 #1 [ 2053.639178] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2053.640336] Call Trace: [ 2053.640750] dump_stack+0x107/0x167 [ 2053.641302] should_fail.cold+0x5/0xa [ 2053.641872] __alloc_pages_nodemask+0x182/0x600 [ 2053.642585] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2053.643486] ? find_get_entry+0x2c8/0x740 [ 2053.644111] ? balance_dirty_pages_ratelimited+0x43e/0x1ff0 [ 2053.644972] alloc_pages_current+0x187/0x280 [ 2053.645623] __page_cache_alloc+0x2d2/0x360 [ 2053.646276] ? mark_buffer_dirty+0x346/0x3d0 [ 2053.646945] pagecache_get_page+0x2c7/0xc80 [ 2053.647567] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2053.648331] ? __blkdev_direct_IO_simple+0x930/0x930 [ 2053.649064] grab_cache_page_write_begin+0x64/0xa0 [ 2053.649788] block_write_begin+0x33/0x1d0 [ 2053.650396] generic_perform_write+0x20a/0x4f0 [ 2053.651099] ? __mnt_drop_write_file+0x9/0x70 [ 2053.651754] ? page_cache_prev_miss+0x310/0x310 [ 2053.652447] ? evict_inodes+0x420/0x420 [ 2053.653067] __generic_file_write_iter+0x39d/0x5d0 [ 2053.653793] blkdev_write_iter+0x298/0x550 [ 2053.654442] ? bd_unlink_disk_holder+0x3f0/0x3f0 [ 2053.655158] ? direct_splice_actor+0x10f/0x170 [ 2053.655824] ? splice_direct_to_actor+0x387/0x980 [ 2053.656645] ? do_splice_direct+0x1c4/0x290 [ 2053.657344] ? do_sendfile+0x553/0x11e0 [ 2053.657943] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2053.658629] ? do_syscall_64+0x33/0x40 [ 2053.659214] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2053.660000] do_iter_readv_writev+0x476/0x750 [ 2053.660675] ? new_sync_write+0x660/0x660 [ 2053.661401] ? avc_policy_seqno+0x9/0x70 [ 2053.662018] ? selinux_file_permission+0x92/0x520 [ 2053.662739] ? security_file_permission+0xb1/0xe0 [ 2053.663431] do_iter_write+0x191/0x700 [ 2053.664017] ? trace_hardirqs_on+0x5b/0x180 [ 2053.664667] vfs_iter_write+0x70/0xa0 [ 2053.665244] iter_file_splice_write+0x762/0xc30 [ 2053.665962] ? generic_splice_sendpage+0x140/0x140 [ 2053.666707] ? security_file_permission+0xb1/0xe0 [ 2053.667431] ? generic_splice_sendpage+0x140/0x140 [ 2053.668156] direct_splice_actor+0x10f/0x170 [ 2053.668814] splice_direct_to_actor+0x387/0x980 [ 2053.669511] ? pipe_to_sendpage+0x380/0x380 [ 2053.670174] ? do_splice_to+0x160/0x160 [ 2053.670756] ? security_file_permission+0xb1/0xe0 [ 2053.671443] do_splice_direct+0x1c4/0x290 [ 2053.672061] ? splice_direct_to_actor+0x980/0x980 [ 2053.672736] ? avc_policy_seqno+0x9/0x70 [ 2053.673354] ? security_file_permission+0xb1/0xe0 [ 2053.674195] do_sendfile+0x553/0x11e0 [ 2053.674236] ? do_pwritev+0x270/0x270 [ 2053.674265] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2053.676276] ? tick_program_event+0xa8/0x140 [ 2053.677088] __x64_sys_sendfile64+0x1d1/0x210 [ 2053.677932] ? __ia32_sys_sendfile+0x220/0x220 [ 2053.678748] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2053.679562] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2053.679581] do_syscall_64+0x33/0x40 [ 2053.679597] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2053.679609] RIP: 0033:0x7f8caec11b19 [ 2053.679631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2053.684898] RSP: 002b:00007f8cac187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2053.684925] RAX: ffffffffffffffda RBX: 00007f8caed24f60 RCX: 00007f8caec11b19 [ 2053.684935] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000008 [ 2053.684944] RBP: 00007f8cac1871d0 R08: 0000000000000000 R09: 0000000000000000 [ 2053.684954] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000002 13:33:58 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:33:58 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000240)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) accept(r0, &(0x7f0000000140)=@caif=@util, &(0x7f00000000c0)=0x80) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) [ 2053.684964] R13: 00007fff84cedf2f R14: 00007f8cac187300 R15: 0000000000022000 13:33:58 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5, 0x2020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6be02ac9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:33:59 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:34:13 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendfile(r3, r5, &(0x7f00000000c0)=0x3, 0xffff) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r2, 0x0, 0x7ffffff9) 13:34:13 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0xfffffdfd) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:34:13 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1000001da) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:34:13 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f00000000c0)={&(0x7f0000000500)=""/4096, 0x1000, 0x1, 0x80000000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:34:13 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f00000000c0)={0x4, &(0x7f00000006c0)=[{0x80000000, 0xe2, &(0x7f0000000240)="6f5a669f7d03afdf49e4ce6756faa60978a296b0b9b94f3f25057988d2e56df85a74987342ae031de146dc739569ade7856b8d0c0eec86897006b2db4fc878ec30e2d85a76000bf3ddd29e3f9cf3ba31ad19828a5348c40cddfda913d628113c3fdaa3df1f45d7e69cc774cbd053fba3fb9d035faae99b1eaab50b29555bad3cc5d9950c636c217793c4ed602ac6010f263e8f1cbaf826e5d877f6d4001cd982d5456e43fdf924623edf9af2b1c7ed1d573a47767e02e45637b40ea78f967d742b5541bdc324652281380f169c32f236e9b671eb84aa7e6dc5bd896964b4def81e38", 0x0, 0x1}, {0x4, 0x1000, &(0x7f0000001500)="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", 0x1, 0x1}, {0x6, 0xe2, &(0x7f0000000500)="31e3ab05201750aa37de01e3e206e00dd35364937a1528bd3fd23569efed13ced5fa08609c11f388d106476b4b0d3cb5f60988e22051802c1bb3f77676d6bcd79a5f7f21f155ccc75e8324c1e63451d581970bb33e326c12f12e3631ac3b013de7f22201b5f714c38d0985b469a29fac7be21337e767c44e8d9eda3130723f5b832f1c749bde87ad5e4e594d89d3d4d8b972c4fb1a9830b496e9ae1e24e9b74bac2fba226a76b26f41abaf6fd318cb1da155fb2124bd0db6f81bc5f05d3681ddce96c69503c89f5c5fb4c5a70b8ff47d8776266d1e162260b960c01b011ee6498ad6", 0x1}, {0x7, 0xbf, &(0x7f0000000600)="276ec55739537ae593f6e8716185da24655b239f3c3c52174f0479e82a508484ecee6126c6d8a729c1c262e39fa10c707938e30ddd0ccd6838858fb1a2d7ec2621f3b657cb99629aeee14033a684d37a01f968bd951998ea71dd0a2a9e52093a7aeeac69277546227fdfa117212cd81a9ec412fb59aa1fb088f7e1b02dbbaba45d80c92a731cce208aa80b2461fa900260397c413901b6962d913abd3c2ba461b4aae50e210653b87c00e9bc09c33bde7f6867713c8d2ebf66d914b7ddfb07", 0x0, 0x1}]}) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, &(0x7f0000000180), 0x40, 0x0) pwrite64(r4, &(0x7f0000000140)="eebdbe6820bc9619638b704b89121f2ac057ef546c9ae68dc8601f1eb31c145771311dca88c51e443d0e907e6621e7ef5d9eb1f68fbe5a2ea60abea65a3bb26e626a47305dea", 0x46, 0x2) 13:34:13 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 26) 13:34:13 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1e8}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:34:13 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:34:13 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x100000000000000) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) [ 2068.386585] FAULT_INJECTION: forcing a failure. [ 2068.386585] name failslab, interval 1, probability 0, space 0, times 0 [ 2068.386607] CPU: 1 PID: 12133 Comm: syz-executor.6 Not tainted 5.10.220 #1 [ 2068.386617] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2068.386623] Call Trace: [ 2068.386645] dump_stack+0x107/0x167 [ 2068.386664] should_fail.cold+0x5/0xa [ 2068.386684] ? create_object.isra.0+0x3a/0xa20 [ 2068.386711] should_failslab+0x5/0x20 [ 2068.386729] kmem_cache_alloc+0x5b/0x310 [ 2068.386752] create_object.isra.0+0x3a/0xa20 [ 2068.386771] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2068.386794] kmem_cache_alloc+0x159/0x310 [ 2068.386816] alloc_buffer_head+0x20/0x110 [ 2068.386832] alloc_page_buffers+0x14d/0x700 [ 2068.386856] create_empty_buffers+0x2c/0x640 [ 2068.386879] create_page_buffers+0x1bb/0x230 [ 2068.386901] __block_write_begin_int+0x1d1/0x19c0 [ 2068.386923] ? __blkdev_direct_IO_simple+0x930/0x930 [ 2068.386942] ? add_to_page_cache_locked+0x40/0x40 [ 2068.386961] ? __page_cache_alloc+0x10d/0x360 [ 2068.386976] ? mark_buffer_dirty+0x346/0x3d0 [ 2068.386994] ? remove_inode_buffers+0x300/0x300 [ 2068.387012] ? pagecache_get_page+0x243/0xc80 [ 2068.387030] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2068.387051] ? wait_for_stable_page+0x92/0xe0 [ 2068.387072] ? __blkdev_direct_IO_simple+0x930/0x930 [ 2068.387087] block_write_begin+0x58/0x1d0 [ 2068.387107] generic_perform_write+0x20a/0x4f0 [ 2068.387135] ? __mnt_drop_write_file+0x9/0x70 [ 2068.387152] ? page_cache_prev_miss+0x310/0x310 [ 2068.387168] ? evict_inodes+0x420/0x420 [ 2068.387197] __generic_file_write_iter+0x39d/0x5d0 [ 2068.387220] blkdev_write_iter+0x298/0x550 [ 2068.387243] ? bd_unlink_disk_holder+0x3f0/0x3f0 13:34:13 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 27) 13:34:13 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1e8}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) [ 2068.387265] ? direct_splice_actor+0x10f/0x170 [ 2068.387280] ? splice_direct_to_actor+0x387/0x980 [ 2068.387294] ? do_splice_direct+0x1c4/0x290 [ 2068.387311] ? do_sendfile+0x553/0x11e0 [ 2068.387328] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2068.387342] ? do_syscall_64+0x33/0x40 [ 2068.387358] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2068.387382] do_iter_readv_writev+0x476/0x750 [ 2068.387404] ? new_sync_write+0x660/0x660 [ 2068.387420] ? avc_policy_seqno+0x9/0x70 [ 2068.387436] ? selinux_file_permission+0x92/0x520 [ 2068.387461] ? security_file_permission+0xb1/0xe0 [ 2068.387488] do_iter_write+0x191/0x700 [ 2068.387508] ? trace_hardirqs_on+0x5b/0x180 [ 2068.387533] vfs_iter_write+0x70/0xa0 [ 2068.387553] iter_file_splice_write+0x762/0xc30 [ 2068.387586] ? generic_splice_sendpage+0x140/0x140 [ 2068.387623] ? security_file_permission+0xb1/0xe0 [ 2068.387644] ? generic_splice_sendpage+0x140/0x140 [ 2068.387663] direct_splice_actor+0x10f/0x170 [ 2068.387684] splice_direct_to_actor+0x387/0x980 [ 2068.387706] ? pipe_to_sendpage+0x380/0x380 [ 2068.387727] ? do_splice_to+0x160/0x160 [ 2068.387747] ? security_file_permission+0xb1/0xe0 [ 2068.387772] do_splice_direct+0x1c4/0x290 [ 2068.387790] ? splice_direct_to_actor+0x980/0x980 [ 2068.387805] ? avc_policy_seqno+0x9/0x70 [ 2068.387831] ? security_file_permission+0xb1/0xe0 [ 2068.387858] do_sendfile+0x553/0x11e0 [ 2068.387886] ? do_pwritev+0x270/0x270 [ 2068.387902] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2068.387925] ? tick_program_event+0xa8/0x140 [ 2068.387953] __x64_sys_sendfile64+0x1d1/0x210 [ 2068.387973] ? __ia32_sys_sendfile+0x220/0x220 [ 2068.387996] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2068.388013] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2068.388032] do_syscall_64+0x33/0x40 [ 2068.388049] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2068.388061] RIP: 0033:0x7f8caec11b19 [ 2068.388077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2068.388087] RSP: 002b:00007f8cac187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2068.388108] RAX: ffffffffffffffda RBX: 00007f8caed24f60 RCX: 00007f8caec11b19 [ 2068.388118] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 2068.388127] RBP: 00007f8cac1871d0 R08: 0000000000000000 R09: 0000000000000000 [ 2068.388137] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000002 [ 2068.388148] R13: 00007fff84cedf2f R14: 00007f8cac187300 R15: 0000000000022000 13:34:13 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x1e00000000000000) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) [ 2068.839497] FAULT_INJECTION: forcing a failure. [ 2068.839497] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2068.841885] CPU: 1 PID: 12157 Comm: syz-executor.6 Not tainted 5.10.220 #1 [ 2068.842971] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2068.844263] Call Trace: [ 2068.844687] dump_stack+0x107/0x167 [ 2068.845289] should_fail.cold+0x5/0xa [ 2068.845893] __alloc_pages_nodemask+0x182/0x600 [ 2068.846624] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2068.847543] ? find_get_entry+0x2c8/0x740 [ 2068.848188] ? balance_dirty_pages_ratelimited+0x43e/0x1ff0 [ 2068.849077] alloc_pages_current+0x187/0x280 [ 2068.849764] __page_cache_alloc+0x2d2/0x360 [ 2068.850432] ? mark_buffer_dirty+0x346/0x3d0 [ 2068.851120] pagecache_get_page+0x2c7/0xc80 [ 2068.851801] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2068.852605] ? __blkdev_direct_IO_simple+0x930/0x930 [ 2068.853414] grab_cache_page_write_begin+0x64/0xa0 [ 2068.854176] block_write_begin+0x33/0x1d0 [ 2068.854827] generic_perform_write+0x20a/0x4f0 [ 2068.855552] ? __mnt_drop_write_file+0x9/0x70 [ 2068.856247] ? page_cache_prev_miss+0x310/0x310 [ 2068.856996] ? evict_inodes+0x420/0x420 [ 2068.857628] __generic_file_write_iter+0x39d/0x5d0 [ 2068.858395] blkdev_write_iter+0x298/0x550 [ 2068.859062] ? bd_unlink_disk_holder+0x3f0/0x3f0 [ 2068.859801] ? direct_splice_actor+0x10f/0x170 [ 2068.860509] ? splice_direct_to_actor+0x387/0x980 [ 2068.861279] ? do_splice_direct+0x1c4/0x290 [ 2068.861951] ? do_sendfile+0x553/0x11e0 [ 2068.862570] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2068.863295] ? do_syscall_64+0x33/0x40 [ 2068.863899] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2068.864739] do_iter_readv_writev+0x476/0x750 [ 2068.865464] ? new_sync_write+0x660/0x660 [ 2068.866104] ? avc_policy_seqno+0x9/0x70 [ 2068.866879] ? selinux_file_permission+0x92/0x520 [ 2068.867646] ? security_file_permission+0xb1/0xe0 [ 2068.868403] do_iter_write+0x191/0x700 [ 2068.869105] ? trace_hardirqs_on+0x5b/0x180 [ 2068.869784] vfs_iter_write+0x70/0xa0 [ 2068.870383] iter_file_splice_write+0x762/0xc30 [ 2068.871117] ? generic_splice_sendpage+0x140/0x140 [ 2068.872083] ? security_file_permission+0xb1/0xe0 [ 2068.872869] ? generic_splice_sendpage+0x140/0x140 [ 2068.873639] direct_splice_actor+0x10f/0x170 [ 2068.874330] splice_direct_to_actor+0x387/0x980 [ 2068.875059] ? pipe_to_sendpage+0x380/0x380 [ 2068.875735] ? do_splice_to+0x160/0x160 [ 2068.876362] ? security_file_permission+0xb1/0xe0 [ 2068.877140] do_splice_direct+0x1c4/0x290 [ 2068.877785] ? splice_direct_to_actor+0x980/0x980 [ 2068.878537] ? avc_policy_seqno+0x9/0x70 [ 2068.879183] ? security_file_permission+0xb1/0xe0 [ 2068.879949] do_sendfile+0x553/0x11e0 [ 2068.880554] ? do_pwritev+0x270/0x270 [ 2068.881182] ? wait_for_completion_io+0x270/0x270 [ 2068.881946] ? rcu_read_lock_any_held+0x75/0xa0 [ 2068.882737] ? vfs_write+0x354/0xb10 [ 2068.883392] __x64_sys_sendfile64+0x1d1/0x210 [ 2068.884098] ? __ia32_sys_sendfile+0x220/0x220 [ 2068.884840] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2068.885651] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2068.886453] do_syscall_64+0x33/0x40 [ 2068.887032] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2068.887839] RIP: 0033:0x7f8caec11b19 [ 2068.888423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2068.891270] RSP: 002b:00007f8cac187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2068.892452] RAX: ffffffffffffffda RBX: 00007f8caed24f60 RCX: 00007f8caec11b19 [ 2068.893562] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 2068.894666] RBP: 00007f8cac1871d0 R08: 0000000000000000 R09: 0000000000000000 [ 2068.895771] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000002 [ 2068.896893] R13: 00007fff84cedf2f R14: 00007f8cac187300 R15: 0000000000022000 13:34:14 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r2, 0x0, 0x7ffffff9) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r6 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)) splice(r3, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x40, 0x0) fcntl$dupfd(r5, 0x406, r6) 13:34:14 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1e8}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:34:29 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x210002, 0x88) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:34:29 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000300) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:34:29 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) (fail_nth: 28) 13:34:29 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 13:34:29 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r4, &(0x7f0000000140)=0x9, 0x1, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:34:29 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:34:29 executing program 0: r0 = syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000051800)={{0x0, 0x80000000, 0x8, 0x101, 0x3759, 0xfb43, 0xe8, 0xfffffffc, 0x10000, 0x9, 0x3, 0xfffffffffffffffb, 0x0, 0xc895, 0x8}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000518c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000051ac0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052ac0)={0x400, [{}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {0x0, r7}], 0x72, "7da900ea869e90"}) r8 = dup2(r3, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r9, r8, 0x0, 0x7ffffff9) 13:34:29 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x4000000000000000) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:34:29 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0xfdfdffff00000000) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) [ 2084.673558] FAULT_INJECTION: forcing a failure. [ 2084.673558] name failslab, interval 1, probability 0, space 0, times 0 [ 2084.673579] CPU: 1 PID: 12198 Comm: syz-executor.6 Not tainted 5.10.220 #1 [ 2084.673588] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2084.673594] Call Trace: [ 2084.673617] dump_stack+0x107/0x167 [ 2084.673636] should_fail.cold+0x5/0xa [ 2084.673655] ? create_object.isra.0+0x3a/0xa20 [ 2084.673675] should_failslab+0x5/0x20 [ 2084.673698] kmem_cache_alloc+0x5b/0x310 [ 2084.673719] create_object.isra.0+0x3a/0xa20 [ 2084.673737] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2084.673758] kmem_cache_alloc+0x159/0x310 [ 2084.673780] alloc_buffer_head+0x20/0x110 [ 2084.673795] alloc_page_buffers+0x14d/0x700 [ 2084.673817] create_empty_buffers+0x2c/0x640 [ 2084.673839] create_page_buffers+0x1bb/0x230 [ 2084.673861] __block_write_begin_int+0x1d1/0x19c0 [ 2084.673881] ? __blkdev_direct_IO_simple+0x930/0x930 [ 2084.673900] ? add_to_page_cache_locked+0x40/0x40 13:34:29 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) [ 2084.673917] ? __page_cache_alloc+0x10d/0x360 [ 2084.673931] ? mark_buffer_dirty+0x346/0x3d0 [ 2084.673948] ? remove_inode_buffers+0x300/0x300 [ 2084.673964] ? pagecache_get_page+0x243/0xc80 [ 2084.673982] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2084.674002] ? wait_for_stable_page+0x92/0xe0 [ 2084.674022] ? __blkdev_direct_IO_simple+0x930/0x930 [ 2084.674036] block_write_begin+0x58/0x1d0 [ 2084.674055] generic_perform_write+0x20a/0x4f0 [ 2084.674082] ? __mnt_drop_write_file+0x9/0x70 [ 2084.674097] ? page_cache_prev_miss+0x310/0x310 [ 2084.674113] ? evict_inodes+0x420/0x420 [ 2084.674143] __generic_file_write_iter+0x39d/0x5d0 [ 2084.674166] blkdev_write_iter+0x298/0x550 [ 2084.674187] ? bd_unlink_disk_holder+0x3f0/0x3f0 [ 2084.674211] ? io_schedule_timeout+0x140/0x140 [ 2084.674226] ? do_splice_direct+0x1c4/0x290 [ 2084.674241] ? do_sendfile+0x553/0x11e0 [ 2084.674254] ? do_syscall_64+0x33/0x40 [ 2084.674269] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2084.674291] do_iter_readv_writev+0x476/0x750 [ 2084.674311] ? new_sync_write+0x660/0x660 [ 2084.674326] ? avc_policy_seqno+0x9/0x70 [ 2084.674342] ? selinux_file_permission+0x92/0x520 [ 2084.674365] ? security_file_permission+0xb1/0xe0 [ 2084.674390] do_iter_write+0x191/0x700 [ 2084.674415] ? trace_hardirqs_on+0x5b/0x180 [ 2084.674438] vfs_iter_write+0x70/0xa0 [ 2084.674457] iter_file_splice_write+0x762/0xc30 [ 2084.674488] ? generic_splice_sendpage+0x140/0x140 [ 2084.674523] ? security_file_permission+0xb1/0xe0 [ 2084.674542] ? generic_splice_sendpage+0x140/0x140 [ 2084.674560] direct_splice_actor+0x10f/0x170 [ 2084.674579] splice_direct_to_actor+0x387/0x980 [ 2084.674600] ? pipe_to_sendpage+0x380/0x380 [ 2084.674620] ? do_splice_to+0x160/0x160 [ 2084.674638] ? security_file_permission+0xb1/0xe0 [ 2084.674662] do_splice_direct+0x1c4/0x290 [ 2084.674679] ? splice_direct_to_actor+0x980/0x980 [ 2084.674692] ? avc_policy_seqno+0x9/0x70 [ 2084.674717] ? security_file_permission+0xb1/0xe0 [ 2084.674742] do_sendfile+0x553/0x11e0 [ 2084.674768] ? do_pwritev+0x270/0x270 [ 2084.674788] ? wait_for_completion_io+0x270/0x270 [ 2084.674808] ? rcu_read_lock_any_held+0x75/0xa0 [ 2084.674822] ? vfs_write+0x354/0xb10 [ 2084.674846] __x64_sys_sendfile64+0x1d1/0x210 [ 2084.674865] ? __ia32_sys_sendfile+0x220/0x220 [ 2084.674886] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2084.674902] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2084.674920] do_syscall_64+0x33/0x40 [ 2084.674936] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2084.674947] RIP: 0033:0x7f8caec11b19 [ 2084.674962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2084.674971] RSP: 002b:00007f8cac187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2084.674990] RAX: ffffffffffffffda RBX: 00007f8caed24f60 RCX: 00007f8caec11b19 [ 2084.674999] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 2084.675009] RBP: 00007f8cac1871d0 R08: 0000000000000000 R09: 0000000000000000 [ 2084.675018] R10: 000000007ffffff9 R11: 0000000000000246 R12: 0000000000000002 [ 2084.675028] R13: 00007fff84cedf2f R14: 00007f8cac187300 R15: 0000000000022000 13:34:30 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x7, 0x1) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r3 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:34:30 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:34:30 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000500) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:34:30 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 13:34:30 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4307, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18c0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, &(0x7f0000000180), 0x40, 0x0) r5 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, &(0x7f0000000180), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000bed4a4b184585a79841362dbbc6e8eeb5c", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) pwritev2(r8, &(0x7f00000001c0)=[{&(0x7f0000000580)="cce6183d3c2977637520503656ef2ad5fb4647f799c77e44010319855eede0192c2136305d64c566d94dc4791a785c20d2830346e69eb6b7a98b128e2189ab667fdae1906a2c9c44563377ff2273c7900d1d55491581e64a2c8f0492cd1ee2c1b44700422078444050f849a34d85c254a54f28818fe10ca8f3ec96800abcdf03b80fab1910767723e83e6c85c25dbc565437d4e464cfd6bad15cc176fe9f6915", 0xa0}, {&(0x7f0000000640)="05950ab9c075995f59aa8c7d3f79a623227ed4843eca469796bc5d3a6ddd6bc04a6b347f6cb950f4e2b89bcdd96676bca6fd80f58c1f44e58875bf13e97363859c270848e55c6d83103a33ad942cf0bf43d91887d19ef3894777be4b270827ab2f72a47e8a4f8178a8bbeb9dfa224cd7766487d9f0299d5f2f460f36d37f747bb3ea8ba5f0cf", 0x86}], 0x2, 0x8, 0x3, 0xa) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x9387433, 0x3, &(0x7f0000000500)=[{&(0x7f00000000c0)="96964ef8ec95a3d3a3c7b7926d7a23d7f5bfefacaad9e811", 0x18, 0x9}, {&(0x7f0000000240)="d12f222792e1943b776d1b1ade0995b8226956eecea7bbd5cc7fa0e867d01d5fd98d08381f72068d143745efb150b2b9afd1a467a5b199d73571533c64474913c82de95843246deb3cf4ca8fa9db7a4127b110ed3e2d688194a7f21d16bc006fe7da77ca7fbe7f95b58f3bd5188df821af42c49100d0211160fb0a4efc35bfd5b2eb42e8f597084114c0fde42a1f41ff80acef708c064641cafc", 0x9a, 0x5}, {&(0x7f0000003680)="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", 0x101e, 0x1}], 0x8214c7, &(0x7f0000001500)=ANY=[@ANYRESHEX=r3, @ANYRES64, @ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="0141e3f659ba9e8739e588d78ee14d45bca7a66a7ce7086eaa9864fc663795a51dab86240c2ee366390398d1d7fbc62f638c1563b143b50400000055bac064b8368fe5ddf796cf99698749b488cccc46ae5e916d3336ad4b0000a4a172431b256acdb52f6251bd3bdcd07fadc56073f6351263f25581a59f7847a2ef2b46fe8b0db27bdbaa9be4188365a326767217563f970f39025261e456a1b9d0459fcdef6606dd2371c384302623d3c147dcd70e1f403c58b5447df9e63ba23bcad8357587c29c6d30cab4a50f589a8d8c6ac7ef11ffd876142df8391022c9d719186a407151750dbcb53d7816e979bfae0da8d69481ba0b9166f55e477dc82618cbbfeab0a8239a6aaedb156daf5bc149f09d23189fe39b0c86216678fb3f00af5cf2075c53bda9eb2f718f7cc8a714dc99162f7d2a1451c4c9c1f272691e0f1d7523da07c2de13dd04a65210b8394cc9150dc04e0d92ef172b9ce2f09d6ecfd67f989926d3e59a44d7c60ccc344f16f7a33fe15cc814b24b9395c772f0740af48fa500a51ccd9995952bc4d5d97f99e8fc40900f963b06ea3923e573967366a63cccf3fc3a380482d58e14cc5c9d9bcdf3b8f925159f4f745d7dcfa7f8dbb3dbefd8bcecc77e4cada007993176dd9e756ff85b49d1fec548dde5ef00000000000000f40b232026ba38ed3e805168c61fb1526a6b2375cd6dd04b138f9078415edbfdef118bca6896145394562c5507d814d6e731a1", @ANYRESDEC=r4, @ANYRES64=r5]) lseek(r2, 0x0, 0x0) r9 = openat(r6, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0, &(0x7f0000000400)) r10 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r9, r2, 0x0, 0x7ffffff9) openat(r10, &(0x7f0000000300)='./file1\x00', 0x48040, 0x2) 13:34:30 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x626, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:34:30 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8498e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x9, 0x1, 0x0, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) r4 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, &(0x7f0000000180), 0x40, 0x0) sendmsg$unix(r5, &(0x7f0000000240)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f8a0", 0x2}], 0x1, 0x0, 0x0, 0x15}, 0x4004895) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:34:30 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x181800, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, &(0x7f0000000180), 0x40, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x20, 0x0, 0x9, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x18043, 0x4bd5, 0x0, 0x0, 0x1000000002}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r5, r2, 0x0, 0x7ffffff9) 13:34:30 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:34:30 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:34:30 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000000)={@mcast1}, &(0x7f00000002c0)=0x14) splice(r1, 0x0, r3, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@local, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) r4 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, &(0x7f0000000180), 0x40, 0x0) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000300)={0x5, 0x81, 0x6, 0x8, 0x5, "698271caacdc620ce45b9eb2bf480e33a41903", 0x8, 0x2}) 13:34:31 executing program 2: r0 = syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5a7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r3, 0x0, 0x0) r4 = openat2(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x400042, 0xa, 0x8}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100002018000000830600ef389be3", @ANYRES32=r4, @ANYBLOB="0400fdffff0100002e48fe1d99481104000000000000bd080000000000000091022eadcfa79f6dc7bef03ed4b3f4441e128561b8a5d9e3c208bdfe5d57016ab7ad919265604527a5400c4a9227502f8b1c71e4812c93b52baa5daa4d22c8aefd92b3b1ce6af7446ca7d91d08355e7cdecd855b489bc00a23698606de1db7"]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x202501, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x3ed, 0x0, &(0x7f0000000200), 0x0, 0x0) sendfile(r5, r3, 0x0, 0x7ffffff9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r7, &(0x7f0000000180), 0x40, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r7, 0x0, &(0x7f00000001c0)="79a434648aa1486b8aa3d23a71349b8a297a8a", 0x13, 0x24008844, 0x1}, 0x7) 13:34:31 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:34:31 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x300000d, 0x100010, r0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000000, 0x20010, r2, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r5, r2, 0x0, 0x7ffffff9) 13:34:31 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) lseek(r2, 0x40, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r3 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:34:31 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:34:31 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0x2, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40015) 13:34:31 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, &(0x7f0000000180), 0x40, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000500)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r5, r2, 0x0, 0x7ffffff9) 13:34:31 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000600) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:34:48 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)=0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_NOP={0x0, 0x4}, 0x5) r4 = dup2(r3, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x14028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000140)='./file1\x00', r4, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x801) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) syz_io_uring_setup(0x4b48, &(0x7f0000000240)={0x0, 0x9971, 0x4, 0x0, 0x143, 0x0, r1}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r6, r0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x80000000, 0x1, &(0x7f0000000300)="998dcc9aa703d684b4c1fe17d37124b45160577fba73f0daa6fd2586aa3878c05a231dd8cb98a652646ceea091065238b02460b2a3f9dcbaea25cca3b755b8e43c017630ede199fe0950c58c54d0784ece1241b80cd76f093afebc1f65569e8296d627c7d9bc5b5c372b6ff6ffdaef21b8ef753bd4109849a07b06661553", 0x602a9074, 0x0, 0x0, {0x3}}, 0x1ff) creat(&(0x7f00000003c0)='./file1/file0\x00', 0x6c0111cc781f6822) sendfile(r5, r4, 0x0, 0x7ffffff9) 13:34:48 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 13:34:48 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r2 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, &(0x7f0000000180), 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) sendmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r6}}}], 0x20}, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x40801, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x20, 0x3, 0x1, 0x4, 0x0, 0x9, 0x6000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x48112, 0xa1, 0x1, 0x9, 0x80, 0xfff, 0x7, 0x0, 0x2, 0x0, 0x7}, r6, 0xc, r7, 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x5, 0x7eff, 0x45, @mcast1, @empty, 0x20, 0x80, 0x1020, 0x80000001}}) r9 = fcntl$dupfd(r0, 0x0, r3) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xfffffdfc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@empty, 0x4e24, 0x0, 0x4e24, 0x0, 0x2, 0xa0, 0x80, 0x0, r8, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in6=@empty, {0x3, 0x9, 0x3, 0x0, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x1000, 0x2, 0x3ff}, {0x3, 0x401, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x0, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0xc0, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238a163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x3}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}}, 0x40001) 13:34:48 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) splice(r2, 0x0, r1, 0x0, 0x44459cda, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20840, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x1, 0x1, 0x1, {0x0, r5}}, 0xb7) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0xa517, 0x0, 0x1, 0x400000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000400)) 13:34:48 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:34:48 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffffff9) 13:34:48 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000700) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:34:48 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x20, 0x4, &(0x7f0000000500)=[{&(0x7f0000000180)="917e4d01bf19c28d4511c98a5f3a7590c7f3e300f11392f6412af4fe4f363196dd43b9aa1556de", 0x27, 0x80}, {&(0x7f0000000240)="9d029e3563d3104a78ccf2042a07cc98b48e02802b1cd83c1a294d0859c18d64773ad5dc2931b06b043b41415bf9bf03be52d0a493dadff8924f2f0b05ee192e87a65d16fb0619ed53f8729f80a6155d3939d2b27fd4cd283d1029dcbdc6a831fe5e03227449e6e1715ff9e581af1fdf86e25c191a780bf2b7df659b53ead8b3365c0c68cb7e5a3621f6f1641805052d0befb09e569801a6a3e1c25683a5007168229367a9a1e71be0e99a9ae2e09e21465d2b9e87e11bf98c02", 0xba, 0x80}, {&(0x7f00000001c0)="d71d2711cb5204269a62ab9332b8855a4e81f7b07eb48c0ab64f78dc1b86ebf89ee3f574a9b4a6a4bd9b665ed7c6ee398d85", 0x32, 0x7fffffff}, {&(0x7f0000000300)="622bfc0f501e", 0x6, 0xffff}], 0x1080404, &(0x7f00000003c0)={[{'\x00'}, {}]}) mkdirat(r4, &(0x7f0000000440)='./file1\x00', 0x28) 13:34:49 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1d8}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:34:49 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x2, 0x5, 0x6, 0x3, 0x14, "e39aca1c4dfe21dc75cf00"}) r3 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, &(0x7f0000000180), 0x40, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r5, &(0x7f0000000180), 0x40, 0x0) r6 = timerfd_create(0x0, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f00000002c0)) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="08020000180000022abd7000fddbdf2500000000000000000000000000000001640101020000000000000000000000004e210000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:34:49 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x10000, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, &(0x7f0000000180), 0x40, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x8, 0x1) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r5, r2, 0x0, 0x7ffffff9) 13:35:05 executing program 2: syz_io_uring_setup(0x2d46, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x83b}, 0x0, 0x0, r3, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r2, 0x0, 0x7ffffff9) 13:35:05 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmmsg(r1, &(0x7f0000007a00)=[{{&(0x7f0000000140)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)="6f78a86f7798c2faae0e7b095ba408aa23159ba6a0d8841dfa8de8150c6b53fe771b2f1e647d16ffb2214afd7860e1ece01105ab43e5e1afaf568d3846ebface6f5d56fd45eda9bb3cce7b76e54c6faa562fcb", 0x53}, {&(0x7f00000000c0)="fc9593c3ace85d2a01246b53bbf225baefe4286d7d2f409356912f4d639ee0220f16e2ad184f0d31da76c7731dbac173012d80a9", 0x34}, {&(0x7f0000000240)}, {&(0x7f0000000340)="8a9ff58240f5b1eba25886260afbfb475a75bd93578641765d816931ccd51f356920d376822eeafc9f1b7e97ec4e9070a64bf8cde10ce6d0e2395360c682636f890c3fb63769e36a78304de8287c02e2c983a67a720b8dea3a96663367fa84fd7bc0a7627e9ccea42b54bc5220896d975f3caf09f85822cefdb696eb9219b334c379b2a62c96fd199831a55231227ec5057f4cc71696d75f0c1b45d78b4740", 0x9f}], 0x4, &(0x7f0000000500)=[{0x10, 0x18, 0xffffffff}], 0x10}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000540)="cfeea14d5f86a543cc76f51d75ff8ef4efd294f5018d2afe4712941327217bc2cd344f2a814d0e6e1f54d1dfc1666285b933ee2b566ab79157776b3fdeb8a6c8fb0a983f98deda77e5ab78738fa371c7adc322c9a800320cec2f2278758c7490f472e5c4474be631e38de3bcf61f4bba5d320f8922073feb4645258f7841b75258d352996800300144e25dbb92d80721229a4e323da3bae74f4275c6b5876d5aae0a64e63cd4ef4557628a0d74206dfa5fbbb57628d3406b8a3575703b8c5933dc6b1fa41c5816a7d0fd259a938eb2e5cd7c8b95e05e966d0c5d3b49887b45af071403b7c4fa7f36151b228eb88ee64521d372b4c2733e02e9bd275289aec0b9de394dd682f52da96de63bc3d780c774de775d19e521805352487f51c17da9b1098b7834cd85ab248c3027a17f7b1ff2defd52b4a8984cc0906a514a3fa3524396bfdf3110371a66e7e5afb12ad88615265108dd2d4199174561225dbffe4dc8f7789fa7fea595c5cf991780a276b0dfe4b0640a7f362f0e9e60bd23504db17b07c1d0f0ab321d21985f9433c052b87ec6758e140c6a2db1aa26ba3900d87792c1181d8e27ee8f5c3fd6697fc2b1cec8cf6b9dbb6c7e4b4cc7c09456e39356d71b333237a513cfdf8609cc61bfccfd007ed53801b10329f8e1235eec1df7fd3bf20c32c2ffc3c90f9e5a4664c58b5d0e33ae8e75c251e5bacc7b4f89893c8c6206c836f15090186a57a60f48dcf64620f58e42462fa4c32a5f04d2cedd8ab48bed911e89afe33b1984f89ab0743f42af3155528fcba5e4b740d107b2e9bfdfb5b39aa8777f3a01b93e8a734a44bbdbd25ea073d6da51dc27504a15d2252f3f5603c89f6764d285668d3b7e975d4df23d9b8b6da13528a3ddd864ad3fa11d397e1434dbe6578da54f63703f7f8ab3d26baef6ec275b63c37598049e72eb671bb4885eb527f2e7e1135c239a49dc729f2455e3e2c58f59fb7b8c624ede0b3641c33ab430e50653af2ed9aa7d8b762e4eb4092bbd553ee4fe1625ac9844a3761f55d4d16ea101e1046dda3edff1c4241920d5413f7066b9aa19521321fbeb33e50b199794cb4ab1973c1d5689c3aaf637ec1dbb3f5fc590fba29fcc164bd5362a228b15325f9f454c9328859e665c8f7081077826fee846514777c041232cb9ef4ac3340d17894bdbf9d36260bf41cf050189264e6aeabe3deb7666dcfdf80474ba0bac77f5cb07fa4a0e8c0eec53eda31ecd61e18588e525d8ae0c8c3f1507fffcc814c03b26e04d2f0dff062cbac010177b66e8837ea44e35b9b5ba7f22ddf6692a8d27fc5f76c9ab5a48b5c94b727d4106903ce2698cfe27747f8059482a3b969df58be06a241fcb15a3e2f055bb1626749fbfaf1b36624e8e97ceced827a95675da1b69875c069775b9e059975bf5e6cb63e67a0b2f92ae949578e0c93cb6da39f3d0665ff516eaefbc92e3acbafbb477b752014995fd5ffdb1ad6c5700cd522050f3e572957082ac6c2ed617d236a9f7c417e462c83d2db78772bc5d5aca628e3a3b26c2b256f0a2bd2407ae89c822f852a9cf686e05a77522ece9fcce320bc9c0179efa0229959185aeb8f43e246a484ef3a69a8f315a4ee05aec77077890afeceb9169c4feaad049bd007f57b730511ba38ce00b988d0115b2efeb9a76c4b124dd68be805d8dbf2cfffe3afdaf550a9e64014e3c9d1af6701bdbf88ac8810aa5f8a0b5eef28b62f216dea73a67d7220b96c1090e02f730c2e2840e8e3a2a5a4f85173dc085c5bece165881ab93584c610276cc4ad19f9b142ccbc1b2107d44808ad861ed42efd22edf545369610cbe1bb85fbf5a71a24c3d9a9d1aee7e3569a89c5954f9c3d70a7a3d239ba6b4d77ddda532c971ab962e44b1d14d37280b7b656519c56736186c967837e0767aa0a4cdaba1e06dcca904c3b9103a9495e2b98d1df38000aa22feffe697df33bb50c7091fdd2ff6a4c961a7d183ef1e60af807bad92ece6225adfed47b77be8898009d6ebd4d7ba0b766a116ce9ba6ea17a645e322dd7bc046cf061d5f4bff09c00ea008ec826fc6bd3f39c29f803afb8ba01819430094887aca7055d6ec99ca896e2eb2a8186dbc7a198ee322be5a63630ebe246bda2563e10f736ee9d451fa6b59142d304bb8bf63e7b794e38367715bee6745e61ec96f62ce851dd783e3ef4160e8163f3656014b66e5288277f8effff024afc2384df2586462f2ef0593115f2d52857b88fb747526ed848164b45fc2ab198472d8fd00821500f9e482d421df36e61df71485816caaee47641739751b39374330a96f657bb6596a666cb35480d990c8e67897e5fa7d4ab6b3e98ad85dba0bbee9272a07851358f7ee95625c85874985f105b2a13d9e152a9a411464b17bb44fcad872eabad338f181b7282909acd0e2e9b9bdd637a8fdd4ad1c3f1fb66c1029f89ca4f91fc59a2551d37271a0009f4282ebf3ba2d68c01f1d476422c5882ce7c9345858597ea56efb1839cd7884b8f6f27c83be43f25aa26d938bbe357d96faa91841818b56b7b788936e5cc1f5c4a76ad9e8ab1ec9d032dd60206c0febb062218e257eb76a985313062e766220a990c063286d7564828b33c7e935c70425a3f9579157d06208531c9c2de9d488cb30f1477616fa4357cda5ffb3dc06273f839415e8b47e8f88d39c9aad5a410cf4cd3f3640899a4f90034c155496bb1b53666e3604c55692211cf06e44d8402b946edb8031e36a795e761cb207e3043bdd9b1257791427f7059898a1a8ce7efe566e6dc1a53d8af71eca053af08654a27eb02ae9b46ff627976742a057e41c26fe0dfce7f6f18f3a42a26443c98d79b7bb6871414e29582c4d3b96dbdffc3362e6ea2544e50fbf0a9573faa1f25173be77ebc46e4cda7d5a1fb9fe5cad4bccd586837d18ef0eb0c5295737b38eea0cea1f07a7ff5253658f1fa72f772ab9ca2e9e687a8f3a9f98465dbb117d6981751055156ae5c7096cf8c36c6f85b2449edb3165ffa217053f87f6ebe6741d79c83bceb15fcaa6e8e57f613f4189eef54cee3d6ec9ea17342b63b80b4b858aad4a75acc7057d38a8edfd327f08ef36a3c40da0deff69aa79fc4426b281a4be077369b00737d880c3f86b634308f0d3d719fa49d4bfa7d8d5bf064e69bfd226b407a6319707dd3720e3d4617526b89f815fe57b5528b2cfbeed30de4b40cd88a59e27d5d72526ff8c04e8222137c6905f04b33dbc6e23e28bc76d46d78cbb408177e7b2a1b2a83f9fe2e7fc173b22db0c0e549151a5823484737b2eccd62d7c53a7dd0f7f101211fec45aea7b3aaa253efa9c3c91f3aba98fbc35ae2cfe8399f031f71667acc2d7941e4da558d34b4ae2163e074791fe941b0bc79b210feb43e7c235c5ea7e4133a25be73f7f8f44d0ef6f9ce3398b4875c5a2b5b24e9f71f5eee0fd505eecef68deaeb3b6cb0169fbecdde4067d2a2ddaae0d60887636f224fda7f9b19a2690b17adbf4a7335eaf9e92903eaab14ebdef7b0750391932bcccd9fe598dedeaa85c575547e9db046d2c67b0fc7360cd5856d17073d7ad9a7b5f4a9ca35bd99b3d8826511e5dceb98595d8d13286b167570a59f5635e4ee33fb9a48ad25e4003e7481a82cd05ef892579bf7fce46107367d5ba86f1b1f1522bb92fae7d04bc4b69e23aac1ad2617d2e01988aa5eb0c571713912916fd4ebef427aee6b604ade331c4f1bbf9713508ce8fdd5318d14bac91d2969ea3c1affac5acbe908e29dbb5dec911652b81898dad3710cd48b932f36d4ff467854e77331e2eddd98e948b28edabeb44b25cd1b5ba3bc01d7f65daee278f0114fc7ec8387afb710d23096152f1374796d0dce7fbf946b3d8d95fb14c4d95f0f2d2e08db77c1966de6ef00a8bf596c4fa788f7aa311b209c83bb847d801dc77cb0d4325609f1a76dd6db378ee05f134ceb2e2e09cc12f23583d824b4335b7747a77c0df73779d19329149ce89e82b02c568a6573fb716c3aed4b70df7ecbcf720c136c5b1bfe97165b1554dfdba98c98ee876e8a9e1bd091519d23d6f1b18df7b7a66133ef5d3afb0608d0023569318795b4835155f433c62146272d1d5cd8c6f02d10df0494ff7b515ca93e3dc21c58e8acafcd2c5c1ab1331efcf5dea534c8c83e857b6fa00eeeddcb7d955055c144f51f07921684d197a06108826c26d5810e2ef5b655fba6dc723d712adc5bb9d4eca554213735d01af147a9b6ff70c430f3201dcd34fd108e9aec3de027feff1d832526fc2885b88f3b1987b42f1cb398aacb72efc99009307289aa53730d07b3b71c8549f5c7be85ae3dadda6c8b40ea5472929d2b1ced71d19d7b8dbf4a0837911ab1f8f020a2d57ed42888c79633252fe71d903fc91151d2cb291a64434123f0a9c3b32ee27aa7dd9222296448c094d66961164092c59bc60f36d6af73169edc9492fa8d4dea4d24721e4673da0887bd79a2b74cf03de0eb064665a19e0404974e26a2369f8cfb5fb363e0bb986b8c7307c1d288bf5702817fe2b294024ff676ef55585c8828b84d8d91ee068a6853b4ca0af7d590723cf7ea403c9fbc429519227e819e52d1d86a86f83a4805c5a41007a5017c031fd9fc8e0207a3918716e90cb8f7a1a50ae51a2d1b73b4274477726a9858df1663507984cb168eedd0ffbd77e7ce928591e127cf378dcc641f577ba4a00df8add791b64553ddede004adf723f2513197597b07cdb23f661e5a366599f628b9868d88c47f7ce8e134e5daae26914fac6066940d5648a9382cc0f1f823ffcda4d54f5183142002897894abc204732e2832c84973ebc36a3126babd1aea8bc9745ee11362c15bbdc823065e1222ec9e28b92a2a2b5be5c5307011101803aa41a1ceb5e710b4923f8947315a14e2925fed5850a99fa456d36421f9079cd72345b597842fc11d90c6573811fd07371b60eb085694831e175d98778332c3290182169dcd223413c436fd655dad50c0d4d25e96b453f7f884e0acd75a50556e872898af94e8b197c36cc9766b399679fdaedcb1ad03b28206383c646fdf2db22e3cc93862031f98f914e885380bfdd0c6d843c9c7c9d860fb534db111f8cd15f0264f4225f36744add93d663cde5b8c961eae7216c9a24c33ac0495cc8fa620165adfb591d81eb7aabcb740e0780e7e6df594635bfe8f31ee8c8dc962e91d55a29e4b16a39ae6ef7983b43a5d4cd8cce27cea16335fe88a492253fc48354530b32c683a0afcf655764a09729401b9dbb7d8231c76927933def7874adb07c475f8d2f2b2f416b9d67a05477abfd59b2ed2b0929fe5a9a1df6403a160c0ce77a9ee685029e9429bca83b9fc9d7c1a81eacc3821a3982dd698f380cf69f1d1b512935d91b59836d2daab18e2fcced03faac7e3b1c168e1754385caf632ca1f03a170d23f4feea5edf3bfa5f57ffa8802ab34cc8f9a11cc8a17d34219ad2a4913a2d142db63a3c457da679ee5d4c8fa04860d92cb5a28402182b8620182ddae49f4e4753511c38f4d6d62c299d5948a078deea8e07196b8a856447620d6975b1cae8b65a26cf51143e30edc6c92775a0c10a7d435a491ab67982ee0a10f70c3e5cef59c03789ff8de65732a5638d6f75cd7805f8dcecf17533fffae77c9638d25b9a85bad736ef9a79a36676f1bf59e0c37a42105bafb68017c40ac2b0238dac027f8460f73b3476afc9c2d26a8bed2f1644716217a54159d808fb42a0dad941e2b2b6e07d78aa9e268d77dc800c406b3487180b6e15f38db28ad0f39dc036aa863f07c7a35f029ff", 0x1000}, {&(0x7f0000001540)}, {&(0x7f0000001580)="d1571f015cda96e471c30550581d78b1beb2042d4a695dbd45df4f4ed0a7765b7a0ae77430d990b69bbddbbb14763f24", 0x30}, {&(0x7f00000015c0)="aea5416042d9d7e5ee82d86cbb742746a2c126e315751254a69f2708b5c13d36cab7e14275b651a26a2dfc59e1952be387cf2f6a35cd723e375c8e7e8a446ffd36f6175b98f8ef14726b46deedcb507beda40e19414144121178c023c87c1773325f151ea7edcffdfbb6ee5741720c92af3dbf0971fd2b9626c431d20513f4afd6ef37a955e2577a00f5e6", 0x8b}, {&(0x7f0000001680)}, {&(0x7f00000016c0)="e25d42d29bd2b31ff0296fde0402a490af512b764a6a14cb9826be0e6770d5044f8a7e6a04ddc05f5fc7a308887cac1a6333aaf8180e562ef58af8b29f997a13821c60de91096309ab3dc2d7a77b45875185c3d87f3b47be4cf5999232a87e3d4eed028a93ded3d01d3a9848108c9d4505e671c7887568f49e10441064c8306f5f66aa41b71d5dafe5b4a38cbf159818e21014880368d1fa9b1e2291b76d71025952f2", 0xa3}], 0x6, &(0x7f0000001800)=[{0x1010, 0x6, 0x6999f894, "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"}, {0x48, 0x119, 0x4, "1f536e8b43e7f78cc6622b425921d510df9153bb788d50cbb04ff4df76968d8e003e2d95771c38a65e681c21a583d3d7813a"}, {0x48, 0xa2f2a8b336b6b5ff, 0x1400000, "73826081abac8901575ba4797f0228c83dbb713475b33248f0cfe30b5458778e2a8dd72123767adb27a9e6593d50b293e87711"}, {0xb8, 0x103, 0x7f, "1b282cc4b564120078ce8bb6ba56d400e4910276d9c76bd9b4bc8b633f819a54fd183a833c28e0d6970ba649f7d1883a58ebe4b67d8bb46a7f78f9884f797814f0d3485c756b5ba861cd4c296f69f9112557fc507c94b1efacb116a69c6b8b3e85db8c717383280b4747b18fc1da0996eb443451f97988c0eea1d7b8c7b1f1c60a06eeef9c76be22989e6e5be0f1c9a281800dba7df3fe82232a98e1a861176846f3d7e1a13105b1"}, {0xc0, 0x10a, 0x7455fbe2, "e64f00cc4d2bb5d782c044b5db643d8ddf6d462c19221262e87f20ad19c34103f0cba1a989e6df04ea51ef511f25f137bf6929fdcc2e69919a6de39bf56420a27fe3a312e7aef6aa6ffadb12c669ef32aa1fd573881ca531b8069a706f5792db02d107de5a2d3e740f8be4494a2c84d20574b73f52e81e43c9e07dd18d47a789019678206eaa7adf320019087019f404e99497b55475c2f0712f943fb535f819e5e1ca832975455b91c738ae6d43"}, {0xf8, 0x102, 0x3, "dba8f9ec5eda57ecc315e3fe06c63e843ccdc09be29a084a652f611a2f97278e022cd3c7821d3c2c457f61e50b7021c8d0c580a1a7173f3e93c03587085541dbac8ead6139293c9e1aacd74047a3a37bceb04f17943ab122cc5a3629fe0eb2a084bcd8ac2f8be1e81e59d1f26de25432b6560a6395104f07651b0dfacb5ff6bf953e0d68de6ff1a186b4489f9359bd69cfc7025ab72e0a7f0b9b044895ba8677e453adcb861be7f7ea803d08e60a7d27dc658f9bc8cafb0b5a04fad01b159f73eac2bd2c391a108f275eec466adfbf4066405b58f8362d01c652490c09e6bc2d02d5"}, {0x98, 0x112, 0x7f, "3a775583300c0d41ebb26fb9e1ae152ceb1e23fca1ed6bf8a799fbb943448f364c1d0abb7f91f805244fbd4c503ceaeb7cbb10f0373f13db2257c4dd4452ed78f39cfa5dd43594ce47ab953e91863c07c19e5d81b52c53bebddca91fffbb6295c7b45fd599f4a9eab8fd792342c3847cf49df456703eb86cf379d3bd21412fecfe"}, {0x110, 0x112, 0x401, "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"}], 0x14b8}}, {{&(0x7f0000002cc0)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000002d40)="6d97a6568045cc6c85b89e048caa307eee259dfc28958b117b03cbf305d80790d4dff399cb7421f9a84b0534666027eb16c510d5381411abc72036231b397f2b24bbb0", 0x43}, {&(0x7f0000002dc0)="ad113306e5f778e3adbaafc7d142f14c43cbd88341f1ee11323c4021b0a5937fc798e449e9b2f9eb4177757fd4a96dc75201cf632f1ff2d04caa8e580d8abc6a5fac78f37e48b3517bc78bbd67347f062a80f30bf9f96375ecede0565ae0844306a055782f4276a5a291cd83a22a135a91d921a3290e72190227bee8fd9baacc563e58e66f0dd7e7e8a0864e07849c1b174533960f342530d062825dddeabafef35094c763990c34067f1121a2f4042efa187a36ed87c5c9cbf3", 0xba}, {&(0x7f0000002e80)="1f9d2fd6335f6ad3c20a0f8433a1ee4cd2a93e03a916a4b759672171e5ddc3bf92a6124e898a9f458e7881cca4852a4f315237679acd666c4664525f760259a38220d6fad485af1c899596d55151d995", 0x50}, {&(0x7f0000002f00)="aca57ab08a39e51b2445ab4ab73e9164ad9abf8b417755041761e0c258e9146b5cb867f0b13b26447e4aaf9e885dda317018660011864aeb3db2518a6bb6e8c6384b8474a00200af6b048b66d14486aa58f9784466b26e36e6469b2b32ab9c9e1cb385bfdc60fd7536cdb8ab6b4f951c4074cb37aeeeddf6cbf5a5addc9eff4ae944c2d07eabe92b88e34a8e94f49e8ce6c453e78fa660d2aae6600aeae9c25a8d1937ca34227f70ffb43b3a1a4a4d0d0e0605d6ca854f753330c003fadb892a1802c1bf2c8ebe8c73d699371f6e425576e075063ab1", 0xd6}, {&(0x7f0000003000)="14423685b762a7e9c99ce7c18e183c82fd0e3a1ba20a13eebf43023ebd1ebbce5ff2ec620411a7a12615c17d234d29da43e8f72f1524ba42325e18b516e31599126b4947dfd41d75289e8a7f46505c95ec41d45c245d366404036c25189c4e2f950fc074c171ecdc38389c232dbfca16626d02ea137096d76c52696b19e6ad6a1acc5da8c390ca75307dba3555c3a07326674bd0c52b643601", 0x99}, {&(0x7f00000030c0)="d64c3eecab4c8d54d917e81e0fd8fa57a0be2aa15a4db23899085ff76137411932fd64f214a1b1c213fac80cdacf4de1f21b4dc08b3cbbea6e2cc8fbe292670caac72102cc38dd652da5dee72fa92fe43c9f529df119be9ea4a7df6970e930cd0475a62cf925a1bcbb895a9baa76843a60", 0x71}, {&(0x7f0000003140)="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", 0x1000}, {&(0x7f0000004140)="e9a6472c6959d94a6e8b3f6e4c606f207bf8baa9974a7f0665459adc9fe5a84c71ad", 0x22}, {&(0x7f0000004180)="fd8e14698eef239c4cb47dad77bc0306244d4102f54411ea4b66717340a61829dad6e25467afe45104", 0x29}], 0x9}}, {{&(0x7f0000004280)=@generic={0xa, "6770e59e5d7d7a0acc3b2e425eebf24b636490e25f9871a8441aa358d2947e6464559d9aa7b0ce6db300daa7d5f2ac56a6bc501fcccef624c4c448efca6e3793d15ae0e08b0dc21b2e6ec6840c22645d03ebdf8b32ae6f6518a50a13cd5575d10a0d1696e27c342eceeb82fa02233f39a412223bdd32a25f8a2c72e27891"}, 0x80, &(0x7f0000007540)=[{&(0x7f0000004300)="7214dbaa80c9433a9488b18f6a8569a94e91696724c7b80913858d275f351d46e7cf7b7433d35cb3f915388fcd93fe72285d39984a172c206a9e12fdf2084603bea7b17f35d4b6ac503339611946bbeab1c12ce178e8d448238f99c3734f43d622e1aa494f2cce4f5a", 0x69}, {&(0x7f0000004380)="e0d10073b1641d064fb72e4c548f6a2f4b84eac50d79e13ab9b107bf43c423ef8732e398de33df48e0d4d58367ccef7d5543cf9c01285e3206192005e4f74621163ae5a33c11dee12fad68192b8abb256dac967631596f77766d448fdd3a0d6bd3a38de5ab626d89d81649088db77cfe7d5f2c5471ab638daf67a3326d13d88bc64887f343cdb43594f258805cb231de83cc45a6a8f07ebbfb7d39db313e335c4e0e92bf8992747414c376fdbbf7e33dfb7fd0e1f2d52831afc07d1cefcad52e041f4fa3e0f87d4a1a4ed8afbf97c1d58327ffa9c0058abf276dbfc739abb6a980de0bc8b3561809549d3fd957fbc8a4e41dc934475444f9e83d34fcccdb69e5f5abe4f174652f39bb9b266ceb9d251a34ae4ab882e78606ac96e397a62edad9ba8af336257d9a5c33745a9f0ac3ca8835210f827e877f50f5b49bff80f6e1590b45666ce9b5a50caac31c262a323848175a4bd0efa3825121d6c591f3016c0f8d1c90e87a9c3cef02099c06ccd80593d344892b4228dc775613448b6778aac761e2ef0fb40a1d0cd1ca0bfc0401913cf01ce6229bf39b21e895cd00564e5e8785401d647376e6a27fbfc529a5a076c72da9ee734b96548fa3828afa0add5b4141e75f5c14a1458d4a55ca90e9443fa6381235e5855c2cac1905d1d2b2e3d7fa7996493b87f3a8e94954dfa23fca88980f42487ddd8e0098d297d7d462098a32294ec717c6b0bb69c0a04647825902c81b12f1cbc1f0d9630d174e2082242cf2ad32217316bc7fd11ed8b64e35b82bcce1018eb1ded7fccf30ea20abd34424e4cff00bc044aa69f839cafdbe8e19b955a84f1b884d93fef538781277ac86ff191a17cefd340ca9d10850221a215e30b89477e29e615bd6f6a109c8e0caefc88dc6b6dc685f2270bc4c2c96ac5857f6000b317ff038123c2325f1cfeff34b22a777d5bf223379d4cbce51aef88b1174cb331cb74ebee2ee5d0fc44fa264b30b496abb8e9ad5b8202ca5ed8b17b286dcd8a06e3bd107782ef5f5ed8837a3c1d006efc00679b33a91c19e72862d85e3c25ac7be3df22c05aea367832f11e07326d7a7a102d10f5103145c499593cb454686b2fa30b9edefe26b293ebc3612578707e86bb6d1c43e3bf3b2e5c70eb743f9b01aaddce179a07ba73edea0effaec61ababecc94208f6e1506d70c378a69be808019825531489a351356dc6c999f7ffaf008d4090ee7dcdba905fe5fe14d1a134c864cf51e5bb125668ece8c849fb37eb4388ae081bfbb80a6afba9d3a39578fdaed5385befde736671e72b17a339b00245729d68a6dd1ee7e64218fa212b943a02c3a6afc5b6caf6a194e2a2faf72101e8c40431ebfbd1f067acca1b7a6946df8ef4e7d1c3b1307640ea78f2905d4e3ebb907df0db2584ffc000e98c3935fec022d5e2a16d4f5c79566b73dc7ce36b479be423b06913a72e632cadd5b2573b548096154d6864e1a797e6439f702786886d1257455b327c2dc1f4cea67b52fec0191e513c2df0eb54f983b879f18f3e724764e863d4218ac5fb1e80e0ba838570eef46aa6d1098fb4e84444258131ce1257c9b0eb04d0f264f17cb548239cc01bc1f1580280c8e1dad2df7f672241c44f66e9d7e50d658d312e1f3b1e8074c819ecd13a8cdf17cbe8f48ba77c17c77947eeba957c0558d6ac306ea6ba315c8f595161faebfba4d2575ff9b9c4802144ae51d0c0dabb6f88d346c3ae04002bafb678ca62668dc1f172fa308c940b43f60c956b5c46f4336e7ca2d797d149865d596f3a81b5021848aaf090f0ddd85bdd7596e2f8161b421a2acb0564feeef0af9f635232e1925770b7f2b2cf1188bea1a6100f30eb068990879423fef5264d0027f6a9e45fbd8928721a492c72674b58ee8120970476beb189c780b13d5db3e905318457146983c4f1492a2f6153e15a2d12f1c579f8d41debfd7dd70f6ac8b7810d87839ddbe73c1ca2aeb2c8a0aaa4a88678c21d40bcbc93bf99ee37ab1bf2dffc43ca5086880ccb0fce0f350ae2207406b6134283c1683858b7034e1800d07be0130eaa05a9a90c1af73840b1310c8fe692f1e969c85f63b644f7ce9622550c132121a696cec5f0c02f8cf8ff3816f23e27d37d6146cc5c6ea3032f298340a5e2cdc64c24679adf64ceef3a0bfa89a3cb0da2279321002fed098a12086c96df383c91becce638bbbfada75ff50ff2986368841ddd6447d864bcce497bce9d2f9af7e1f39c37ffd1710d158e53748bbbb7749abf844288e87204d665a7650c7ac464c10453d23808f53a5c2d21c9fb85e95435c02711b1281ef600e1b88e36dbc3283e2dddd97cb5d1401d4837f150259365ccded05714fd1171552e1a9f6bbec7d7b4f00d2c11b6177713e0c6e98e3943e4a79f72114e07ea8faec9b890530f68705ce54b1275507d9ddc857fe713274490ff127af80e9b88d0405cdc724cce803f9472b14ba2314336ac190f5a71bcf5eb072e0b23fff30ffb4d0c6dc85203c478b3b2952d2ec0e716201af7a2cb2f60774acca5fb14cb4e0a8820979a53da05c6f99ecc66795f28a7cd0b344d1be7aff9174c2d55b97f7f6eb1a88aa5c56b63c6ce12dfcfd74208f051d98d72db329af63dd5270ab3a2a909df5f15b0cefbf538299dd8cced797863e1aec184dba25cbc7adc466efd030d59384a1ed0695fd81c36c81898c9a4dbed0888a0593446eaf41345b66e6011d8cf364396371847cf77c48a67f9c92f463de4bc7a728decde5edc2aaebfb5d836c8b47193b0eebfbd9af910223702973219f002ab12bd66002de955ba69fd72ce55ad474d376820afc72edafab714b14a3b98e107801ad246435cd52f6dde62ca316d583501396effc03c8db717ef0ec21e3058ef8d3c58b9d8ba3674fe668777eb64391bc71dab426f2250764e072ec3874a3a51a329396cf7b062662bca2fa42075642d895a2e09d19fae1af2457aae0b66b1e1a198039236443058ab2b46e60b207a5dcd18bd006042623dc2ea18719843ea599f549908975fbdbed9fbda820276ea1b576413dfed7a47c27f29bcb1b5b92e5a1168ccc75d3a132d60702d60a93784573d88cf3dcbe8b07cb640d21fee5e89b822f2cfbb693748cdf0e13c341da38c2286ec5251a06330fde7c7ab1392f6d53a8f35d713f35b2122d45f208e32fba891e1ed818e3f5bc72f361fceb2ec9ee4399e5dfc857ca6ff320eb425239f6ab280723ee2aafa3369014023f5d9de113341c33b7d53a660ae9e051fd99d71e8e8e8429da4c816bd0648e94fe4245470e3202eef623c42829d4984ea90fe03e327ac9d71aa79016961ad095c0d65513985bf9f46501910ffaad119e65575fb18d37933a45c7c46e9d95e876c135c0626171d28fd79354b2ce75d518d3823f9b8db84ad79596002352c2337382481500daa37373f140cf73aa79c7cfea92b635e43d4207ccb92966f1ae205a2791db283c4f6336f23c57ba10fbb3059e9dcfe4e743a861de808e5061014ba6a59a016cb6511fd29480ecb7caa9efaead5044bdd15a6a3ee0ef449bb73b9eb783a0e97bb9b02c527d876a28512369048f79ee930351b51e52c744a070ef8fc3efb63075ce4240e5f1c408725e229b71859be8e4fa5e33082f9174cb782e5a19d52f38d7493fba6a99dd2b26b776f465b1d3ad19cbe1b894f9f296a1d7c545e3535cc96e4eaa8c770b7eed5d698cf8c6c273fd3a96e87f90d4511559eb6c2c128a974a6540761b58b5e35377c5dd8c40ee3ffc13f41df3ad43fe8589ba236658050bf6d330a7eaee7e65010649c57ed67dd44f6b43b34926548e5aca5549ae2f6adb491143fe56c240f02d7c6c8c50e4b88843e2ce0920ef06f8308deded2a548ca8120e8a7138e20268068a2c5e91095ed5c1600e7bc7511093689133f29c8b79c8bbd7a38260f70b66b2e5de8d32a19d9e4451b12d98b9565a45e5201c8766267e6fd72e8570e21a096ac92d4ffd939721807937e6a1160b0bda4b722c9f0622becb5648a35190896ec736dda5745c22b85ef360574e92837dd2d7a9aae8f140d0ad8b5d55c7886d51cd06a4f8a088459d53649655ce6a91bb1223fd8d8f28245055106eb32c27660ec71043dbce29ac51b5c8f3c4afe5a5474f23dc54627a933386fa56070ce9c10826af5e52721f57e54a295e0a7ef5960e7ba7212a6b4fbcd2e7d7b74da7ae27f59e456776e80386ca9cd648e728ac8a055ebb124503222a88fab554a088f8726bab0ef3b305fdd6bc33afb6d558de88128b694c5fd2234163e69c1381efc891d007031afbc2872e2ffe9014e58a3db034cdb4840ed75a3378b6709114648ae5ae0466e0e3222603f663472ad6e74f62a859cbda78f6933d988e46ca47b945a6f7c394e561db4c66777caca0a2e2328fce0a7e627c6cf80d0c2408b38cb9cc29eda623fb02af686b3f73a0ed12741a5fb1f23de624cc804e760311a6d73bc03eaa2d704688ff14c40d455f6ea1bb4bb8eaca4f3eadf59348e538ff08ae3f39c2c06e06aad0ba145e305d52dc0eabf6ec67b9fe649435d57c115388c3da718a74836be53419f12dc3aa0d8ec036de7c0f3d5f79b19389629ac12fdd5c643fee8fed7d14889e95f16216aceed3485ddce707e565326a1b0b09dd9f744791c3c7339918d52ebb36400780df3a4f5ca84456ecaa6c5cb92b3d527741328e7bb7cb2ddda12a40e4e39fe2875b8479b2036b83262be2440b37aece25f4fdc863c8f9b76922762a7b724578ff089cb291a8c9d90f88f79781fd5505125f202f1199eda932a3d90b951dfa86415de5364c3600166fc2c6408278d5e6db16a2365df49e13ba8b1f8dd3b853b1deef4b0857ed36dc08e59f9ce59f11d39f638df2c04244aa7011a7e4b2fa185ba7d899465740b2b7959817b183c20af4fbcbbab8a3970948a97e5ef7152c7b62cf85e9de9245033596a75962c342158e18ba7c31ec5e347ad64d93558fbd35c4409a1391fc49d525cf015978eb092924e910f2f5d0322ee51da733b7a47972f043f6ed7ec69769d5bf3049ff9a0ae322ff689677f6fad039e53211d344cca1f7ef4d9a29a71841c07c88c37f44070e28dd3ca02502aa85d73e252fa559f91e6b01c5abd31132410c32c26ed5fc9ec3a95f9b1c1ea25a3aa9e01293f36a091b74f3a26415a94f5a2266f737d7d2ef51634cc1fef99ac71bae2ac6b3a962b87cdc5a1241792dad67367d8655987476f5fc3015b992c19d943e9faddb0168220589403c0430d4f2c202b4fe741441aaf7248fa08c2600136a905dc9931a60fc3d4a689ca8cd2cbde6bb4ae75483b3a56af175e12cc11a5273ad5306fde261d80622d368291dfd38072f45158c314b23061afd4fa2c1d1261c9593d5bc3a32ff5759724bfd0191c72e869f0c1bd7fd89f59453dccac7f0511bed31946453e0c7ce8d207e38cd4662fa1d996ef3a56ca7677327bc99fe6985982f4d91015205356914c5cc0ff872ef918dcc935789c06502ec0a861d4d96e875da2517f12a0c3ca6548889ea68c6e6b127544c6f5d1e976b82c63620dfcd646d27d391381ccb72c1d8cec14ba0fd065a31da1d1abee1117692c147eaa5321754c058f3a0c11ac9eff504ccd84b3b9b7693b797455cfebd2717d8605b25dac2ac04b68dfa09323c31488264e6c85c0039ca63240a258346e318610ad2f6c1bad1a1366a65384c075739e0b0e974be512e8c92f2a3d38173ab9586516ae96031e28730fcfa3f3b538eade39695fa0283edb23dab87400c3df443252cf49098ab1fc80", 0x1000}, {&(0x7f0000005380)="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", 0x1000}, {&(0x7f0000006380)="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", 0x1000}, {&(0x7f0000007380)="54fa94308bf3d8ce5b0315fecb8e4b210231b1785fb425f53a61cc33f0021382ef84ec6644310be1e723e73baf7b34d9810551400a61b8becb011fc69f5c6aa963eadfa79740f1a86c3d329faeadab3fa9fcef391447f813235e61c86609b85a13c7f8836b", 0x65}, {&(0x7f0000007400)="04668cc5b41acaac9f7db23f20131f7599747d395b38a26272d517d78e89b7602cde5ff98ddf103f0c8094bd044b25440a6ff4db7a06e5adc601b17171b6b28243f98b1e6c2918", 0x47}, {&(0x7f0000007480)="7d3c1a126358200c26e729592540c3562a91f067e982231d0bff7a4a40fcc03fe98b4b51cc7acb1735b754c208eb49f6e97cdbcb83f44462217df2ec7f9897dc70228aaa27459153c38428319b06de9c0aed5cafa32fa1532c69b089abfd213eea23d38ef150525c30d7b8eb5e51f4cfc1a8d655365a2ccfe409ff4d98807fa504717e21175a899a", 0x88}], 0x7, &(0x7f00000075c0)=[{0x60, 0x10e, 0x2, "53eedba6541027c1e9ab8be8abed252d037a88a10714cd80d375840a1a5cd6611e7771dd85cea4c25a55530635ce1f102e98f744b33f0b0fb204a73ddab5e0c44bef0ffd76b65bc0e6f41cf1af259cc1"}, {0x100, 0x3a, 0x0, "260fdf0b4e082ed05f9de92eadae47e4159e2cab64ada01ba7f06ad2f2647537e9f2e067a61cd1877ef05a1ecb9dd7d16cd1c185aa31c11507e8ead00451be7f33ab90242cc8b65deeba81142941490ab194605d1588924d7b671a7d546b7596601364a84c89184105b7f9bdeee0c36a5e038e70efc414a6346c0033d85194949e0587a8747318291194aeaa5e98e0d5c7aa3fc8bf82c91b095fe69ae73f8dddbff411f4d7e0da33063c960aa6f84cdfc9ba6121f2615a2f0d7a8815cc8d15e440bc739ec5f489068f866d965fee830526fc6ace81cb9b7f44a5cd87e226b1de41b94b66d900f7518033f42e74"}, {0xa0, 0x0, 0x3, "4d0ed59dd2210424d1d3c388f017442d3c8952814d785c0e32dc60232703622b8d312704f2e707c10fdc9909ec2aabb207a76ca4859c9e04f3ea2812f3871cb54605b74c92c12d10ace8445f4b3c0a5ea0740175cae0445d3e13f0afdb4a70d22652c93587fad7084bbc2205170f98cb8cd99ad34496231bfe149c2d770ba5a92468ece152e22fa31994f0f3f65a72e8"}, {0x60, 0x3a, 0x81, "d975ef3f2f5ec9e970b249e1d6be44860b4bb4c72c3c8652d2197fd76a4de27ebc1b1d722df78b65c7a6add6e8e9b61710c42102ae5c762b12c0c9af53ce649002901546e537673f58f4b1e352c6ced3"}, {0xb8, 0x116, 0x1ff, "57e3b3386c7e338a920289b40008810243f4a919c38cc18d6bf362e6c5930ab0afb97fb0ae1d1abeb5dd90664fce4cd1923df6bcfa8922d99d6ab6f6a8b5415c1516116829fc5944aa4c5bacb0944fa3ac31c5def2b8d30bc5447b6ea853a7222c9d9769fc0c3b61117314ce912e1731844df3fbfde3784131c43bf8e23542bb1ee9e8ce69c5b0b4737c436cc6a80c5b04f0f404d493dd2d2715c20bacf0b90010ea56759e"}, {0x48, 0xff, 0x4, "53447f0e4e7da12b4c2deadfde12b2fc53936b1fa19c94de0243935704a63d8f16377db28acb45335e78e5f04854a7691735"}, {0x18, 0x119, 0x10000, 'dU]'}, {0x90, 0x108, 0x9, "e5119df0d587abfd06979242cef701ca49e78c5aad3f654bf4a7104d586791ce99945bf85460ccfd55cb0c24e7f19ae67b78b252a8eff06b2d1d76a2a6214e3b4a26c63e5151f78fa7c43dc525a21d42373dd8ce67209ecf6178412af4abc4de408a20962507f9947a014c9148211a9be24e8fac7778f6ef2688"}], 0x408}}], 0x4, 0x4040800) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:35:05 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 13:35:05 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000900) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:35:05 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1d8}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:35:05 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x8000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x800000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:35:05 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) inotify_init() r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000500)={0x0, 0x0, "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", "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"}) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440)=0x0, 0x0) r6 = syz_io_uring_setup(0x104a5, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20840, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r9}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_setup(0x6049, &(0x7f00000002c0)={0x0, 0xe3b8, 0x8, 0x0, 0x338, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000340)) syz_io_uring_submit(r10, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r1, &(0x7f00000000c0)={0x5a1202, 0x17}, &(0x7f0000000140)='./file1\x00', 0x18, 0x0, 0x23456, {0x0, r11}}, 0x5) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r2, 0x0, 0x7ffffff9) 13:35:05 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r5, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:35:05 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r2 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="08020000180000022abd7000fddbdf2500000000000000000000000000000001640101020000000000000000000000004e2100004e2400000a00a08000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) r5 = fork() r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r7 = dup(r6) r8 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, &(0x7f0000000180), 0x40, 0x0) kcmp(r5, 0xffffffffffffffff, 0x1, r8, r1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r7, 0x80089419, &(0x7f0000000080)) 13:35:05 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1d8}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:35:05 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/ip6_flowlabel\x00') syncfs(r2) r3 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r3, 0x0, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000001700)={0x401, {{0x2, 0x4e22, @private=0xa010100}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}}, 0x108) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) preadv(r4, &(0x7f0000001680)=[{&(0x7f0000000140)=""/156, 0x9c}, {&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f00000002c0)=""/8, 0x8}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/75, 0x4b}, {&(0x7f0000001580)=""/255, 0xff}], 0x7, 0x75, 0x200000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendfile(r5, r3, 0x0, 0x7ffffff9) 13:35:05 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r4 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:35:05 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:35:06 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x404080, 0x0) r2 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x20, 0x2, &(0x7f0000000180)=[{&(0x7f0000000240)="6baf2ed1d3c1ca0d8b5261799bca200947d1ac3de0610be00ae9ffffffffffffffff5dcc545060471ca34c95ee2d25819aa8496a2324a7eb4c3686aaa286ce9a332247434748cd5806a2866c428af075a7debff0e0a3057e4760d51a289f5ac96b", 0x61, 0x9}, {&(0x7f0000000140)="9dd6002b6acac53eb2d0bc061e4a7b4ea9893895552685cfa290e324b595", 0x1e, 0x578000000}], 0x10018ce, &(0x7f0000000200)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) r4 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x408000, 0xf0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:35:06 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) io_uring_enter(r0, 0x13ab, 0xcf96, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000002c0), 0x5) openat(r0, &(0x7f0000000140)='./file1\x00', 0x50e800, 0x100) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x5, &(0x7f0000000ac0)=[{&(0x7f00000007c0)="5f11fbc7e4a0f06c52496570ee518a66d4860b2d887c59a0bc5ba6b47e4171f1ec4e489db534e296ad163862cdb49d10137e05b459737f1665f11239f1123fe3eee884e8d1fcd2465118dafba6cc0fb14adb773aa6ddc9fa4d7de2bbfe", 0x5d}, {&(0x7f0000000840)="bced651125e3c92640bec2cee93dc1dea5345e1db69e610a8362dfbe4c150f3ac074c346065445ff93b199b69d00cdcbb8c261c5ac25f231682723add04082e6833cab8e63c45e6e4ba9a38d5870f58e2e40655069340f9409640477d2965db64ebc255a5dca8634b70cb579a34b15844f65bf88c65fb770cd3a2718e1f6cb6bd4b27ea2f14b40b4b2b79d60d5d918bf970d983bd439db8930d74f9aca2a1c4a951494952c44cebe6f582fbcf9b2d898ea277eb027839aa0d5b42acd8071821a233630b4087687d5c36a5a2d23f6de5c5a6e1e435e0d23ebd4892effde18b0680770ddb4bcbd7cff07ebcfc846fb0c79a21f5d36ef739020", 0xf8, 0x7fff}, {&(0x7f0000000180)="8a0876d82d", 0x5, 0x3cc}, {&(0x7f0000000940)="52cc8daff1c97d9e2a788c35f5796aeae38f018a10a02c4e505dad5e837b37295726fab647b64b5dd0470a84b40f26239eed9e483f21bdafe19a1cc927d7532a4a4cdf0afdd865ffb28f0260d55b62faabdbe48fb8c8cda77c0ee8d07fac147d91fec9c5ceabb23aff96fee2894746f624849fa5de01b9796de7d35112b2c881d20d14e387110a97240e925dfaf8b6a2528c52a42205066c73940088c4998322d5513fc91e39bd7ead", 0xa9, 0x7dbc}, {&(0x7f0000000b40)="ce590a47ad6583b7ad5e3721ad88a85207a2d0dee80d8fe5d72424b8f9660fc792a3c476b7441e635c1ebdcc5ff3080036cc9f8c2eb7492fd942c2f119928bb08055e47f717b79aaf5c59b79425e2ac5d17fe26f50384fea3d7d5675de35623bc5292c4a53c8669fb4fb2dc45e63a5677c23d91e618f419b4608640826296c4bce21b2f12ae0f95560c532f378fb903501ccc7049d52", 0x96, 0x8}], 0x10018c6, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32]) lseek(0xffffffffffffffff, 0x7, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x4b52, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f00000002c0)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0xffffffffffffff22, 0x6, &(0x7f0000000ec0)=[{&(0x7f0000000f80)="95bccebddaead842574e16b015f46c0a6b3ef08463482216030bfba4e384397d884d4eb7e4c0b80104801bc5e638b4820401f39a07086c7cc777a3544e480255140173a9c2b9c6d23ba56f6ea28a56a7199104fbd0f8083014da93af14550cc7d4aa88d4a35d8c8be20cddb3c2b97fd32ccf8a7f887d0254774deff6b8d262aaec69f46d4d0572a0f6cfaef308ddbeb75c9d1312fc80caa62730b0384d7c37b7bc2896fe3c40020799ea821ebfd37fb8bf35aabbea28ef13c37ff623a51b412ea7d0512a14fce1b5a50a15ff85a29a2ccde29501c134e76fad6a30be8b7563d86cac921f1babc16d527f122af380dffc5d9824a802d4d8f45dd40244589daacd846f53ffa9274a4f4747330e43e0373888d4b3b3ec1b02146704f378e72f4f209f56a248deaf73d97afdc84e297d441a0c3dde37b7de836f11a47fb4a51413787faa7d947ef78a", 0x147, 0x1000}, {&(0x7f0000000c00)="fba94af823a04fde832d13e592eb6f5700dd4a0c7f7f9950ece39b75c7aeff21586a7edd849c2217429c67f7a7fba1e639c4f1392cc338379f6f7c0fcb1f249cd86e8cd01928c2b8b57e14270c117d4c68a3c22da401d9a0012f5dcf88be16e64995aece795cccdcd9dbd9dadb7711cf373783a64db7d808206c4cce20b5920ba1db13768307c922c4e8127b6d82427d348eca769b2d34f69f6f8c9fc96de768a9139949891e6ee1459cdc11ec785e5b7f900a81e367aa647d14910d46a6445dc0db6b423d35d12eb2", 0xc9, 0x7}, {&(0x7f0000000200)="80", 0x1, 0x6}, {&(0x7f0000000d00)="1a3cdc278f43ccd3a06978a310cbdeb7b88cfa4fc0a55d3d5f142b8915be7e41e8dd1d3f40ce0979b092d0a858dc0b9a0abde4b756750e7bf0b9fdb3a6010b18335298d3ad7a0ba835939d841c2bb523e3acfa00f12a17452a146c6027d5986c45b747bbaac53d7bca2e3bbdbb27b25ddf4c72071dc48e740e9d", 0x7a, 0x100000000}, {&(0x7f0000000d80)="bc8d877ffdb081d25fc1c3f198164d2c9a5455f48577da4dc688d4265705555e77fe0f96ea02ceb0fa7f24fe9ff8d253991e5309f504670d07ee7f98fe2390af1718bfd39d40d9f4e8a87ebda422e9377694d5a192404549232a46cb3f6754cc58405adcc55d0f58523cf764364d5ead2c03", 0x72, 0x1ff}, {&(0x7f0000000e00)="c78c505dff2a4fa2e71cf6f7b651dd335410525d932a3d4059c13faad4b693531301cdbb98f6f4a32a97bbe7617a3df97f3643ec5d39042600befc1793c44360e57717d135880ca5be10d104bb705c68bdd1ea6ef708415005230cffbff435ca3324f728c3256e6d7fbd4ff7fec53d43a4b5f4c2a65240ad8d8a1d5996dd2c9fab31d73ef604a8fcdf7fdafa5a635eef", 0x90, 0x190}], 0x4000c, 0x0) sendfile(r4, r2, 0x0, 0x7ffffff9) ftruncate(0xffffffffffffffff, 0x8) 13:35:21 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x4307, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:35:21 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x8000, 0x0) copy_file_range(r1, &(0x7f0000000280)=0x400, r0, &(0x7f00000002c0)=0x81, 0x3, 0x0) r2 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, &(0x7f0000000180), 0x40, 0x0) chroot(&(0x7f0000000300)='./file0\x00') ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000240)={0x1, 0xa9d, 0x90, &(0x7f0000000140)=""/144}) r4 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f0000000600)={&(0x7f0000001500)=ANY=[@ANYBLOB="cc1200002a0020002dbd7000fddbdf2520000000f81e4f1971ec4ff04ad08c7cdc30f9b7d5e6be986a4f3c97954b27eea3ecf91255ebf16649cbce6d42b380261f4ff900ec8de92ec5509bb60918be921f5ef09dc290f78e7582d9cfb7cf1fc9f4e3c5f1d43f900345735b33a56db02e0db85ec79eab56869ab0eff611ce8f8cfb8277989377628068207deebbff0998c5360c00439f1936e01b45da086c82df8d63e5fe05db93df3904d447fb66f566a75f8131bad64bd25cd24ea82b5646898e264549a3efecd0cce21808c252c544d6908d3fc6d433bbd95ed6da7b5335c57c704b9a3b550d8708002400", @ANYRES32=0xee00, @ANYBLOB="4abcdd785048ad6a8068440ba0b6b83c8a7bca894b546ed3a29d238e1866066c2260921314ff83d21683b90fe0daf5eebcb9adb16bf4b2cde136774973d728cb6b97abab040066008c000b8004007700f46c85dd2d90b39fcf36151629200e54c1c3c41849185bbc7caf2062a619f0a7eb50c1159ab9c004dae0e6616a327997ca1364a5f1b73b2ad4dc56ba3719f43578ebc073729ca596e1c66e5f8c25a2203d94dbfead3dffa2c3d81565dcf91b624002e4cf8ebfa2ba988a73f145cf23c2588311bd6dbff3d5c52e14e4477d8bbdc6b12a0b08002600", @ANYRES32, @ANYBLOB="8b2504c621d2a2907837eb07cb58ad694e08b8f36bfac1758198603ca4b7bba703e49ac4576b3db28edadfb22add169e41e7ec3ac14ab28ab3d52c0d196e03ee9cd8f42271c172e60d0b2d1f3ce7e737d3b8d11ca743e02e9401d1792fe279d6f5445da6826108da177948d5e520cc92ed7dac426c9bc6fa02db669e603d18d418af09b062278be9f2d3e3cd3840a1eb3d4efec97f10f591e9fe20fc51d88767d5f59d802cbd04a49425da000dd8fb69bf000475e118f2156cdb10ba335b7e0533875433d8b091b9eae3f5683210568008004b00c80000000befa2c4b7059fa70e42a9c32d6dbf05e30d9949d61b8681b11e8c4a2368ba763ea6d16fa8b5739040ad59909c83f9db477ec79eb69ad35873db8fd97c37174f7fd61a65f3f75aaefe09c5e662f6ed4004e2bd80e7f92cf3097454cdb34daa7a50456a1e2bf34f5216ced5f42372b29d411d70161782cbb78fe9df364e9c37885871a505331e5dd18929afda0f884b9a2e17371e68a7317a25da768909845ca6f85d341b750e4db801cfe2348941da389c8f3fb70f85f125abc32be9c85eda85eb79c35ec7aa84481837e3db978401448146ed91b715b021072b96fc1e0ef51f431d7d9fb0f05460b11c90fde510e0ef9bee3015f26902a31ee9b0a575765f6c33feb86812ce74ea715a6e9a5c5c83da63382aa2443eef091723b992622621a175478358852374f7a1b0ff62d6d97fa8b53e3675b15e07fe0432f328b35fdc7ced04eb86928c5f016c57220d6539fdc9798b9eeea3c8738cb5c8a901947b0d09853f9012cb269b24057e61044c3e73af4072170dafa32b3a59e126835e727b6a90ac18318b981b2bf334a09add5180d24cb0dde3b7c1f93d83b306c678507038d5f061e9a91c7d5d873e487a77a55c51c9691fa70183197bd83db6ca6b5cfaac5543d31fe5a387c39edba5a5c0bda3382c6ddacc39df23cc1dfd57af6e8402ad86ede1b48bbaf116c06868aec11a5cc937f2262d01d77b3e5285ff5d3625b1cc2ceaedf995035f938d1c09acf64dfdc641289b3995d0d3187f97356ea73457ec9a643c9f845d310575f33474c5bda526d5fc9bb63135b52ee185a5675774b3583d1270459d74958f44772ed1be0d2e35439fdc8f27a0a7ff38ecbe491854dcc1817f2a46fce57137ba2287afe5a21557dfa0c511c4eab3e6486e38d743f20fe257f580bb7c23346ce7b372c306574dc2e8584bcecc5ff08e07830d1dd1f5a000a96615d1db1270f847489a69bc6690741a927049e2d61086d2dc0bfbc72220ad9633884a9a50d52f49ae32da3c1dfa3bc9c659eaa1b05a17ac7e11f441f846fbaad2720eeb97b0acf5ccd86638b91f31c5bd0c4a5bbd3416f036f272321dc054276c0e9c3b4e907c0e34b9899f115e4d5b6ca1fc7f87280b57b806d10bd1d3e83f058763e31918eb506372ccf3a978d93388f5f3b4347e39300cf05283badce843529c4ba68695674b72828b7837644e466e2862afa017b378f41da3471d7a6133fc08ee5e9c8b185aa6861aa59b2f3ffaab216f85ecee895b73b5e9d506448a9e62f94b3538e1549747d00eb0c29bc5208d6b32198421389edadc2623e3d33bc7d4dfdd5a2c605ce52a907357cfbe1a8b4855b8994f9f25c0f14a2fe4ca6f16b3aaa43c707efa150433e1583a3bd16020ae4138eec58a2f116f31904cb8878be7e1f8e582bcdc4d4b4d19ef45c2ca92ab87b529cfe4d43460fc9250b7a8f2f42127a7b567d91bbc5539b16a188f6f89be46130f1f55ca68bac4ff24e599bdb3912e8b869f064ac7e6fc5dc68fae09ff5519d1c04206e635e9a813e150f557ffc7153d81ada64b3fa199bab16cdf8414db6a7f9d2322c4e8ec4acfb8b12a0390393367bd660f34a4d082a014f045e3bc8acf359dbf31b40aaf8f142e4efd88caa3364aa6ccb6f1647d8fe87ba77a2c19873a192b81ea67c3da3daf2783631bd9d791d308a6af1366afcdac9a33511817daa363067e012c9849a473a9c733903f9ab68f529e0b86594848a02fd1f9214eb779bc6926236542843d0b244b4a1d2956a169bd5b223172e2833338e79a7a70e333b0c444734be4d1596bebe4e6c274f9c159913b40dd1c7cfa664fb6481c0c879270898b775fee986135798c383d05bd4690ae5ff5841316ec9f3b42e0d48779eb182d37f91df746f8f09fbed5aab3d1c727bc57f2b3dc02c10f4b9b6f271cbcd360993ee2bc3c75930bedcf2d33ab80e906bbecb39fd31da5d46fc90f785ffdda2fe6448e1a8b5dd653abe6c32e23c1113318b7d71c056e225b08d7c7d6bc53982affda4bef22706de26b368363706b2386c0b11751b2355dc8275fe7b26147fff482a8be638b5bcd70f4b7aeb34c13e292c2a2091a863ed0bf1845f7738aeabc26143f8d94e1cdfe3276351584c0b1b1c4f1a10878fc8a544cbce7e6103eb6c1d383427d5ad04cbea9561bbbd64245c2110af1a4d0310e61ccc2baa3014ebc4f7af2e0da669e0ec7294b19265ed0b72ccee008868d642179b96fb45e985db4fe7f7f73ea249683487cecf3ca6bbc6972d09bea144768455fe736618968563b87f1f7a12c2613d89511c6f38d6449436389c7725a9e117626fd237d3fb7f1f194f82510b71c59971ccab90987c3098d8961ceec8f560187bb9ce35aefc3843d93d2751f9d0d05ad8104acfd2ec69dd2901ad8a5268a91bb2b1f4f4aba973edaeac1a9e376ff3dfd051679526378eb95aebd5a92dc63330efce160399b6a3e1c488051f35714ca1653ff0e15cdc117c13562f2cb31f21271b579d9f1622f0cfbcbdc46dc09cc52393a7cd02002bfe8cf8ac9793255e40a9df958dda734d3b0e6a9c98f0c1d3d1ad5810b94f64be29c054ba219fd6633aee6aff6fb443b75164a7395f5036ec911a12d9e05bad187eefe1dbcdaa1a55c0719b68064866e3a4ff01936140e35f818c1b04bcb1d24fe621795182d377f49a30d3ee5c80e1099ebdbb4ed143fd1483773ab9f8a5bba4474388242581a95ca334537580c9ade0e3df4a6b798c809869cfa775a5bb804a3954c65502a68d27a10c7bccc9f1c254b8271322958ba62620025c618ef7c7d651828e0a6ae5d82491de3d175df89cac276c6c59502e9ad67c00961a7c72468be2c504f603829105d82ed715bd7d5ec8a15b0ec353d3dbb53627f5320b05c55d29a30818b8e5d2dbc01af0262dcb7d26307e8c40c723795e13fd70ded108b5b80e693796b6c9927a47cea9599508b69d6cd582b60e1a6924800ad18252b11c9fc26c70e6537fd7b6a5366eee985ebca0f3eb0d1a0fe58fc76a9c5c30c9c205cb17f12022427b9de66067a8e73056e1e73bab19287f8079d1d576a3789feef6ce05017a994f69bcc366ab12c1a53e8f317f872b801b6423e2b4e7bc2234cd7069a78afc541a1ad0f72ccfce1adbce5205bdf1c3d5df1568ee552a6d883c02c806e8ee6fafa9bb35974d92723ea952e336f56ac2005b6667adbe139ae8b7e674cd350ff279382913faeee7ba64502b7e8ecfcbf22c480d637160a03f11e59069c895ca5cac4db63c84c0e8d9fa26a6af493ac85f22b6e045c6bb907c67bb44030bef9b5a51e9e4e9bc8ef3bb96e26abf5999c2f14ca5ec4adf2bacfe9a3af1e4d809703ba1e2b1298a5bab627f1178d40d6f8f1a4544140c9cea48de3be0a87abb2dfc8794bd2533c0713a21ea1b4d0f30d9829dc913045f7f83c878522695051ba780653ab855f3b4c04066032ce3a64822ac4ad9f986464ded7984f31d52570e215162f93a35b9f464504fc27a9bb11558b92e6da4fd7a527347d47adcae0e3837274356a9471a032f2918ba191d0c56c4942d40f396dfc91e784c6ad455073a8a8d9ef79204b30ad201892bb265c768ac8f6b6c05b8c18dba866d602fd075b7d3861104d2d525047ddc7d0913a7e511ffa8fce237f3dc6c872d5a68e1fe8d00cbb8d2ba189f04e7a4f8b7ca6057e02a684be4ba7084bb65bd251e381938f6a22eaeb8f4cf46f212fe02c2ac1799ba862308338f75be766fb250dd6d74e6c5fda06797d32b26ffccb7ea6efbf75ddebb29aa3d5eb8368357bdf218f2e2c1050d9a11194482a58e973e3d121d5aed2271f13a366355118a83cfa1d2c8c4498378a4a392ae49c14ceb845c682d41d9f35ae92e7b72deba0d1480b09119847066c91688db60e942e3eaca2c2f04c1ce9539e3405fc2e72328ef89d2a1b8a90feb01684f3d7caaa06a36742149f1a9639676c1b61dba5bc5f777f29e33bde922cf7ee398e38586d6bfee4d78a1492e71e623b9a76be02a4bc37a2eeb64a90bdbbeddf05f4896ad6d9b19fef95bf3cbd535827b9dc92e10703cc2fb3fd17fb0d525153a6ac52cd3947faa5d77996e5387b7b67e10db010232b852c32d14a84c715240508fa48145b24337489c4b0414242000c60f8a5ec370fdbb6d34422a4ffa69be46840c2733a1e3024b69890b6da22aaed09b6dbf30cd84aa343cd75d0f3fc53be22cdc19248eabd62f3210f4319846e2f7cee8e6b2466e3734628848c5cc95114760c32898127a7e5eb2aaac6683b1404ba441ee7538b277b3327e45a9d6da4cca488b0818eae7f92fefd5de9c5f581dbdb31926f2e0fe57bff91457440061c7d824af47e015ba5bc83260ae599a48282812068872f139332621f37df73cba1d5b0d0e1537344ee2a347957dc6083283622d904c3d7d26a9823b642058c30fc0100a856b32d37b1ed4846b93d5783dc1a4a5c6cad595123a30bae7b94ec94f9b4c8f25add62737362f40263850318341f94d71dc75121eca64a2f53d029124fbb998b992edd85892a4250ea2722024d20a2b3e8cabff1790375991a2345454594d99903d0622e072acf6d8eee6c9b5f83425bc51d79aee5e270c9f85daf795f74a9fa2140db2132611936e7fa69477becb84bf8b5f2b6a386077b59d7d6b915b5154f8c493f3cff0b4d55fc932cc48db7700bbd029937eb79b02b8aa182fc80cb1505152f84fdc82a418166631375b4af643a78df1ed3a4b0c595be52eb0636ea0f372efdb66ebf35f4526b54c8c669d6daacfe5486013c8b544f04e8da1199ac2af9a4aeca7a39acacc2d1d83ef49d1762db4e1212a4b7dad083244b694f7216a882b4da195836fb2d204063b34fcf942a87f4fe99991662183e932041f0f83a141e41f4a003c1db3b0a6c1024823908982c6da032a9b53d28594bf8797455f3ccf4812111ba96517c0c7f529fc1ac27a18aa926fbe75a3afc1af2550391a1677e8b6f2141ad236ea6210a3aa0b086bf6d4ee6584fb6d705a63bdae7a0052be42c7abf33d323da5a1f973133fa80a71e6cf14299218ae042d8c226f08f8083b085319e05ec5799de9bbf6ea425f02bfcbaa3713a9667700f53c50ec22c658a2bbb96c4f907c6b890db705b278d000bf02e2e1e8189dee9f35cd9ac09c26d920e5e8b2e8d0306943b89b138c9dd5bec74ddbd69d2beaff6393df23711de5b712061575a4f6eb7613a00db69bef0ebd1f336110ae4edac8a991a65ffb32f55257f640bdb674288c44adb701bf3a369271a1418e119c70b9ce5927d0ff94120843ab0eedf9bd8e396fd83e296a37c568e9f4f39a2db73355da2fff8a06ce798757419fc680b9a6f494e3d5f9ff56d37b0353f9c53c1422e536d9efaf1344def6c1f4a067dc4ded8e11a559163fce9ed25ce9714447f244d2650f439ba77783f1580b76fc1a4c829b5afb066b0928cef04c60c4b4f17b4d2390aa8931d1e1e8465d4f7dbe34c5bc8c98a453ac07709a8514277b44bb6afab4cbf0b344732e0a2b62140bb785ebe88e93648596dd9cd4f2502191c8dc8c4ee7f45661353bbc55d26017af3eceed086da37bba4564a87930ad55ada367923136826d0bf2d55c526d6e12b640fc053ade17feb86bac87a982bff2c636061697f141999df58f5043d155114b8c7ac9401b749a863564eedde37e715fe01f13f8fbe6781a72e00f2ef6c37220413bb33aa308bc2405c54bcb72c9ffc0dfa02a5b0d1618dd080e0e56672c4548191f4c4040a8f770b0a16b786f7044cb8a7b06d93150a73a189dd703fe1f2c31936563aba9ea35d738c5a382566b70a6095bd8b2263b1c9a2bcb3232d5782517c6c91c5d7410000"], 0x12cc}, 0x1, 0x0, 0x0, 0x80}, 0x1) symlinkat(0x0, r1, 0x0) r6 = syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440)=0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000540)=@IORING_OP_STATX={0x15, 0x0, 0x0, r6, &(0x7f0000000340), &(0x7f0000000500)='./file1\x00', 0x800, 0x4000}, 0x5) sendfile(r5, r4, 0x0, 0x7ffffff9) 13:35:21 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000240)=ANY=[@ANYRES16, @ANYBLOB="327dbf5d82cba7630bdb7521c080595215f77c95c715b9d830f9bc6fa9ea5536c2168f0682b290a2fb2b94b817102228c61764454a597ecc5577c862639ab8a799d0a35437619e60e061511f2a6bc491e55bb0965c92edfc6caba3d425ff237ca25a032b5a", @ANYRES32, @ANYRESHEX=r1, @ANYRESOCT=r0, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRESDEC]) lseek(r2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, &(0x7f0000000180), 0x40, 0x0) dup2(r5, r6) ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000000c0)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r2, 0x0, 0x7ffffff9) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r8, &(0x7f0000000180), 0x40, 0x0) io_uring_enter(r8, 0x6dd, 0x55d9, 0x0, &(0x7f0000000140)={[0x8]}, 0x8) 13:35:21 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 13:35:21 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0802000018000002df2500000000000000bd4594546bd73ea753740f200000000000000001640101020000000000000000000000004e210001932400000a00ae248e47f70117052ac33cf41f8a47751f6fd9591b49374007000000f38883ea2d11d6f5", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:35:21 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:35:21 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000a00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:35:21 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) r5 = dup3(r3, r2, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x384, 0x0, r5}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r2, 0x0, 0x7ffffff9) 13:35:21 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r0 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:35:21 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:35:21 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6000, @fd, 0x0, 0x0, 0x0, 0x8}, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0xfffffffffffffffe, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x9}], 0x1000025, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:35:21 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x1f, 0x1, 0x7, 0x0, 0x1f, 0x82, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x4, @perf_config_ext={0x7, 0x3}, 0x9003, 0x9, 0xff, 0x8, 0xfffffffffffffffe, 0x20, 0x0, 0x0, 0x5, 0x0, 0x106}, r0, 0x4, r2, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r4 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat(r5, &(0x7f0000000000)='./file0\x00', 0x1c1042, 0x8) splice(r4, 0x0, r6, &(0x7f0000000180), 0x40, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x44050) 13:35:21 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:35:21 executing program 0: r0 = syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x7, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESHEX=r2, @ANYRESHEX, @ANYRES64=r2, @ANYRESDEC=r0]) lseek(0xffffffffffffffff, 0x7, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r5, &(0x7f0000000180), 0x40, 0x0) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6, {0x9}}, './file1\x00'}) sendfile(r4, r3, 0x0, 0x7ffffff9) 13:35:22 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:35:22 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:35:22 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x1502, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, &(0x7f0000000180), 0x40, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f00000000c0)=0xff) 13:35:22 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="08020000180000022abd7000fddbdfff00000000000000000000000000000001640101020000000000000000000000004e2100004e2400d40bbc59f4913c1be204c066d7ec632c000a00a08000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:35:22 executing program 6: r0 = syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a80)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd, 0x4b42, 0x0, 0x4, 0x2}, 0x90) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r0, 0x1, 0x0, 0x81}, 0x200) r3 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, &(0x7f0000000180), 0x40, 0x0) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r7 = dup2(r6, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r8, r7, 0x0, 0x7ffffff9) 13:35:22 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 13:35:36 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000400)={0x0, 0x8bc0, 0x1, [0x401, 0xffffffffffffff7f, 0x7fffffff, 0x5, 0x5], [0x8, 0xeeb3, 0x9, 0x3, 0x2, 0x1, 0x1000, 0x4, 0x80000001, 0x0, 0x10001, 0x0, 0x100000001, 0x9, 0x7, 0x7, 0x9, 0x8, 0x54b, 0x80, 0x8, 0x4, 0x4, 0xf5, 0x5e, 0xf5, 0xd954, 0x7, 0x1, 0x5, 0x7, 0x1, 0x0, 0x1, 0x6, 0x7, 0x1d9b63d9, 0x9, 0x0, 0x1, 0x100000000, 0x1, 0xc3c, 0x3f, 0xfff, 0x7f, 0x2, 0x4, 0x7fffffff, 0x2, 0x80000001, 0x40d2, 0x7, 0xf3, 0x3, 0x9, 0x1, 0x4, 0x6, 0x0, 0xccd0, 0x8000, 0x2, 0x80000000000, 0x80000001, 0x4, 0xff, 0x4, 0x1000, 0x10001, 0x7f, 0xfffffffffffeffff, 0x6, 0x1, 0x8, 0x0, 0x7f, 0x40, 0x1f, 0xd375, 0xffffffffffffffff, 0x54c10cf3, 0xfff, 0x4, 0x200, 0xcd9, 0x6, 0x9, 0x8, 0xffffffff, 0x2, 0x6, 0x6, 0x7, 0x2, 0x7, 0x7, 0x1952, 0x9, 0x2, 0x9, 0xd3a, 0x7fff, 0x0, 0x1f, 0x9, 0xfffffffffffffffe, 0xffff, 0xe34f, 0x8, 0x1, 0x3, 0x402e, 0x2, 0x100, 0x1, 0x80000000, 0x5, 0x3f, 0x2, 0x1]}) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:35:36 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) 13:35:36 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000b00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:35:36 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:35:36 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) r4 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) close(r4) 13:35:36 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x5906, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, r2, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'essiv(aegis256-aesni,ghash-clmulni)\x00'}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000240)="860b904839f7a8422a3bf15b59e4f85413e2f6e9f29bd166c5d7dfb8bc8213b36487c985ecd92c88db533dbaabd9d4677e3ad97a8fe3fdd3d78867269ea5be32f38eb16b900def9b9dbb4398c360aad91b7b62b5223036c8587180e55a5b32f571c96b128476114dd182f51a", 0x6c}], 0x2, &(0x7f0000001500)=ANY=[@ANYBLOB="900000000000000029000000070000005f2cbb24164974efeb0ad89dce524e01b0bd2f3c45a75e80261dbbe8b67a7f6d75c16ba8f550fdb2a10a97237761023a2f8b471f8192dc56a9821f94ea607a6b0bde960e919513792ff3137ab3f8c837a86d0523757a18b424095e6702d3b79111c2a1068cdf9cfa7658b473b752ce90a311ec2bc6ec745b74134cd51b46830068000000000000003a00000008000000ff4e79551154e16a0b981dc279b6e9881c980d5c5cb55b7a6739ffd98bb26331c3108afa7d161344fdab5582d3985c0ecfd83a8bb23ad58f0698f3ce589d51e1cc24838ca17eb47e806e5426c4f1804dd13b807fd8dc0700680000000000000004010000ff070000826d7ff62ef7f748220a3e538568780abb1145d43c6b7cee4755d96bb34a553eebcc515f4700f2de4eaedae0cfc55e59a4c15a8b48106205dc9d8f8407ab1b11d9499856acb5ebbb37588988d86ed0ffd2c6c37a9e620000"], 0x160}, 0x0, 0x20004080}, 0xfff) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:35:36 executing program 7: ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000240)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x222001, 0x0) r2 = timerfd_create(0x6, 0x800) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, &(0x7f0000000180), 0x40, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000eb90ea78e00000fb0000128b3c43"], 0x10) r4 = dup2(r1, r0) writev(r2, &(0x7f0000000800)=[{&(0x7f0000000500)="101f39a3fc6eb69ad9e5ba44013114577a65ea9f8f0dc4c1f225fef9c74a6300fbf1b0f321dd72f5e93b061ed45aa279a025df932e18a040a598abb71df608bc645e5893f0acc8b3082ab282bfc2c19cb5fef4506882898158c19ea3765e4a9564aa77aa0856e5b8caa14a30b3460cb26ec998fe12f15a7efc3342c305c91d1401479511cc7691b715b171f80966724d511edf2e7941000b0d6d02f82a5c9025f0d783cb15c27d6ccef6c0a3c634494b4542d35a37c1f6512eed319a9666ca7ae5546259da7332c58ec680cf0fa1", 0xce}, {&(0x7f00000001c0)="963fe37523af226387d3c8d98b04cab06f8a5f005e1d039496a90a15218c544439d6c01ebedf8b578735599cc3186de502457bb634", 0x35}, {&(0x7f0000000600)="58047c2efe68b06726f9217531da919827c306d9058b3e4c01b2b10013ce4259cd52c39c69decfc1b3b9cb5c4036d618e80c690b9fcd254c9ac9e909b0ee46d57a00d3ef6c24119129fdfec567ed63d157f609832f4393755d311907185ef42918130ea64b48c62a19f9acc88cf644c2bd77bb06bc806d7dbd10d95838b61c4cf5096d616097800bb2eb891fb00f5b527d4fdd830a89a9ec54aa056ff30cb3897e5666b08c2303d3144bd2242058666af2275df1e43f65e3cd76f0bd82475f20", 0xc0}, {&(0x7f00000003c0)="c697af3ba7fc4c4644f17e62570f3daed05f8dd1838db1162032723733f7811eee836de2285ecda59a31438b339d6f2bd259999e42c7b9a39db2af80563108adad7f02d43a54", 0x46}, {&(0x7f00000006c0)="08e9c706978096303138f8945ca2a36fbe21a0cba7fed67b86131bab3fa6e9366b77d9a6c2de08262273376fdc98510295cc7319d78ddc5b28fd950d7cb5b8ad2f07d55ea94f3859313b3531cbcdf96d7b02c6488c9bf83b9787bef860fdc127cbd9511a2711da58094c44b7da0d1a8a3a82e07fc8db4c15a93620925c503ff2f8785bb5f7ac2664691dfbdf6345dc35e763188504ff0fa045a63ea8e1a41287f97565752821cdc4fa2187ad4abe542809d92207b523daa3fe97ad2e7bcc89e11700439262", 0xc5}, {&(0x7f00000007c0)="e4abb0833d0d18bcd5a89414c8084614", 0x10}], 0x6) inotify_init() perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r5 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x68a000, 0x0) r6 = accept$unix(r1, &(0x7f0000000340), &(0x7f0000000140)=0x6e) ftruncate(r6, 0x9) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0xb35}], 0x0, 0x0) sendfile(r5, r4, 0x0, 0x200000000ffff) 13:35:36 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:35:36 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:35:36 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) inotify_init() r3 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, &(0x7f0000000180), 0x40, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x101402, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) openat(r5, &(0x7f00000000c0)='./file1\x00', 0x101000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffff8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x39}, 0x1c) sendfile(r6, r2, 0x0, 0x7ffffff9) 13:35:37 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:35:37 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:35:37 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x7, &(0x7f0000001780)=[{&(0x7f0000000140)="0f3a04454f7e5e98ed5d6893a5f172f51e78875c66672adc3e85bde43d6d9e02e71489d7ee2c4ac219e1ccca6436db79eb17942c899c1b1b58105629138d623eff5f8bc9a7ce5c597039bbbb6b3f0304aa460c4d46320c1b8a59f028ebc2a80316095c40800526105858183749d11e", 0x6f, 0x8}, {&(0x7f0000000280)="2161d8d6b751cad824b1539cca909655d92083232496f047e44e6e0d84ea916407b7d85ae15f68fc7b988f22c34d63a763dcf40443bf0a4a7d517708f6f53ead5be1163044a6e407007e1c4861932ab71dde4740", 0x54, 0x101}, {&(0x7f0000000500)="26a1dfefdffbc4dd8022160c49224a96cb48f35a5426362db9e129d1d0219f58f0f6957d93435a94a5a6b028f9c3449240ecf76a3b08a06caa78708ff936da801b5e800ca69cf39b74a76ecc05d75a49ba229ece54fec06a76073b7cecaea90144f3d0a3a425ffd7", 0x68}, {&(0x7f0000000580)="409f0f6dd55849450b5d59faeb6b33f27a581eccd365c169bed03ce2c7c3f7babb7181cfe78ec95988e88f9e9791bcd2bee8dce9f5f8f93eb61b664fc3e447e9df067ea269218dddd6ae111000ec405debd69f047d49c7eea420b2c7bd534613047717a959a56b84e3288a989b38", 0x6e, 0x114}, {&(0x7f0000000600)="756e9f7ef1a1ba84d97b1e4ae28cd60746d8ec4dcfcce3a4f674d050c0ae9b7b5ddf8a78cfd280ccf319da3b58038ea552bdd946a8ec78c280b67ce7797c2a4f657e731a50356e1a11a9f16d0e2bb86e2383b42d1da37a367e5e2c998e9032061cfa8d294f641fd3af9d4cd03b37e72a3e40e2692dd139f23b474141a8e94f78239946e944d443a1266b6ebbf58edf523b8b25c081b7de0c51e76d41b5d71a40c5cc6abc69fba53837c9d67c64c0c329fc63c2afd8e63c7e1622d8abab2613863dc5552ea07fa545aaac1426ac0fdac5081a5242c9affbdc1569a39abdc132e407ea3c734f004ccb2693a4fb5dee8283a91060b5cc67", 0xf6, 0x80000000}, {&(0x7f0000000700)="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", 0x1000, 0x3}, {&(0x7f0000001700)="f0868c911247fbb070289c703e1782c9e2927e240b0a0c455b6bda92f97c2903ad0809186caa230bd383946a9ae19ad2a19be2138ce0022a76cbd75b863ad2579d56cd5109cbd6c7f6bd6f4726432b4c1d08088b524b1bf192666d2e1ad810f093f885966099f00d1dea57", 0x6b, 0x9}], 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:35:37 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x5, 0x80, 0x1, 0x40, 0x0, 0x5, 0x4000, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xa286, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x15679, 0x8001, 0x1, 0x2, 0xffffffffffffdf77, 0x8, 0x9, 0x0, 0x3, 0x0, 0x3}, 0x0, 0x1, r2, 0xa) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000100100000098000000", @ANYRES32=r4, @ANYBLOB="00010000000000002e2f66696c653100"]) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:35:37 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r2 = timerfd_create(0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000001680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'gre0\x00', {0x2, 0x0, @local}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xa3, &(0x7f00000005c0)=""/163}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x4, 0x0}) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, &(0x7f0000000180), 0xea9a, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x28008a0}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40011) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r6, &(0x7f0000000180), 0x40, 0x0) ioctl$FICLONE(r6, 0x40049409, r1) 13:35:37 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:35:37 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x107142, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x8, 0x3, &(0x7f0000000680)=[{&(0x7f00000002c0)="0cd2c086a4802f74f46107283eaeef0b0847dd82ead740c5d1e3804d550e39d9796f5bd6dcd62dd85f261dbc329b30c72fbd8fe4f2462efbe38d6b4ac0aa261f26632f07ade2c3f8afe6ac10d7e49ab4e8c1b1ef757163412ac19c2809188adc60c074a9decf8cad75950cd3e7a16cd2a52f0a7a52cd51d062adece0c47973a5f1aca40d3528f9e5d62ac10065c9cdf1a51793f81575059daaf50be307bb7197b5212a9910445ee9f62451e9df97867cc0d157c33a1aea87f0fba94208ba3e2dbb63c9ff3344d9a40e", 0xc9, 0x3}, {&(0x7f0000000500)="c25559774286fd83ff08b1a13c90c45cee559a2dd58123e50c7184672169171eca1202b561ceb5c45f94606e4de914e3951ab47ee5714fe03d65702fb0659a176fd2c546746408f16c9147e79f039109f17a4ae50bec4b2d9405365c8c03e807aea67dfe67df1a77f4d2722f7086229f54fe274100710dd5663a038e831abf5711113b1086a17f60b7db9c4fa09f39dba358151fc7fbb6e89aa7810d1a9b7c9c6ed1c563d551cb24be81bca1793da49e5a1048f72944c64d03e6ccd9a826a0dee4ef3e4a93077f14128cfbb2c13264fe0ed78bd8", 0xd4, 0x2}, {&(0x7f0000000600)="80b35d278a22023ddc9f5396ba0e9eb390171604467431016caa5f7661cbf2aa2cc97baae13d2044d2b63b1be66457f8fab4018259e930313d481e2ad9394c03b45f3933c3c1a6b594b66115dd3c4d75762ab3cf032a697d293644193ae74a3a7ac3f4", 0x63, 0x4}], 0x8010, &(0x7f0000000780)={[{@shortname_lower}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@utf8no}, {@nonumtail}, {@numtail}, {@fat=@errors_remount}], [{@fsname={'fsname', 0x3d, '+'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@uid_gt}, {@smackfstransmute={'smackfstransmute', 0x3d, 'iso9660\x00'}}, {@fowner_lt={'fowner<', r4}}]}) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x20, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:35:51 executing program 2: r0 = syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x8, 0x6, &(0x7f0000000740)=[{&(0x7f0000000140)="1d799899db6aa997d8733965271f91cff5915ab27c3317f6c4718758d85dab8b93052d0850db79142ef49062ad39d0bbcf8f3c1291f523d17c33db5d024de13cf8d16e386a126a80769650dc87da5807c883a0547d589380b1758b15e8ce28ef40996fdbe5a8097ded5d39d1a4fbb91ca9393059183452d43c32f280860ae7312426c9fd122687c8d5483690fe757129fe1965ec1563b9e6b6437045", 0x9c, 0x81}, {&(0x7f0000000080)="6810ebdbe0fa860271992a4fedcb5fdf82a86cb313c75d435220dc0f5b398bb91bd907b2408281ed6a06ad9e79274eef9a61bca2f3e47bb659f95083db", 0x3d, 0xfffffffffffffba6}, {&(0x7f0000000240)="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", 0xfa, 0x3}, {&(0x7f0000000500)="ea8f6796630bd634af4fd10860c0536b1fb8c4fe45fc0722aee92ab92b4ef806cf7376ed36c337610194ea2a8ce4d4eb40dcb09232efe7896eec465abe3c34718283f047771eec7ffbb4bd0ec2b3595fae0eb0db6004a0b689ba793bff60e6e757c4af17d607005c2c4fa8485c6732a7674c69f23d40edb22d0f069e04f9c3aec67e7cc94e2f58a88a12b03109", 0x8d}, {&(0x7f00000005c0)="4c5e883f8afe4783a0de63dac4ed22a91225c21532554cbaf865c780865e2794d1499d88c3885e97ad14f8d4be7dbed55508fa06bc19bd6141d3f1de110897331f48854a796d76dcbb8739c6e0bdafa109e12862f5ffdf05c4e8c9de34b8900393d3bceeb72ca0f6f263c5aac8fadbb62172fdae808a0a236566cc0ca01780072ea073e61f8b2fcb8e6232ec966ea58f5d257eaf8e61fcf2176fa018e2dfceb078f0df1068b4d46cab7a4eda98de56d7e02289494610df2bd575952dc1055f4caf732ea409f3120d9ebd056286885cb5cc053ef780db50ca32c1baee242063441ecec0f64b50", 0xe6, 0xfff}, {&(0x7f00000006c0)="b786003c27c4149898043174d52e9a7a41096eaaa52a6e9582b577423adbea321091d6edb76b5369b18885e6cb9e319c5c42aa5a224603bc3c38d72ff670df028c17dadfd41b2827313bca0b80bf2d1971fae79b474566c96788a7bb0bfbca4ba5e0e4be559d6caba705c590585a4dbd436ffc43017ad499427f63", 0x7b, 0x7}], 0xccd2, &(0x7f0000000200)=ANY=[]) lseek(r3, 0x0, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x7ffffff9) 13:35:51 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x81) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r2, 0x0, 0x7ffffff9) 13:35:51 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100001100) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:35:51 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) 13:35:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="08020000180000022abd7000fddbdf2500000000000000000000000000000001640101020000000000000000000000004e2100004e2400000a00a08000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fallocate(r3, 0x8, 0x0, 0x5133) r4 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, &(0x7f0000000180), 0x40, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000400)) 13:35:51 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x200100, 0x1) 13:35:51 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:35:51 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x282883, 0x12) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:35:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) splice(r1, 0x0, r0, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=@expire={0x29c, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@multicast2, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x3, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @migrate={0x9c, 0x11, [{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x33, 0x4, 0x0, 0x0, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@rand_addr=' \x01\x00', @in6=@mcast2, 0x33, 0x1, 0x0, 0x34ff, 0x2, 0x2}]}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x5}}]}, 0x29c}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:35:51 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:35:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="08020000180000022abd7000fddbdf250000000000000000000000000000000164010102000000000000000000000000062100004e2400000a00a08000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32], 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:35:51 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000a, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r3 = fsmount(r1, 0x1, 0x74) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r3, 0x0, &(0x7f0000000140)="27bdb2249bc560a0e4c262f79c67cb845c7025445af7ff7895df2d2351cbc23eaee36d0744c464024a80d1fd5ed10c4711e75841f220197475d4762a9fbad6ce80933698d1a4d21d1662d144851c2420f0a5fa7c2117eb64ceebc0cda803abfdd1979e70a69751e2e45e12d908d994e3bfcaae9b0ad5c634fe1f0e1a8063b208bcbf3044", 0x84, 0x810, 0x1}, 0xffffffff) r4 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r5, r4, 0x0, 0x7ffffff9) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$AUTOFS_IOC_FAIL(r6, 0x9361, 0x80) 13:35:51 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, &(0x7f0000000180), 0x40, 0x0) write$binfmt_elf64(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1786], 0x70c) r5 = signalfd4(r2, &(0x7f00000000c0)={[0x5ab]}, 0x8, 0x0) fspick(r5, &(0x7f0000000240)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x5d344, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2032}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r6 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x1f, 0x4) r7 = openat(r6, &(0x7f0000000140)='./file1\x00', 0xa401, 0x1) r8 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, &(0x7f0000000180), 0x40, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000300)={0x0, 0xfffffffe, 0x4, 0x1, 0x18e, 0x0, r9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r7, r2, 0x0, 0x7ffffff9) 13:35:51 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:35:51 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x1a60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:35:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000002c0), 0x5, 0x840) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:35:51 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) r5 = eventfd(0xfffffff9) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r5}}, './file1\x00'}) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) 13:36:04 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:36:04 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) unshare(0x40000000) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:36:04 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r3 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, &(0x7f0000000180), 0x40, 0x0) sendfile(r4, r1, &(0x7f00000000c0)=0x4, 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r5, r2, 0x0, 0x7ffffff9) 13:36:04 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100004000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:36:04 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x339580, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a80)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r4, 0x4b42, 0x0, 0x4, 0x2, 0x0, {0x0, r5}}, 0x90) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x1, 0x0, r0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r5}}, 0x1000) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:36:04 executing program 6: r0 = syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20840, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xd, 0x12, r0, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x6, 0x0, 0x0, 0x3, &(0x7f00000000c0)={0x0, 0x989680}, 0x1, 0x1, 0x0, {0x0, r7}}, 0x7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x44}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc0000, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r8, r3, 0x0, 0x7ffffff9) 13:36:04 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) 13:36:04 executing program 7: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index=0x2, 0x2, 0x0, 0x79400000, 0x4, 0x1, {0x0, r3}}, 0xfff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = dup2(r4, r2) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, &(0x7f0000000180), 0x3e, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000400), 0x1255886, &(0x7f0000000300)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYRES16=r0, @ANYRESHEX=r6]) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4a001, 0x3) stat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)) symlinkat(0x0, r4, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000280)={0x9, 0x2, 0x8}) syz_io_uring_setup(0x259f, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0xffff, 0x0, &(0x7f0000000200), 0x20c0036, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendfile(r8, r5, 0x0, 0x7ffffff9) 13:36:18 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100004100) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:36:18 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:36:18 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="570b000000000000090000006c653100369279ca81c1304b6422948a3b76df1728b3fbaa2b09900e4020db16ad98a74dc3edfab50ff8913a76566b5ae358979e51911877670e2d532f90b88f0db36602d93c6839332ef57d9ab93aa6cd70788efebc78cda7d5f09c73a54d441c1c9c2d67ea846fb717dacdf67a5a2a89571fc0ba"]) symlinkat(&(0x7f0000000180)='./file1\x00', r4, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x8080, 0x102) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:36:18 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000004717b53c15897b2e"]) fcntl$setstatus(r5, 0x4, 0x2000) r6 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, &(0x7f0000000180), 0x40, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[r4, r7], 0x2) lseek(0xffffffffffffffff, 0x7, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x7, 0x4e, &(0x7f00000001c0), 0x1010, 0x0) lseek(r3, 0x4d, 0x1) sendfile(r8, r2, 0x0, 0x7ffffff9) 13:36:18 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) 13:36:18 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="08020000180000022abd7000fddbdf2500000000000000000000000000000001640101020000000000000000000000004e2100004e926dd34e058e2400000a00a08000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:36:18 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r0 = syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) creat(&(0x7f0000000140)='./file1\x00', 0x80) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0xee00) fstat(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, r4, r5) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000280)=ANY=[@ANYBLOB="2800000000e5b75697310223de000000180000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB='./file1\x00']) lseek(r3, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) r7 = syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r6, r3, 0x0, 0x7ffffff9) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r7, 0x8000000) 13:36:18 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f00000000c0)={&(0x7f0000000140)=""/108, 0x6c, 0x9, 0x1}) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000002e00)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000140)={0x0, [{}, {}, {}, {}, {}, {}, {}, {r23}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {0x0, r5}, {0x0, r19}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r24}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r21}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {0x0, r22}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {0x0, r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}], 0x7f, "9656c75f04ba4d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000050b80)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x7, "358a0e49e6d977"}) symlinkat(0x0, r1, 0x0) r25 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000240)='./file1\x00', 0x8, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000280)="1751d6dbf170904d68274203e367e21e435e798de9a6ca76849b0092c4047ada1d3d", 0x22, 0x9}, {&(0x7f00000002c0)="69d9258542cd59f5af61c5e8bedf5fc4192501064624066c03731d1a02d2ee8068a0490b38e7b014e69d706a8774ac26", 0x30, 0x800}, {&(0x7f0000000300)="ebf330d0b6a7c25c8dadda473a54b4c45f9dd7c12c1080914e9aaf11c7110cbc950ac9201e8fef355911de4134e1119bfe880f42870488696f61bb07454a9a1ac59caa9ae6ecf405219f6f45cfe14283bfc914c25874032b1ca91a100dee90f38a9215d09834ab81cde3553c256065a1a2649eef8a57f99232", 0x79, 0xa4}, {&(0x7f0000000380)="80e892407ac6e0aa3aa299fedb02f033aad14a4816e0ab530ef2762380573bd8e24bae4c2be2c0c026dfc464a725a0d8eef3cf7ddddc3b797b626ab00b9d63e375b17c111c1c9fb115b4a84b72890e4826db7c448bb6f5209bb4982380756347ac792aa12e2216aae507d0837ea47a14c68f25b0cb470b8f97918b6b68e6defbcea4e5810249d580378013d394ab5a707560980a58ad8b0eb923e52b8d629521fd9e6eb97d72f4099802917c", 0xac, 0x1}, {&(0x7f0000000500)="a13dfd7899a096090d69c3ad3ba499e553570dff30523a21b6c5b93c3b06569247dc3a834ce5e5efe0c58739d0aa98823943769fb720e59f791040a5123922c098969a67a362fe7b22b7930b41d119eed787edafe138d357a726601799d73faf54054a2cb003cc84e0b172390534231644831d5ea4ac4ae471b834e0cf7b7734a9f04a13fcec48e065d96ac85d1d06daf56564cd337604bdd4693f7833", 0x9d, 0x677}, {&(0x7f00000005c0)="39ce5ccdaf44a7802f2fc8f5998bc6f41008b91b2330116505d338f0e983407b29e7d555806b8556dd8ed80e4beff77ab0cfcae174c7a1991b691c02db9a85b25a30106302613893d6c87332d31050877ddadbef277de0ddfe32d3a273fb50bd08fe80c65afff7474b1d09de4683d287471ef3073418c218460c986231a1364764d62fb1ad6d0cbcfe55a46ae75d941f3aa4a424241191d7a903ca92104ec8e8f7ac36a54b6e3357b2afceefac45e596df8dbdb51c1b83591d7741f74e6be87e1ef2c2", 0xc3, 0x5}], 0x1080000, &(0x7f0000000780)={[{@size={'size', 0x3d, [0x74, 0x78, 0x65, 0x70, 0x78, 0x67, 0x39, 0x39, 0x78]}}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@huge_always}, {@huge_never}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@fowner_lt}, {@smackfsdef={'smackfsdef', 0x3d, '-&*\x91\'\xc0}@^[)^\x88][&)#'}}]}) openat(r25, &(0x7f0000000840)='./file1\x00', 0x18100, 0x120) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:36:18 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@expire={0x208, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d4, 0x2b}, @in=@loopback, {0x3, 0x9, 0x3, 0x4, 0x4, 0x100, 0x3, 0x5}, {0x530, 0x800, 0x2, 0x3ff}, {0x3, 0x1, 0x7fffffff}, 0x70bd25, 0x3501, 0x2, 0x4, 0x20, 0x40}, 0x4}, [@algo_auth_trunc={0xdd, 0x14, {{'md5\x00'}, 0x488, 0x180, "dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c"}}, @proto={0x5}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@multicast1, 0xa, 0xe0, 0x7}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) sendmmsg$inet6(r2, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x5, @mcast1, 0x9}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000002c0)="7621b642fd1df4e51ddd9da7691bff96c2521d9648b2f8f650940026705564b2e03a007c922e21bc369941e623c6b8ab7e2f563e609598ee1164be", 0x3b}], 0x1, &(0x7f0000000340)=[@dstopts={{0x20, 0x29, 0x37, {0x33, 0x0, '\x00', [@pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}], 0x38}}], 0x1, 0x4040003) 13:36:31 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) 13:36:31 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100008100) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:36:31 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r2, 0x0, 0x7ffffff9) 13:36:31 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r2 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) timerfd_settime(r5, 0x0, &(0x7f00000002c0)={{}, {0x77359400}}, &(0x7f0000000300)) splice(r2, 0x0, r4, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="08020000180000022abd7000fddbdf25000000000000000000d2b6b7dcb8a297d40000000000000000004e2100004e2400000a00a08000"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000000000000000000000024000004d42b0000007f00000100000000000000000000000003000000000000000900000000000000030000000000000004000000000000000400000000000000000100000000000003000000000000000500000000000000300500000000000000080000000000000200000000000000ff030000000000000300000001000000ffffff7f25bd7000013500000200042040000000000000000400000000000000dd0014006d6435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008804000080010000dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c8a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c000000050019000000000028001a00fe800000000000000000000000000029e00000010000000000000000000000000a00e007"], 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 13:36:31 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000001c0)='./file1\x00', 0x0, 0x3, &(0x7f0000000500)=[{&(0x7f0000000280)="e5d8849ce18c593d7b644926", 0xc}, {&(0x7f00000002c0)="27befa86016b10ca86a6fa201c66d7031a4f42dc1c357102b7a51f25a99fa2ac28b2e9a92ed5c780dbbe3ee5bc16564128b3d55a3339730252f05705ad94aafa416fb6e2e468cc1083ae95e4deb66d8d8831ff42ed3eb1257efecfff", 0x5c, 0x8}, {&(0x7f00000003c0)="938008248412f947e926a0a5b8261d825c325305bcba1e70cc8b646cf037198e8c571ae85cbd912fa9c4360997fe77b38a847d6fb20396", 0x37, 0x6}], 0x212d, &(0x7f0000000580)=ANY=[@ANYBLOB='subj_role=+-@.:,defcontext=unconfined_u,uid>', @ANYRESDEC=0x0, @ANYBLOB="2c75692fdee86435", @ANYRESDEC=r3, @ANYBLOB="2c00e958da0accc07cd077de83069562fed12bba14cec64b2bd6047daad5dcf99355dbed1ce1b93007f52a3b89005aa5b2c15b451bd9c5269b497d4aecc9dae04c90b1ac91b5000000000000000000000000000000000000000000000000000000000400001000000000"]) lseek(0xffffffffffffffff, 0x7, 0x0) r4 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, &(0x7f0000000180), 0x40, 0x0) write$binfmt_misc(r4, &(0x7f00000000c0)={'syz1', "d6f336b91e51c80b1546"}, 0xe) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r6, r2, 0x0, 0x7ffffff9) 13:36:31 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:36:31 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:36:31 executing program 0: r0 = syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r3, 0x0, r4) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r8, 0x0) recvmsg$unix(r7, &(0x7f0000001cc0)={&(0x7f0000001980), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000000440)=""/57, 0x39}, {&(0x7f0000001a00)=""/157, 0x9d}, {&(0x7f0000001ac0)=""/15, 0xf}, {&(0x7f0000001b00)=""/66, 0x42}], 0x4, &(0x7f0000001bc0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x2000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001d00)={0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002180)=[{{&(0x7f0000000140)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000001780)=[{&(0x7f00000000c0)}, {&(0x7f00000002c0)="bae033b0fa681d6512d42d86f5324a9ff764a115e8cdbe3709ed2fbe5e5cc78f1876dfea9f2104a42829c0b420529eb0e48e04b1c7a2f7e90c3d9966ff03131b8bea7828a62107bb1909380af98e59e05161fe4f540a1c7294be0705abd66e2bd4662172f4899c092d054374c568e27d50aee3cb4223e7a9a2679c3f37bf91d5cf", 0x81}, {&(0x7f0000000380)="f1c2799599f10222685c599a19784b609057bdaa20bf9f9bf33679157964b134a71820519a6fe6de01faf03a2ddf74bbde25d9fac7c2d30b83441db285348055f39f3b6697be15536a2f4320ac4358b321cd74cd3e118f2be10604aac028ba3a07ecfa00801bf04b37aee28c700cbd3cdb649ba5a6ed8bd5b572840858ee", 0x7e}, {&(0x7f0000000500)="32c22fae3b63190af32a5a3193d64f8046b9297f8eaca125d6a3d825c9cf5ff713ca937c747f1e1eb0a5f022fc24c6ff1665d571edeebafaf016dd02ca0088ce16b1084d", 0x44}, {&(0x7f0000000580)="66c7bb968a452245646a1243edecc7e55514fd0187f9147424d62cf57cc95d929356ea66a7999db4ecbe0a5e3a796a660950a4595d67d696c7ed4ef03ab1a7bc1a4d6c297c1d8be778a6d27226d468588ec23fb232b8cadc7908bfccd874ee2f5482442d7c7c3eee9ce04b4e4617099f18", 0x71}, {&(0x7f0000000600)="b3bbdd3034acccafeb63357859c8613a4eb29b6ad96357524064b48fae94b99a3f6dfe4271388eb2f817e8e45cc6e576dcbd18301457bc896746bdf70e193a1cd590373bd051a19979a054a9f20ce954084d457439e2a188448a2c779685571908", 0x61}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="3f0105f8db39bb5f0949555282b2c40b3a6c608eb8b7ce96ec0514f6729879eb55f143e79700027394bc0c91a88478a4939eaaf335c27ee391a1f5a530b8f30d4b2d1b22e1b9c5cea243d8098b002297f4f41819ca6f205bf1dba6c549c2a7e2e6fe1b954e71d53f348108ffb7cc917df0734aff70922b1600dcd078a6b8", 0x7e}, {&(0x7f0000001700)="3d7031af8038b3e7157a3fab8cb28fc869b289ed4b5f0a537a0fe31de87b5556756cc30b2c2c95a13abccf3c2663410fdc4b0b4297dec6027077c3ddca6a0840ba65b15301d3d59bf67e7dc063e783a091ee9db1abe826f8bb51f6505b1b7ff19c8cc52f297a3376", 0x68}], 0x9, 0x0, 0x0, 0x4104}}, {{&(0x7f0000001840)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000018c0)="68e9463cfdfb464b8ba1b393085c8da915ea6d5fa95b6111599bb0b4c7b6606ef35ce2b294a5e5b1c70819ccb857d07f46d0c7de9bae65b0b57bc5a3035cbc9d10ed4c94a5302a48c27291be324f8f5c0ef5d4e587d961412dae779f279999978dd85cbbb916d4190e504a230606345cd54245a191243889c1b54e5eb9cb9c62afa2f32eca787987f08417a8d4032f2923bec166d2376ea9816e30123b764febbd45e689924ff563bbaa7b0b19adf1267a0101", 0xb3}], 0x1, &(0x7f0000001e80)=[@rights={{0x20, 0x1, 0x1, [r4, r12, r0, r5]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8, r11}}}, @cred={{0x1c, 0x1, 0x2, {r13}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}], 0x80, 0x48c0}}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001f00)="4086f9219749dd25fe48bc49dfa3dab888aad18a97a0db7621cd3043c8ed442cb121c3870598eea623faa69ded2d8beb799088ff5dbe", 0x36}, {&(0x7f0000001f40)="c7509064542929591da0a94f2401647f1ab9a7e30c02e0c43d3a8fd5d2e6df04f4cad506a21432dee22070d9eb44aa33dd9be28b0efa50d923e36772edb218ff88947aa7cc417bc55fc4e8802f", 0x4d}, {&(0x7f0000001fc0)="1acbc471fb49d4f7ad06cab5f05b1fa0dac270aab6f251a75c61aa873326e51077acc36859df7861713e1af4042444f8fa48b215fd176bf4a5ff593aff4e7e533022d4e380aab29b3761", 0x4a}, {&(0x7f0000002040)="ccb333e32710d78e890397e30361d78d9a0ab444e2f8ab178e7b1b3de1b351ba82bb8b31d571b9b1cefb12ee5b2988bc8967c31fa80ea569eeff2c82514828ea0ea2278c6b7cd9e206f4a162b27bdf90910a390e47ffaca0e3f6410dc693a69c00bcdca9d438ab276c9f7df20848310e6fc4a2de40a4fccbb565c129c5e37ce0236c5fe10eb6d9524bb47be756e666137f512b9dfc8518d5abe2d0394f43e32343bb6c88292ee42f2ed83d616d680dfb27e745edc7cb0875c07635598c658b99eceac78c9a2b", 0xc6}], 0x4, &(0x7f0000002340)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r9, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r10, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000023c0)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000002440)="3065f1521d0035d2d394ec9ff2bf5f9cd8f09a0334b9e4d7bdd25f3a44ce52285aee6c2364c4552676c8ea775b12463e9984a5f310575455f197ad77c93439620677200b44c1ee616a04c6aa5e0c588d36a9d17d633fb4edd1fe1ab0c5daf593cfe32a57a538c0c56c51ae5d9771fe3018390be4e79e34b5db4f09fa46fa015b6739f6512e480682682ce4bac76b6a663bc6bd3c31cec40f7c48915bf67175b6ed07c56e0c4a8b", 0xa7}, {&(0x7f0000002500)="e59ff2a52eb8cae202b0452c912865d63f2f205e577943558bfd614e43d92ca3a95c758961d861760c7d1bce0e6e0c3a84d232f61af70749a482f9ded770452b7f5094379bb9be736762830f23848681e82a0c745ee1bfc1e48c3d57e271a77c563abf22a74973d11a2db087bda1e8783af6c510b88cc3eaa237c8dd2defade40b102acee66b5b889a5c639506e987238380af6f1f3605d1b1468d51718ce9bb09ad680153603f7e", 0xa8}, {&(0x7f00000025c0)="1ca71c202078389f70b6ec5dd63b7d9541f0f5e0c6597d7674f2b2c3c9490100272143f9360e742993a0fe1f71d12e6079689f289b32c4", 0x37}, {&(0x7f0000002600)="ee223af0b1ed5ddc13b687b311b14cd2c0c6370aeba9ad10ef68658e06f44cc216187c01b9a0958ba589bc09be1dbcb4c5a62f6009c9932d2c80fdcffa3908e35a18449670824fccadf8d47cd0779f874a07278728308b7f98cc065891ff24237823b89752481ba58b0a061cfb494c5bfc16f8eabe2805325c11868e9359d88e17a071d4f13e9408c1064fa581a11a0c59b45d8ae03a857171ed791107e1cfa7e6e2278f457416a82471a3aa13fe8e793752772aa187999fe9e6dd75a1f93dee7818d713db4d79e64c752a9dfa6a54a884c630d0a91c6def7bb10dc06bf7fe0c8edcf8d96f377919aec73f019d4c", 0xee}, {&(0x7f0000002700)="a130edaec5564d980ce4ae698770d13983c465e285b4ce5936d513fbf9026cf46543463572dbbf47177c32111d09d9086998b56e2a5d9be2ee831653e0eae092f943d3a6f1615af7f7371aa030", 0x4d}, {&(0x7f0000002780)="ffb21447a8fe48087c89f816f43a644a940e96c4b988d134dadd8f443be106c210c563b8f7f49afbe05e614f0375da107fe927a49dd4508a34f0a50ea1770525de18a930eab92e973351b5aef1b151d16d2c6e353f816d3465b0ab1a0a02f26dd0c1dba5af48f47dab714c43fdfcc7ae3086aa88234c87ee50f1f43f4a9a4838abb9d9adb0aa1e256acf078116581eae39fc64513330ea8ec9cb655d1d129d1c55e05e8131d90ed8f3eb03857baf8bcf787e2fa14c6569c692d2502c6c3333f8d53b8d5044cc3fd5bc8f645dd8", 0xcd}, {&(0x7f0000002880)="0b340bf233f741b81540837cfd4d62ab73f25f7d5219f8df6790b4d181d3f537dea5154ab01b537ba847018cc7d39ca45b4344d4cd12a4532d05ac4334d01a0d3fd1e074c0119d71a4ae4ec11fe229868585c08322959b87bc8dee40900da2ccf91bb00c6608e303616f64569cc58bf38d80a2c839287ad9463dafc3cb553dab553e2272c318e5ae95024befb7d40c6a16039cf0840c2f6609e28023ba924cfa9457ea0b312ee1c18404034c672074eb67c7d9f2a4c9d792f46cec3d8ba5965e30967802b3e3072facf962615aa470bf1f0deda2e53bf2", 0xd7}, {&(0x7f0000002980)="4c0678296b5279dfc19806a24bfc5204f3e55523956df707c4a3b8f589da6a3ce54ebae66b866fffdd14eae3b526b231305e9ac71fbfae1e0f586c1a44b6e3b33bedd0a6d129dc439c7beb4194aaec27fbacd08e62d22fb8144dc4c9c91abbaae54e5564213dd449f10a2b1babb038", 0x6f}, {&(0x7f0000001d80)="b306ff9dd1a4b365298e6ad446b8aa48c38cd78ecacbba335fe1dcb304ee9f0c496a160c64ae89db6a01ead28677c245407c58854611580c72fc1060215142224c56e333e7033780a1e8317d9eb9b39006c79f232f4a72bb8ea6d10e50ca34d98363faa42d442f97f47a1de2125ec849ba3a0c9064337b508e21aaef064162dad7ac9d0a506bc72da3e1ece1ea2e94662ee2e30bd83077a6b0fd2a8543657117972d0b02448f3d5c8955d7058e792aa5e38acc7f15bbfb982d40438c79877a8020396fd32dce44219daad5", 0xcb}, {&(0x7f0000002a40)="9429931f711160dedfdeb9233d5d6986cb700b2062378d18402a1b1ea078adc856795541094398", 0x27}], 0xa, 0x0, 0x0, 0x4000000}}, {{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000002b40)}], 0x1, &(0x7f0000002bc0)=[@cred={{0x1c, 0x1, 0x2, {r13, r8, r11}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58, 0x20000001}}], 0x5, 0x4000000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r6, r3, 0x0, 0x7ffffff9) 13:36:31 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:36:32 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) r1 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, &(0x7f0000000180)=0xfffffffffffffffc, 0x40, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="08020000180000022abd7000fddbdf2500000000000000000000000000000001640101020000000000000000000000004e2100004e2400000a00a08000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000000000000000000000024000004d42b0000007f00000100000000000000000000000003000000000000000900000000000000030000000000000004000000000000000400000000000000000100000000000003000000000000000500000000000000300500000000000000080000000000000200000000000000ff030005000000000300000001000000ffffff7f25bd7000013500000200042040000000000000000400000000000000dd0014006d6435000000000000000000000000ad0409b49a9ee980d995c67d8b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008804000080010000dfdd38103d7909b9aa83eb793ed69da97fa61cac93ce9d0c744c868f1c7ee459a7ddbed93284211014ed7a01a735fc970d9eae5518c84048f30778a4c76cdc694873f936b674e5c22c07d1238b163d0335d16a380fe68c28ff9866778762ae0855770f1243ad14e138bb46707f52b66da4c36ab7328c048d5b1cb65e362fe0b7552b3053d2f5e616275733c9249c6f4051773afb727c000000050019000000000028001a00fe800000000000000000000000000029e00000010000000000000000000000000a00e007761c3e4cbd01a6412132edb1bc269948f3e0c1db15f54d200bc6f7247b85add243da397b62ccb9473ceba81f1a4771dbd6cf3fd21f3c6d2c849696f1147b57b598669b27938fb57e14819ce0da09a9ba1c0223e3994825945005498f73905d"], 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40001) r3 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x12000200) splice(r3, 0x0, r4, &(0x7f0000000180), 0x40, 0x0) lseek(r3, 0x7, 0x1) 13:36:32 executing program 0: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000000c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) fallocate(r4, 0x15, 0x1, 0x57d) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r2, 0x0, 0x7ffffff9) [ 2207.045564] devtmpfs: Unknown parameter 'subj_role' 13:36:32 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:36:32 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = signalfd4(r1, &(0x7f0000000140)={[0x67]}, 0x8, 0x800) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x1a4, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x30}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @empty, 0xfffffffe}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'netpci0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6gre0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xb8cf, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd4e}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00', 0xab83}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @remote, 0x1}}}}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000}, 0x400c040) r3 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) r5 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, &(0x7f0000000180), 0x40, 0x0) openat(r6, &(0x7f00000000c0)='./file1/file0\x00', 0x20880, 0x43) 13:36:32 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:36:32 executing program 0: r0 = syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = dup2(r3, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000140)) copy_file_range(r3, &(0x7f00000000c0)=0x7, r5, &(0x7f0000000180), 0x96, 0x0) lseek(0xffffffffffffffff, 0x7, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r2, 0x0, &(0x7f0000000240)='./file1\x00', 0x9d, 0x620000, 0x23456, {0x0, r6}}, 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r7, r4, 0x0, 0x7ffffff9) 13:36:32 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) symlinkat(0x0, r1, 0x0) syz_io_uring_setup(0x313a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) pipe(&(0x7f00000000c0)) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:36:32 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(r3, &(0x7f00000000c0), &(0x7f0000000240)=@v2={0x3, 0x2, 0x6, 0xfffffff7, 0xe2, "2f518538438e9e4f7b559ec962618540777587c349aac573ea9eafe1425eae78e1532b27c343eaedcef375d83683d98caf9dd828a814ddc7b654b7a34b2c4baf9e5bd39c85fbd118e1f5afddd18dcff8ee56a9fdfebaad82e2be1e7bc9375fd9ad360d078770e24ee52374c42406b5f8c70b63c271e0ee3494e64ad3ef8cd4e487bc38ade0ab03f211e956c17402a2ada5c32fc956ea3a9ab329a6d48326e24ab8a13d19e123586002f83580814aafdbc5e590caabd723a6675967d6311278fd924e374e3044b86fe54761482d8c0b0cf5a95e975ba2b361a8bc04e7346200a3bf9f"}, 0xeb, 0x2) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r2, 0x0, 0x7ffffff9) 13:36:32 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1fffffff5) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) 13:36:32 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000002c0)={0x0, 0xfb, 0x4b, 0x4, 0x8, "939fda2d1b17c860e997ba89738d75bc", "75bb34f50d035751580579428ff7c46b724c8922300408ad2daa895c11adcebd6119293dd0dc1188e3ab1e737eaecc3f41bd9467c4b4"}, 0x4b, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) 13:36:32 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:36:32 executing program 6: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) recvmmsg$unix(r1, &(0x7f0000003fc0)=[{{&(0x7f0000000280), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/200, 0xc8}, {&(0x7f0000000600)=""/172, 0xac}, {&(0x7f00000006c0)=""/148, 0x94}], 0x3, &(0x7f0000000300)}}, {{&(0x7f0000000780)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/225, 0xe1}, {&(0x7f0000000900)=""/250, 0xfa}, {&(0x7f00000003c0)=""/50, 0x32}, {&(0x7f0000000a00)=""/92, 0x5c}, {&(0x7f0000000a80)=""/129, 0x81}], 0x5, &(0x7f0000000bc0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000c00)=""/39, 0x27}, {&(0x7f0000000c40)=""/47, 0x2f}], 0x2, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001cff0070000000000001040000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xe8}}, {{&(0x7f0000000dc0)=@abs, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000e40)=""/132, 0x84}, {&(0x7f0000000f00)=""/210, 0xd2}], 0x2, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c002d00000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd0}}, {{&(0x7f0000001140), 0x6e, &(0x7f0000002780)=[{&(0x7f00000011c0)=""/119, 0x77}, {&(0x7f0000001240)=""/214, 0xd6}, {&(0x7f0000001340)=""/101, 0x65}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/129, 0x81}, {&(0x7f0000002480)=""/155, 0x9b}, {&(0x7f0000002540)=""/5, 0x5}, {&(0x7f0000002580)=""/255, 0xff}, {&(0x7f0000002680)=""/200, 0xc8}], 0x9, &(0x7f0000002840)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}, {{&(0x7f0000002980), 0x6e, &(0x7f0000003e40)=[{&(0x7f0000002a00)=""/254, 0xfe}, {&(0x7f0000002b00)=""/219, 0xdb}, {&(0x7f0000002c00)=""/196, 0xc4}, {&(0x7f0000002d00)=""/197, 0xc5}, {&(0x7f0000002e00)=""/6, 0x6}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x6, &(0x7f0000003ec0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0xd8}}], 0x6, 0x22, &(0x7f0000004140)) r6 = syz_open_dev$mouse(&(0x7f0000000180), 0x7, 0x400000) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000004280)={{r6}, 0x9, &(0x7f0000004200)=[0x7fff, 0x4ea4c4fe, 0x1, 0xfff, 0x7, 0x3, 0x337d, 0xe9, 0x6], 0xeb2, 0x6, [0x25d30401, 0x7, 0x90, 0x800]}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), 0x400, &(0x7f0000004180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@fscache}], [{@dont_hash}, {@euid_lt={'euid<', r5}}, {@smackfsdef={'smackfsdef', 0x3d, 'iso9660\x00'}}]}}) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x34, 0x6}], 0x20d2002, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 13:36:32 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1d8}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:36:33 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(r1, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) dup2(r3, r2) recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1d8}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e271159525e169684b31e62f788c9af014a736550000000000000008ac842734b093a61ac589f9a06be567efc6f9b53440e414375dba44a74dd9a331bc91cb028310eb135eef18796b23cfdd11fc11ef3c7cb3d7eaaa7021cbb50e36a31b4471aad184600d0ef18b0f351e0344847ff357e6448cac1878d29579bc720d61aa9e09bc6042d40bdf2d572c2b23f6299c56894adbeb27122f6b91cabf7ddfb59e9ba0ab940e948cb715b5bb82bac7d2f7749614ff8183627c782a072a6d5112b3b371418e5e3fac90a0460b62bc406ac1b79ccb14"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13:36:33 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x48000, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)=""/84, 0x54}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f00000000c0)=""/36, 0x24}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000500)=""/74, 0x4a}, {&(0x7f0000000580)=""/222, 0xde}], 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c0000000000070000000000020000008812a8797146d170e3703845e12b2d817a7543fa53554cc7b5121a21902b426b3b9a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff33be37c200"], 0x58}}, {{&(0x7f0000000780), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000800)=""/118, 0x76}], 0x1, &(0x7f0000000440)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000880)=""/71, 0x47}, {&(0x7f0000000900)=""/113, 0x71}, {&(0x7f0000000980)=""/66, 0x42}, {&(0x7f0000000a00)=""/126, 0x7e}, {&(0x7f0000000a80)=""/6, 0x6}], 0x5}}, {{0x0, 0x0, &(0x7f0000000b40), 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="34000000010000000100000000000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000a2d8dac6cd8cd7f3a02ece5036e3fdd6979c54e2ec7e864f11f1bb48d31b03c69f64abf40c5d5da902a1fa4201a0a7849f2c8e96450996c7267dda7f0a3c2bf98b186a46c3444493aa40636f9331babaca83bea9940eb0839085c61bada0dba4bca7536518a1d12e28019489a22e29115bb5dbba23dc6241b8125e5207325ea818697ec9ea0030cc1eeed334c7afb433f4013cd55180332b0ac0eff382442c5767b64db8e93dcc9b8fb6f949333064c53853f5931ef837e97612dfa61b4f7d6602198d347409888c1b33d650194cc00a8b1e2979"], 0x38}}], 0x4, 0x40010000, &(0x7f0000000cc0)) move_pages(r4, 0x1, &(0x7f0000000d00)=[&(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000d40)=[0xa300, 0x1f, 0x85], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x34, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r5 = timerfd_create(0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, &(0x7f0000000180), 0x40, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000b80)={0x0, 0x7, 0x3}) VM DIAGNOSIS: 13:41:41 Registers: info registers vcpu 0 RAX=ffffffff83e73d90 RBX=0000000000000000 RCX=ffffffff83e5bb8c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e74398 RBP=fffffbfff09c6450 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85674f48 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e73d9e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1f8da6e010 CR3=0000000009014000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00ba02fe016c6c6f502e726567616e61 XMM02=006e65672063657865080a0100010101 XMM03=636578650e007a7a7566206365786509 XMM04=636578650b006574616469646e616320 XMM05=696d20636578650d0065676169727420 XMM06=746f7420636578650a00657a696d696e XMM07=73657220726f74756365786511006c61 XMM08=007a7a7566206365786509006e656720 XMM09=006574616469646e616320636578650e XMM10=78650d0065676169727420636578650b XMM11=6578650a00657a696d696e696d206365 XMM12=6f74756365786511006c61746f742063 XMM13=636578650a0073747261747365722072 XMM14=6e696820636578650a006873616d7320 XMM15=0000736465657320636578650a007374 info registers vcpu 1 RAX=ffffffff83e73d90 RBX=0000000000000001 RCX=ffffffff83e5bb8c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e74398 RBP=ffffed1001130000 RSP=ffff88800898fe70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85674f48 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e73d9e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000561552b1b678 CR3=0000000009014000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000414101cc00000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000